================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, August 11, 2026 - 7:36 PM EDT ================================================================ Microsoft's August update closed as many as 421 flaws, among them an already-exploited Windows kernel zero-day, while AI agents surfaced fresh critical bugs in SharePoint and cellular network cores. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Nation-state crews are weaponizing hiring, as Russia's Sandworm poses as recruiters to Ukrainian IT staff while researchers baited three North Korean operatives with a fake crypto startup. see: Sandworm Lures IT Workers With Fake Jobs; Fake Crypto Startup Snares North Korean IT Workers * [TREND] AI agents are surfacing critical flaws humans missed, from an unauthenticated SharePoint remote-code chain, CVE-2026-55040, to 84 previously unknown bugs in 4G and 5G core software. see: AI Agents Surface Critical Vulnerabilities * [TREND] Microsoft Threat Intelligence detailed how the DeadLock ransomware gang runs victim negotiations and its leak operation across Polygon smart contracts and the Session network to resist takedowns. see: DeadLock Ransomware Goes Blockchain * [UPDATE (new)] Microsoft's August Patch Tuesday closed as many as 421 CVEs, including CVE-2026-68820, an actively exploited afd.sys use-after-free letting attackers escalate to SYSTEM. see: Microsoft August 2026 Patch Tuesday * [UPDATE (new)] University of Birmingham researchers showed a compromised SIM card can command 26 tested phones and IoT modems using functions built into the cellular spec. see: Malicious SIM Cards Hijack Phones and IoT Modems * [TREND] AI-bubble skepticism dominates the Reading list, with Zitron warning the industry ignores warning signs, Ben Thompson flagging Nvidia's self-funded demand, and Newport probing AI coding's limits. see: Don't Look Up; Nvidia's Risky Business; On AI Coding and Its Discontents SECURITY ---------------------------------------------------------------- 1. MICROSOFT AUGUST 2026 PATCH TUESDAY Vulnerabilities and Exploits · [patch, zero-day, windows] Latest developments: Microsoft's August rollout fixed as many as 421 CVEs, 62 rated critical, and closed CVE-2026-68820, a use-after-free in the afd.sys WinSock kernel driver that attackers already exploit to escalate to SYSTEM, plus two publicly disclosed zero-days and critical QUIC and DNS Server remote code execution bugs. The afd.sys flaw lets code already running on a Windows machine gain SYSTEM privileges, and CISA added it to its Known Exploited Vulnerabilities catalog, so administrators should apply that update first among the month's massive volume. - Krebs on Security: https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes/ - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/ - The Hacker News: https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html - SecurityWeek: https://www.securityweek.com/august-2026-patch-tuesday-microsoft-fixes-421-cves-one-exploited-zero-day/ 2. AI AGENTS SURFACE CRITICAL VULNERABILITIES AI Security · [ai, vulnerability, zero-day] Latest developments: Researchers used an AI agent to build an unauthenticated remote code execution chain in Microsoft SharePoint, CVE-2026-55040 at CVSS 9.1, while Nanyang Technological University turned AI agents on 4G and 5G core software and found 84 previously unknown flaws, 81 now carrying CVEs with 23 still unfixed, and a public AI tool located the patched Zoom annotation zero-click bug in under 20 prompts. AI-assisted vulnerability discovery is moving from research to routine, exposing flaws in SharePoint Subscription Edition, 2019, and 2016, in cellular network cores where one bug hijacks a subscriber's data session, and in Zoom's screen-sharing feature. - The Hacker News: https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/5g-core-network-vulnerabilities-research/ - Wired Security: https://www.wired.com/story/a-zoom-screen-sharing-bug-let-anyone-take-over-other-devices-on-a-call/ 3. MALICIOUS SIM CARDS HIJACK PHONES AND IOT MODEMS Vulnerabilities and Exploits · [mobile, iot, vulnerability] Latest developments: Tomasz Piotr Lisowski and Marius Muench of the University of Birmingham, working with Kristian Covic