================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, August 11, 2026 - 10:05 AM EDT ================================================================ Artificial intelligence drove the day's security news as public and academic AI tools turned up exploitable Zoom and 5G flaws while OpenAI armed vetted red teams and warned its coming Astra model could reach a critical cyberattack threshold. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] AI is cutting both ways in security as public tools surfaced a Zoom device-hijack flaw and dozens of network bugs while OpenAI's Astra model nears the critical cyberattack threshold. see: AI Tools Discover Real Vulnerabilities; OpenAI's Astra Model Raises Critical-Threshold Concerns * [UPDATE (new)] CISA confirmed ransomware gangs are now exploiting a patched Microsoft SharePoint remote-code flaw and two SonicWall SMA1000 bugs to break into enterprises. see: Ransomware Gangs Weaponize SharePoint and SonicWall Flaws * [TREND] Trust in devices and hiring frayed as Mozilla revoked an exposed Firefox signing key, researchers weaponized malicious SIM cards, and firms unmasked North Korean IT workers in fake jobs. see: Mozilla Revokes Exposed Firefox Signing Key; Malicious SIM Cards Hijack Phones and IoT; North Korea IT Workers Infiltrate via Fake Jobs * [TREND] Reading picks pile skepticism on the AI buildout, dissecting Nvidia's customer-financing risks, Zitron's bearish Hater's Guide, and the disillusionment around AI coding tools. see: Nvidia's Risky Business; Premium: The Hater's Guide To NVIDIA (Part 2); On AI Coding and Its Discontents * [UPDATE (new)] Around Town, Penn Hills support staff reached a tentative deal averting a strike, Murrysville set a September data-center hearing, and Millvale topped $1.3 million for its community hub. see: Penn Hills Support Staff Reach Tentative Deal; Murrysville Weighs Data-Center Rules; Millvale Raises Funds for Community Hub SECURITY ---------------------------------------------------------------- 1. RANSOMWARE GANGS WEAPONIZE SHAREPOINT AND SONICWALL FLAWS Ransomware and Cybercrime · [ransomware, exploit, patch] Latest developments: CISA confirmed on August 11 that ransomware crews now abuse a high-severity Microsoft SharePoint remote-code-execution flaw flagged as exploited since early July, and separately that gangs exploit two patched SonicWall SMA1000 bugs including a maximum-severity server-side request forgery flaw, as municipalities in California, Oklahoma, Wisconsin, and Texas recover from disruptive attacks and Dragos counted 1,140 industrial ransomware incidents in the second quarter, up 12 percent from the first. Ransomware operators are pouncing on freshly patched enterprise appliances and collaboration servers to breach networks and disrupt government and industrial operations. Administrators should apply the SharePoint and SonicWall SMA1000 fixes immediately and treat exposed management interfaces as compromised. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-microsoft-sharepoint-flaw-now-exploited-in-ransomware-attacks/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/ - The Record: https://therecord.media/cyberattacks-ransomware-local-governments - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/industrial-ransomware-attacks-q2-2026/ 2. OPENAI'S ASTRA MODEL RAISES CRITICAL-THRESHOLD CONCERNS AI Security · [ai, policy] Latest developments: SecurityWeek reported that OpenAI's forthcoming Astra model could reach the maximum critical cybersecurity threshold, beyond the high rating assigned to GPT-5.6-Sol, as the company detailed a Daybreak Cyber Partner Program that keeps GPT-5.6-Cyber's zero-day-finding and exploit-chain power with approved partners choosing Daybreak Blue or Daybreak Red and hands clients only the findings. OpenAI now sells offensive AI capability to vetted red-team firms while flagging that its next model may cross into autonomous cyberattack territory. Defenders should expect exploit-development capability to concentrate among a few approved vendors and prepare for faster attacker tooling. - SecurityWeek: https://www.securityweek.com/openais-upcoming-astra-model-raises-autonomous-cyberattack-concerns/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/openai-daybreak-cyber-models/ - The Hacker News: https://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.html 3. MOZILLA REVOKES EXPOSED FIREFOX SIGNING KEY Software Supply Chain · [supply-chain, breach] Latest developments: Mozilla revoked and reissued the GPG subkey that signs Firefox and Thunderbird Linux releases after an unencrypted copy landed by mistake in one of the company's own private GitHub repositories. The key lets users and Linux distributions