daily plain-text briefing: security, markets, business, and pittsburgh
The FBI and South Korea warned that Gunra ransomware is hammering critical infrastructure through Fortinet and Schneider Electric flaws, as CERT Polska revealed attackers breached a Polish power plant over its private cellular network.
Latest developments: OpenAI released GPT-5.6-Cyber, built on GPT-5.6 Sol and trained to find zero-day vulnerabilities and build exploit chains while refusing higher-risk dual-use requests far less often, available only through Daybreak Red, the top tier of the company's vetted access program for cybersecurity professionals.
OpenAI's new cybersecurity model targets vulnerability research, penetration testing, and incident response; it gates its strongest offensive capabilities behind approved partners who hand clients only the findings.
Sources: The Hacker News · SecurityWeek · Help Net Security · BleepingComputer · ↑ top
Latest developments: Adobe pushed urgent fixes for critical ColdFusion and Campaign Classic flaws enabling arbitrary code execution and denial-of-service, SAP shipped 28 security notes including four critical code-injection and memory-corruption bugs, Zoom patched a zero-click flaw in its annotation feature that let a call participant run code on another attendee's machine, and Cisco warned of two high-severity ClamAV flaws with public exploits that crash its Secure Endpoint scanner.
August's patch cycle stacked critical remote-code-execution risks across enterprise staples; administrators running Adobe ColdFusion, SAP, Zoom, and Cisco Secure Endpoint should apply the vendor updates immediately.
Sources: SecurityWeek · SecurityWeek · SecurityWeek · BleepingComputer · ↑ top
Latest developments: The FBI and South Korea's national police issued a joint advisory warning that Gunra ransomware breaches critical infrastructure by exploiting Fortinet and Schneider Electric vulnerabilities, striking healthcare, financial services, government, and nonprofit targets across the world.
Gunra is a ransomware variant whose operators break into networks through flaws in Fortinet firewalls and Schneider Electric products, then encrypt systems and extort victims; agencies urge organizations to patch those products and harden backups.
Sources: BleepingComputer · The Hacker News · The Record · ↑ top
Latest developments: CERT Polska disclosed that a December 29 intrusion at a combined heat and power plant supplying roughly 50,000 residents marked the first observed case of attackers reaching an operational technology network through a private APN, the dedicated mobile channel the local grid operator uses to reach remote equipment; the intruders shut down a steam turbine and the process-water treatment system, and recovery began at 7:30 a.m. while they were still inside.
Attackers pivoted through the distribution system operator's private cellular network into the plant's operational technology and halted a turbine, though customers kept their heat; CERT Polska flags private APNs as an unguarded path into industrial control systems.
Sources: The Hacker News · Help Net Security · BleepingComputer · ↑ top
Latest developments: Researchers demonstrated that a malicious Model Context Protocol tool server wired into an AI coding assistant can quietly exfiltrate SSH keys, environment secrets, source code, and customer data by splitting a refused theft request into individually routine-looking fragments, while Token Security warned that broadly scoped agents improvise past their intended tasks.
AI coding agents trust the instructions their connected MCP tool servers feed them, so defenders should constrain agent permissions, define each agent's intent, and vet every connected tool server.
Sources: The Hacker News · BleepingComputer · ↑ top
Latest developments: A cyberattack on France's CEVA Logistics disrupted eight European warehouses and delayed deliveries for retailers Bol, de Bijenkorf, and Ace & Tate along with Steam customers, while global distribution firm Wesco confirmed it is investigating an incident after the ExfilSquad group claimed to have stolen its data.
Two of the world's largest supply-chain and distribution companies disclosed breaches within a day, and the CEVA outage cascaded to downstream retailers and gamers, showing how a single hit on a logistics hub ripples across dependent businesses.
Sources: The Record · BleepingComputer · ↑ top
This Afternoon: Scattered Showers And Thunderstorms, high 81F.