of Fuzzware, showed that a compromised SIM card can issue commands built into the cellular spec to 26 tested phones and modules, stealing files, downgrading connections to 2G, and running code inside the modems of electric-vehicle chargers, industrial routers, and car telematics units. The attack abuses a legitimate function of the cellular standard, so a malicious or hijacked SIM can take over the device holding it; cellular IoT gear faces the most exposure. - Help Net Security: https://www.helpnetsecurity.com/2026/08/11/malicious-sim-cards-hijack-phones-ev-chargers/ - The Hacker News: https://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.html 4. DEADLOCK RANSOMWARE GOES BLOCKCHAIN Ransomware and Cybercrime · [ransomware, blockchain] Latest developments: The Microsoft Threat Intelligence team detailed how the DeadLock gang runs victim communications and its data-leak operation across Polygon smart contracts and the Session messaging network, a decentralized recovery ecosystem the crew built to survive infrastructure seizures. DeadLock stores and delivers extortion resources through blockchain-backed services that resist takedown, echoing the Kimwolf botnet's Ethereum-based command routing and a broader shift by cybercriminals toward decentralized channels. - BleepingComputer: https://www.bleepingcomputer.com/news/security/deadlock-ransomware-uses-blockchain-to-resist-infrastructure-takedown/ - The Hacker News: https://thehackernews.com/2026/08/deadlock-ransomware-uses-polygon-smart.html 5. SANDWORM LURES IT WORKERS WITH FAKE JOBS Nation-State Activity · [apt, russia, social-engineering] Latest developments: CERT-UA tied a social-engineering campaign running since at least May to UAC-0145, a subgroup of Russia's Sandworm, also called APT44, that poses as recruiters to trick Ukrainian IT professionals into installing a trojanized WireGuard VPN client that runs attacker commands. The fake job offers deliver a malicious VPN installer to system administrators and IT staff; Sandworm is the destructive GRU-linked unit behind years of attacks on Ukraine. - BleepingComputer: https://www.bleepingcomputer.com/news/security/sandworm-hackers-target-it-pros-with-trojanized-wireguard-vpn-client/ - The Hacker News: https://thehackernews.com/2026/08/sandworm-linked-uac-0145-uses-fake-job.html 6. FAKE CRYPTO STARTUP SNARES NORTH KOREAN IT WORKERS Nation-State Activity · [apt, north-korea, insider-threat] Latest developments: Security researchers stood up a sham cryptocurrency startup, advertised developer jobs, and hired three people they believe are North Korean operatives, recording every company-issued virtual machine to document the tradecraft, including a first hire who claimed Pasadena, Texas, then produced a California driver's license and a New York bank account. The sting turns North Korea's remote-worker infiltration scheme into a field study, handing hiring teams concrete red flags; the operatives use stolen or mismatched identity documents to land Western tech jobs. - The Hacker News: https://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Fires on Ship Enforcing Its Iran Blockade Latest developments: A U.S. military helicopter fired Hellfire missiles at a Panama-flagged vessel that ignored repeated warnings to honor Washington's blockade of Iranian ports, U.S. Central Command said—the first reported shots enforcing the blockade. The United States is blockading Iran's ports as Tehran keeps the Strait of Hormuz closed and demands a U.S. withdrawal from the Gulf plus war reparations; Brent crude climbed for a fifth straight session and U.S. stocks slid a second day as traders doubt a quick reopening ahead of Wednesday's inflation data. - WSJ World News: https://www.wsj.com/world/middle-east/u-s-fires-on-ship-breaking-its-blockade-of-iran-d8b99456?mod=rss_worldnews - FT Markets: https://www.ft.com/content/ac651a05-9285-4020-85e2-47fcd8936320?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-futures-edge-lower-on-likely-technical-correction-f9200cf7?mod=rss_markets_main * U.S. Yen Intervention Fades Latest developments: The yen gave back its gains Tuesday as the U.S.