confirm a downloaded Firefox or Thunderbird tarball came untampered from Mozilla. Distribution maintainers and packagers must import the new signing key to keep verifying releases. - BleepingComputer: https://www.bleepingcomputer.com/news/security/mozilla-updates-gpg-key-for-signing-firefox-thunderbird-releases-after-exposure/ - The Hacker News: https://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.html - SecurityWeek: https://www.securityweek.com/mozilla-issues-new-firefox-gpg-key-following-exposure/ 4. AI TOOLS DISCOVER REAL VULNERABILITIES AI Security · [ai, zero-day, vulnerability] Latest developments: Researchers said a public AI tool needed fewer than 20 prompts to find a now-fixed Zoom screen-sharing flaw that let any call participant hijack another person's device, while Nanyang Technological University turned AI agents loose on 4G and 5G network software and surfaced 84 previously unreported flaws, 83 now confirmed and 81 carrying CVE numbers. AI agents increasingly find exploitable bugs in shipping software; the worst of the Nanyang findings lets an attacker seize a subscriber's data session so the network routes that person's traffic to the attacker. Organizations should treat AI-assisted bug discovery as a fast-moving source of new patches to apply. - Wired Security: https://www.wired.com/story/a-zoom-screen-sharing-bug-let-anyone-take-over-other-devices-on-a-call/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/5g-core-network-vulnerabilities-research/ 5. MALICIOUS SIM CARDS HIJACK PHONES AND IOT Vulnerabilities and Exploits · [vulnerability, iot] Latest developments: Tomasz Piotr Lisowski and Dr Marius Muench of the University of Birmingham, working with Kristian Covic of Fuzzware, showed that a compromised SIM card can order its host device to run attacker commands, testing 26 phones and cellular modules and finding the cellular modems inside electric-vehicle chargers, industrial routers, and car telematics units can be taken over entirely. The attack abuses a legitimate function built into the cellular specification, letting a rogue SIM steal files, disrupt communications, downgrade connections to 2G, and in some cases execute code. Operators of cellular-connected industrial and vehicle equipment should audit SIM provisioning and modem firmware exposure. - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/malicious-sim-cards-hijack-phones-ev-chargers/ - The Hacker News: https://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.html 6. NORTH KOREA IT WORKERS INFILTRATE VIA FAKE JOBS Nation-State Activity · [apt, nation-state] Latest developments: Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe are North Korean operatives, recording every virtual machine the company issued; the first hire claimed to live in Pasadena, Texas, then sent a California driver's license and a New York bank account. North Korea funnels operatives into remote technical jobs to earn wages and gain access, and the recorded onboarding paperwork gives hiring teams concrete red flags to check. Employers should scrutinize identity documents, banking mismatches, and remote-access patterns during onboarding. - The Hacker News: https://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Fires on Ship Defying Iran Blockade Latest developments: A U.S. military helicopter fired on a Panama-flagged ship on August 11 after its crew ignored warnings to honor the American blockade of Iranian ports, an escalation as Brent crude retreated from $90 a barrel. The United States has blockaded Iran's ports in the aftermath of its war with Iran, and a helicopter firing on a merchant vessel that broke through raises the risk of a wider confrontation while talks to reopen the Strait of Hormuz continue. - WSJ World News: https://www.wsj.com/world/middle-east/u-s-fires-on-ship-breaking-its-blockade-of-iran-d8b99456?mod=rss_worldnews * Private Credit Braces for Shadow Defaults Latest developments: The Wall Street Journal reported August 11 that private-credit firms are clamping down on loan sweeteners as borrowers delay interest payments on billions of dollars of loans, stoking fears that defaults run higher than reported. Borrowers have deferred cash interest on billions of dollars of private-credit loans, and lenders tightening those terms signals that distress in the fast-growing private-credit market may run well above reported figures, a vulnerability bank risk officers track closely. - WSJ Markets: https://www.wsj.com/finance/private-credit-firms-clamp-down-on-loan-sweeteners-in-fear-of-shadow-defaults-58ac13ec?