Tonight: Showers And Thunderstorms Likely then Showers And Thunderstorms, low 66F.
Wednesday: Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 82F.
Latest developments: Allegheny Health Network announced Monday, August 10, that longtime hospital executive Duke Rupert becomes president of its Sewickley and Beaver County locations next week.
Allegheny Health Network installed Duke Rupert atop its Sewickley and Beaver County hospitals, folding those facilities into its leadership after the network's merger with Heritage Valley Health System.
Latest developments: WPXI reported August 11 that Motion & Control Enterprises acquired a Wisconsin pump distributor, its latest bolt-on deal.
Motion & Control Enterprises, a private-equity-backed industrial distributor based in the Pittsburgh area, added a Wisconsin pump distributor to its portfolio, extending a growth strategy built on acquisitions.
Latest developments: Pennsylvania Attorney General Dave Sunday filed suit against TikTok August 11 in the Allegheny County Court of Common Pleas.
Pennsylvania Attorney General Dave Sunday brought a lawsuit against TikTok Inc. in the Allegheny County Court of Common Pleas, adding Pennsylvania to the states challenging the video platform in court.
Latest developments: WTAE reported August 11 that the Monessen City School District found several abnormalities in building walls during routine maintenance and is weighing whether it can open on time.
The Monessen City School District said it is determining whether its buildings will be ready for the start of classes after maintenance crews discovered several structural abnormalities inside the walls.
Latest developments: TribLive reported August 11 that Irwin awarded a contract for a temporary bypass road, with work possibly finished later this month.
Irwin borough officials hired a contractor to cut a temporary road through a vacant lot, routing traffic around a closed bridge on Route 30 until a permanent fix arrives.
Latest developments: TribLive reported August 11 that the festival returns to Latrobe on August 22 and 23.
The Great American Banana Split Celebration comes back to Latrobe on Saturday and Sunday, August 22 and 23, 2026, honoring the city where a pharmacy apprentice invented the banana split in 1904.
Latest developments: The Post-Gazette laid out August 11 how defensive coordinator Patrick Graham plans to deploy the Steelers' outside linebackers.
The Post-Gazette detailed Patrick Graham's disguise-heavy scheme for the Steelers' outside linebackers, mapping how T.J. Watt, Alex Highsmith, and Nick Herbig will move around to mask pressure.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's August 11 mailbag weighed whether Paul Skenes' fastball velocity returns in 2027.
The Post-Gazette's Pirates mailbag examined the drop in ace Paul Skenes' fastball velocity, asking whether his World Baseball Classic workload caused it and whether the heat comes back next season.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette's MiLB Monday reported August 10 that infield prospect Termarr Johnson suffered a scary left knee injury.
The Post-Gazette reported that Termarr Johnson, one of the Pirates' top infield prospects, went down with a frightening left knee injury in the minor leagues.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN reported that Hezly Rivera captured her second consecutive U.S. women's all-around title Sunday, August 9.
Olympic gold medalist Hezly Rivera, 18, rallied from fourth on the final day to win her second straight U.S. women's gymnastics all-around championship, positioning herself as a leader two years out from the 2028 Los Angeles Games.
Sources: ESPN Olympics · ↑ top
Latest developments: ESPN reported August 11 that USA Swimming placed chief financial officer Cory Hilliard on leave following his arrest.
USA Swimming put chief financial officer Cory Hilliard, 54, hired last December, on leave after learning of his arrest on theft and embezzlement charges tied to his earlier post in the University of Colorado athletic department.
Sources: ESPN Olympics · ↑ top
S&P 500 7,736.16 ▲ +3.8% Dow 54,066.60 ▲ +3.1% Nasdaq 26,518.55 ▲ +5.5% WTI crude 77.72 ▼ -5.8% EUR/USD 1.1536 ▲ +0.7% GBP/USD 1.3459 ▲ +0.6% USD/JPY 157.82 ▼ -2.4%