-led intervention in Japan's bond market wore off, leaving the WSJ Dollar Index flat at 96.15. Washington has stepped into Japan's sovereign bond market to prop up the yen, an unusual cross-border intervention now losing force as the currency weakens again—a development that bears on funding and rate conditions worldwide. - WSJ Markets: https://www.wsj.com/finance/yen-intervention-wears-off-9a4fff02?mod=rss_markets_main - FT Markets: https://www.ft.com/content/f52478de-29af-41bd-a390-9f8102ac32a8?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Showers And Thunderstorms Likely, low 64F. Wednesday: Patchy Fog then Slight Chance Showers And Thunderstorms, high 82F. Wednesday Night: Chance Showers And Thunderstorms, low 66F. Business: * Kosher Grocery to Fill Squirrel Hill Rite Aid Latest developments: WTAE and TribLive reported August 11 that a new kosher grocery will occupy the vacant former Rite Aid at Forbes and Murray avenues. A kosher grocery store will open at the busy Forbes and Murray intersection in Pittsburgh's Squirrel Hill, taking over a shuttered Rite Aid, a real estate firm said. - WTAE: https://www.wtae.com/article/former-squirrel-hill-rite-aid-murray-avenue-market-real-estate-firm-says/73406972 - TribLive: https://triblive.com/business/new-kosher-grocery-coming-to-squirrel-hill-business-district/ * Spirit Exit Dents Arnold Palmer Airport Revenue Latest developments: A Westmoreland County Airport Authority official said Tuesday that Spirit Airlines' departure will cost as much as $300,000 in revenue through the end of this year. Spirit Airlines ended commercial service at Arnold Palmer Regional Airport in Unity Township, and the Westmoreland County Airport Authority now projects a shortfall of up to $300,000 for the rest of 2026. - TribLive: https://triblive.com/local/westmoreland/spirit-airlines-departure-leaves-300k-revenue-shortfall-at-arnold-palmer-regional-airport/ * Downtown Partnership Pushes Office Conversions Latest developments: TribLive reported August 11 that the Pittsburgh Downtown Partnership wants the city to tap a special downtown tax district to fund office-to-housing conversions. The Pittsburgh Downtown Partnership, a nonprofit community development group, is urging the city to steer money generated by a special tax district toward converting underused downtown offices into housing and other uses. - TribLive: https://triblive.com/local/pittsburgh-downtown-partnership-favors-using-new-tax-diversion-to-fund-office-conversions/ Around town: * Pittsburgh Schools Target Chronic Absenteeism Latest developments: KDKA reported August 11 that 32% of Pittsburgh Public Schools students were chronically absent last year, and A+ Schools is delivering supply-filled backpacks to Arlington families to cut barriers before classes resume. Pittsburgh Public Schools calls chronic absenteeism its biggest challenge after 32% of students missed 18 or more days last year; with the school year weeks away, the advocacy group A+ Schools is bringing backpacks to incoming Arlington kindergartners' parents. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-public-schools-chronic-absenteeism/ * Lead Line Replacements Reach Four Neighborhoods Latest developments: KDKA reported August 11 that Pittsburgh Water is moving its lead line replacement work into Bloomfield, Shadyside, Central Lawrenceville, and Highland Park. Pittsburgh Water will replace public and private lead service lines in Bloomfield, Shadyside, Central Lawrenceville, and Highland Park, the second-to-last group of neighborhoods in a years-long citywide project, and will hold sessions for residents to ask questions. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-water-lead-line-replacements/ * County Health Chief Backs MMR Vaccine Latest developments: The Allegheny County Health Department's medical director urged parents August 11 to follow the childhood MMR schedule, pushing back against President Trump's new executive order directing the Justice Department to challenge state vaccine exemption laws. As measles cases rise and the school year nears, the Allegheny County Health Department's medical director recommended the measles, mumps, and rubella vaccine for children, countering a Trump executive order that tells the Justice Department to contest state vaccination