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Today: Showers And Thunderstorms Likely, high 83F. Tonight: Showers And Thunderstorms, low 66F. Wednesday: Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 84F. Business: * Western Pennsylvania Gas Prices Fall Latest developments: AAA East Central reported August 11 that gas prices across Western Pennsylvania dropped six cents this week to $4.191 a gallon. AAA East Central's weekly Gas Price Report put the Western Pennsylvania average at $4.191 a gallon, down six cents, easing pump costs for the region's drivers even as global oil prices swing on the Iran conflict. - WPXI: https://www.wpxi.com/news/local/aaa-gas-prices-western-pennsylvania-fall-this-week/77MVAVDBARF25OYIGHWMFYAJBE/ * WPGH Launches Nightly Sports Show Latest developments: TribLive reported August 11 that WPGH will debut 'Pittsburgh Sports Tonight,' a local weeknight sports program, on August 31. The Pittsburgh station WPGH will air 'Pittsburgh Sports Tonight' from 7 to 7:30 p.m. on weekdays beginning August 31, hosted by Bill Hillgrove's grandson, an investment that bucks the trend of local newscasts trimming sports coverage. - TribLive: https://triblive.com/aande/movies-tv/tv-talk-wpgh-plans-nightly-sports-show-hosted-by-bill-hillgroves-grandson/ Around town: * Penn Hills Support Staff Reach Tentative Deal Latest developments: The Penn Hills Education Support Professionals union said August 10 that it reached a tentative contract agreement, heading off a threatened strike. The union representing support staff in the Penn Hills School District announced a tentative agreement after prolonged negotiations, averting a strike vote as the new school year approaches. - WTAE: https://www.wtae.com/article/penn-hills-support-staff-strike-vote/73377750 * Murrysville Weighs Data-Center Rules Latest developments: TribLive reported August 11 that Murrysville will hold a public hearing at 6 p.m. September 2 on an ordinance regulating data centers and solar development. Murrysville council will take public comment September 2 before its meeting on a proposed ordinance governing where data centers and solar projects can go in the Westmoreland County municipality, part of a wave of local rule-making as data centers spread across the region. - TribLive: https://triblive.com/local/westmoreland/murrysville-will-hold-public-hearing-on-regulations-for-data-solar/ * Millvale Raises Funds for Community Hub Latest developments: TribLive reported August 11 that the Millvale Community Development Corp. has raised more than $1.3 million for its North Avenue community hub after landing a new grant. The Millvale Community Development Corp. topped $1.3 million in funding for its North Avenue hub project, and construction on the building continues in the Allegheny County borough. - TribLive: https://triblive.com/local/millvale-community-development-celebrates-funding-received-for-north-avenue-hub-project/ SPORTS ---------------------------------------------------------------- Around the Teams: * Steelers Bank on Omar Khan's Line Investment Latest developments: The Post-Gazette wrote August 10 that the Steelers are counting on general manager Omar Khan's heavy draft spending on the offensive line to pay off this season. General manager Omar Khan has poured high draft picks into the Steelers' offensive line, including tackles Troy Fautanu and Broderick Jones, and the Post-Gazette frames 2026 as the season that investment must deliver up front. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/10/oline-offensive-line-khan-fautanu-broderick-mccormick-frazier/stories/202608080016 READING ---------------------------------------------------------------- * Stratechery -- Nvidia's Risky Business Argues that Nvidia is finding new ways to help its own customers raise money to buy its chips, deepening the financial risk baked into the AI buildout. https://stratechery.com/2026/nvidias-risky-business/ * Cal Newport -- On AI Coding and Its Discontents Examines the promise and disillusionment around AI coding tools through the story of a converted Silicon Valley engineer, weighing what the tools deliver for working programmers. https://calnewport.com/on-ai-coding-and-its-discontents/ * Ed Zitron -- Premium: The Hater's Guide To NVIDIA (Part 2) Continues Zitron's bearish case against Nvidia, dissecting its financials and its insistence that it is nothing like Enron, WorldCom, or Lucent. https://www.wheresyoured.at/premium-the-haters-guide-to-nvidia-part-2/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,736.16 ▲ +3.8% Dow 54,066.60 ▲ +3.1% Nasdaq 26,518.55 ▲ +5.5% WTI crude 77.72 ▼ -5.8% EUR/USD 1.1536 ▲ +0.7% GBP/USD 1.3459 ▲ +0.6% USD/JPY 157.82 ▼ -2.4% ================================================================ Generated 2026-08-11 10:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================