daily plain-text briefing: security, markets, business, and pittsburgh
North Korea's Lazarus group turned the one actively exploited flaw in Microsoft's record August patch batch into defense-sector breaches, as a poisoned LiteLLM build and fresh SYSTEM-level exploits piled on.
Latest developments: Check Point, BleepingComputer, and SecurityWeek confirmed today that CVE-2026-68820, the lone actively exploited zero-day in Microsoft's August rollout, is the afd.sys WinSock use-after-free Lazarus wielded against defense firms, and researchers found it while dissecting the Operation Dream Job hiring lure.
The North Korean crew poses as recruiters, ships trojanized PDF software carrying a Lockheed Martin job decoy, and installs the ForestTiger backdoor; CISA gave U.S. federal agencies two weeks to patch.
Sources: BleepingComputer · SecurityWeek · The Record · Help Net Security · ↑ top
Latest developments: A day after Patch Tuesday, the researcher Chaotic Eclipse released ShieldBreak, a proof-of-concept that bypasses the RoguePlanet fix CVE-2026-50656 in Microsoft Defender to reach SYSTEM, and a separate team disclosed Plug and Pwn, which abuses Windows Plug and Play to auto-install vulnerable vendor drivers for the same foothold.
Both techniques hand a local attacker full SYSTEM control on up-to-date Windows machines.
Sources: BleepingComputer · The Hacker News · BleepingComputer · ↑ top
Latest developments: SAP shipped a fix for CVE-2026-58231, a CVSS 10.0 unauthenticated remote code execution flaw in the Commerce Cloud Data Hub Adapter, and Intel and AMD together closed more than 80 chip vulnerabilities that enable privilege escalation and code execution, extending the week's critical-patch wave beyond Adobe's three CVSS 10.0 ColdFusion and Campaign Classic bugs.
Administrators should prioritize the unauthenticated, network-reachable flaws—SAP Commerce Cloud and Adobe ColdFusion CVE-2026-48362—ahead of the local chip fixes.
Sources: The Hacker News · SecurityWeek · The Hacker News · ↑ top
Latest developments: The Gunra ransomware-as-a-service operation, built on leaked Conti code, exploited Fortinet firewall and VPN flaws and bypassed multifactor authentication against critical-infrastructure targets; ransomware crippled Colombia's Justice Ministry days before the country's presidential transition; and a cyberattack disrupted Ceva Logistics at eight European contract-logistics warehouses, delaying shipments.
Ransomware crews keep hitting government, critical infrastructure, and supply-chain operators; organizations should patch Fortinet appliances, enforce phishing-resistant MFA, and isolate backups.
Sources: Dark Reading · Dark Reading · SecurityWeek · ↑ top
Latest developments: SecurityWeek and The Hacker News reported that two malicious LiteLLM releases sat on PyPI for roughly 40 minutes in March after the Trivy compromise, and CloudSEK's dataset of about 434,000 stolen files now maps exposure to more than 2,100 organizations.
The trojanized builds harvested cloud keys, SSH keys, Kubernetes tokens, and database passwords from every system that installed them; affected users must rotate all secrets.
Sources: SecurityWeek · The Hacker News · ↑ top
Latest developments: Bruce Schneier highlighted Tracebit research showing that placing prompt injections alongside passwords and cryptographic keys stored in Amazon Web Services often stops AI hacking agents cold, because the planted text orders the attacking model to break its own guardrails and it shuts down.
The technique turns an autonomous attack agent's safety training into a tripwire defenders can plant beside their secrets.
Sources: Schneier on Security · ↑ top
This Afternoon: Slight Chance Showers And Thunderstorms, high 83F.
Tonight: Chance Showers And Thunderstorms, low 67F.
Thursday: Partly Sunny then Slight Chance Showers And Thunderstorms, high 84F.
Latest developments: Point Park University and the city of Bradenton, Florida, said August 12 they are exploring a partnership to open a Point Park location there.
Point Park University, based downtown, is weighing its first out-of-state campus in Bradenton on Florida's Gulf coast, a move both the university and the city describe as still exploratory.
Sources: Pittsburgh Post-Gazette · TribLive · ↑ top
Latest developments: Ross Park Mall said it will hold a public 40th-anniversary celebration Saturday, August 15.
Ross Park Mall, the regional shopping center in Ross Township north of Pittsburgh, marks 40 years in business with a public celebration Saturday, August 15.
Latest developments: Pittsburgh switched on its first automated red-light cameras August 12 at two intersections, opening the program's first phase.
Pittsburgh activated automated red-light enforcement August 12, starting with the intersection of North Dallas Avenue and Penn Avenue in Point Breeze, one of two intersections in a first phase meant to curb crashes from drivers running lights.
Sources: KDKA · TribLive · ↑ top
Latest developments: The Penn Hills School District reached a contract agreement with its support professionals August 12, averting a threatened strike.
The Penn Hills School District settled with its union of support professionals, heading off a possible strike as the new school year approaches.
Latest developments: Organizers set this year's Heroes' Walk at the Flight 93 National Memorial for Saturday, September 26.
The annual Heroes' Walk at the Flight 93 National Memorial near Shanksville in Somerset County, honoring the 40 passengers and crew who died September 11, 2001, takes place Saturday, September 26.
Latest developments: The Not Just Football podcast posted its week-two training-camp episode August 12 from Saint Vincent College in Latrobe.
On Not Just Football, Steelers defensive lineman Cam Heyward and co-host Hayden recapped the first live-tackling reps and the Saturday Night Lights standouts at Saint Vincent College, walked through the roster battles brewing, and debated who belongs in the 2027 Hall of Fame class, starting with Antonio Brown.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Post-Gazette reported August 12 that defensive lineman Gabriel Rubio has a real chance at the Steelers' 53-man roster.
Gabriel Rubio, a stout run-stuffing defensive lineman out of Notre Dame, is emerging in Steelers training camp with a genuine shot at making the 53-man roster, the Post-Gazette reported.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Pirates moved Oneil Cruz's rehab assignment to Double-A Altoona, where he went hitless in his first game August 11.
The Pirates transferred star Oneil Cruz's rehab assignment to the Double-A Altoona Curve as he works back from injury, and he went hitless in his debut there.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Elana Meyers Taylor said August 12 she will sit out the coming World Cup bobsled season with post-concussion symptoms.
Elana Meyers Taylor, the United States Olympic monobob gold medalist, revealed she has battled post-concussion symptoms for months and will skip the upcoming World Cup bobsled season.
Sources: ESPN Olympics · ↑ top
Latest developments: USA Swimming placed chief financial officer Cory Hilliard on leave August 11 after learning of his arrest.
USA Swimming put chief financial officer Cory Hilliard, 54, hired last December, on leave following his arrest on theft and embezzlement charges tied to a prior job as an administrator in the University of Colorado athletic department.
Sources: ESPN Olympics · ↑ top
S&P 500 7,734.49 ▲ +2.9% Dow 54,007.80 ▲ +2.5% Nasdaq 26,490.64 ▲ +3.9% WTI crude 79.20 ▼ -3.1% EUR/USD 1.1543 ▲ +0.5% GBP/USD 1.3476 ▲ +0.5% USD/JPY 158.15 ▼ -1.5%