requirements. - TribLive: https://triblive.com/news/health-now/allegheny-county-health-official-recommends-mmr-vaccine-despite-trump-executive-order/ - WTAE: https://www.wtae.com/article/trump-vaccine-order-state-exemption-laws/73406839 Events: * Butler Farm Show Runs Through Saturday Latest developments: WPXI reported August 11 that crowds keep turning out for the Butler Farm Show despite repeated rain. The annual Butler Farm Show continues in Butler County through Saturday, August 15, drawing steady attendance through a rainy week. - WPXI: https://www.wpxi.com/news/local/repeat-rain-isnt-stopping-people-attending-butler-farm-show/AKKAIMLHANF5FP4Z5LA7SPXCWU/ SPORTS ---------------------------------------------------------------- Around the Teams: * Rodgers Shrugs Off Preseason Opener Latest developments: The Post-Gazette reported August 11 that quarterback Aaron Rodgers called the preseason "not real football" and saw no advantage to playing in Thursday's opener. Aaron Rodgers, in his 22nd NFL season, told reporters the preseason is "not real football" and expects little from suiting up Thursday, while embracing a mentor role for the Steelers' younger passers Will Howard and Mason Rudolph. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/11/rodgers-preseason-real-football-rudolph-allar-howard/stories/202608110034 * Heidenreich Readies for Steelers Debut Latest developments: The Post-Gazette reported August 11 that rookie running back Eli Heidenreich prepares for his preseason debut at Acrisure Stadium, drawing on teammates who also arrived as long shots. Eli Heidenreich, the Navy midshipman the Steelers drafted from his hometown, faces his first game at Acrisure Stadium looking to convert draft-day sentiment into a roster spot, taking inspiration from Pittsburgh players who broke in as underdogs. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/11/heidenreich-preseason-debut-warren-dowdle-navy-nfl/stories/202608110042 * Hiles: Collapses Define the Pirates Latest developments: Post-Gazette columnist Noah Hiles argued August 10 that late-season fades have become the Pirates' defining trait as the club slides again. Noah Hiles wrote that the Pirates do late-season collapses better than anything else, tracing a pattern that runs through the Clint Hurdle, Derek Shelton, and Don Kelly years as Pittsburgh's playoff hopes fade once more. - Post-Gazette Pirates: https://www.post-gazette.com/sports/columns/2026/08/10/pirates-mlb-don-kelly-derek-shelton-clint-hurdle/stories/202608080034 Team USA: * Moultrie Out for Season With Torn ACL Latest developments: The Portland Thorns announced August 11 that United States and Thorns midfielder Olivia Moultrie tore her ACL and will miss the rest of the 2026 NWSL season. Olivia Moultrie, a rising USWNT midfielder, will sit out the remainder of the 2026 season after tearing her ACL, a setback that clouds her push toward the 2027 Women's World Cup in Brazil. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49583463/olivia-moultrie-acl-injury-usa-portland-thorns-nwsl-world-cup READING ---------------------------------------------------------------- * Ed Zitron -- Don't Look Up Zitron continues his case that the AI industry is running on a bubble whose boosters keep looking away from mounting warning signs about demand and economics. https://www.wheresyoured.at/dont-look-up/ * Stratechery -- Nvidia's Risky Business Ben Thompson argues Nvidia is inventing new ways to help its own customers raise money, which pumps up demand for its chips while sharply enlarging the systemic risk of the AI buildout. https://stratechery.com/2026/nvidias-risky-business/ * Cal Newport -- On AI Coding and Its Discontents Newport uses a senior Silicon Valley engineer's turn from AI skeptic to convert to examine what AI coding tools actually change about software work and where their limits lie. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,736.16 ▲ +3.8% Dow 54,066.60 ▲ +3.1% Nasdaq 26,518.55 ▲ +5.5% WTI crude 77.72 ▼ -5.8% EUR/USD 1.1543 ▲ +0.5% GBP/USD 1.3476 ▲ +0.5% USD/JPY 158.15 ▼ -1.5% ================================================================ Generated 2026-08-11 19:36 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================