================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, August 12, 2026 - 1:36 PM EDT ================================================================ North Korea's Lazarus group turned the one actively exploited flaw in Microsoft's record August patch batch into defense-sector breaches, as a poisoned LiteLLM build and fresh SYSTEM-level exploits piled on. CONTENTS: Emerging Trends and Key Updates | Security | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Microsoft's August Patch Tuesday centered on the Lazarus afd.sys zero-day, followed a day later by ShieldBreak's Defender bypass, while SAP and Intel closed critical remote-code and chip flaws. see: Lazarus Zero-Day Drives August Patch Tuesday; ShieldBreak and Plug and Pwn SYSTEM Exploits; SAP, Adobe, and Chipmaker Critical Patches * [TREND] The AI stack is both battlefield and weapon, as the LiteLLM supply-chain compromise scattered credential-stealing code while defenders plant prompt injections beside AWS secrets to stall hacking agents. see: LiteLLM Supply Chain Compromise; Prompt Injections Turned Into Defense * [UPDATE (new)] Gunra ransomware, built on leaked Conti code, exploited Fortinet flaws and bypassed MFA to hit critical infrastructure and crippled Colombia's Justice Ministry. see: Ransomware Strikes Government, Infrastructure, and Logistics * [TREND] Longform reads circle AI's contradictions, with Ben Thompson panning Anthropic's watermarking, Ed Zitron warning the boom is unsustainable, and Cal Newport weighing coding tools. see: Anthropic's Watermarking, How It (Probably) Works, Worse Than It Seems; Don't Look Up; On AI Coding and Its Discontents * [UPDATE (new)] Pittsburgh switched on its first automated red-light cameras at two intersections, while Penn Hills schools reached a deal averting a support-staff strike. see: Red-Light Cameras Go Live; Penn Hills Averts Support-Staff Strike * [UPDATE (new)] At Steelers camp, Gabriel Rubio is pushing for a 53-man spot as Heyward breaks down roster battles, while the Pirates shifted Oneil Cruz's rehab to Altoona. see: Rubio Pushes for Roster Spot; Heyward Breaks Down Camp Roster Battles; Cruz Rehab Shifts to Altoona SECURITY ---------------------------------------------------------------- 1. LAZARUS ZERO-DAY DRIVES AUGUST PATCH TUESDAY Nation-State Activity · [apt, zero-day, nation-state] Latest developments: Check Point, BleepingComputer, and SecurityWeek confirmed today that CVE-2026-68820, the lone actively exploited zero-day in Microsoft's August rollout, is the afd.sys WinSock use-after-free Lazarus wielded against defense firms, and researchers found it while dissecting the Operation Dream Job hiring lure. The North Korean crew poses as recruiters, ships trojanized PDF software carrying a Lockheed Martin job decoy, and installs the ForestTiger backdoor; CISA gave U.S. federal agencies two weeks to patch. - BleepingComputer: https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/ - SecurityWeek: https://www.securityweek.com/fresh-windows-zero-day-exploited-in-north-korean-cyberattacks/ - The Record: https://therecord.media/cisa-gives-federal-agencies-two-weeks-to-patch-dprk-microsoft-bug - Help Net Security: https://www.helpnetsecurity.com/2026/08/12/north-korea-lazarus-fake-job-offers/ 2. SHIELDBREAK AND PLUG AND PWN SYSTEM EXPLOITS Vulnerabilities and Exploits · [zero-day, privilege-escalation, poc] Latest developments: A day after Patch Tuesday, the researcher Chaotic Eclipse released ShieldBreak, a proof-of-concept that bypasses the RoguePlanet fix CVE-2026-50656 in Microsoft Defender to reach SYSTEM, and a separate team disclosed Plug and Pwn, which abuses Windows Plug and Play to auto-install vulnerable vendor drivers for the same foothold. Both techniques hand a local attacker full SYSTEM control on up-to-date Windows machines. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-microsoft-defender-shieldbreak-zero-day-grants-system-privileges/ - The Hacker News: https://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/plug-and-pwn-attack-uses-fake-usb-devices-for-windows-system-access/ 3. SAP, ADOBE, AND CHIPMAKER CRITICAL PATCHES Vulnerabilities and Exploits · [patch, rce, vulnerability] Latest developments: SAP shipped a fix for CVE-2026-58231, a CVSS 10.0 unauthenticated remote code execution flaw in the Commerce Cloud Data Hub Adapter, and Intel and AMD together closed more than 80 chip vulnerabilities that enable privilege escalation and code execution, extending the week's critical-patch wave beyond Adobe's three CVSS 10.0 ColdFusion and Campaign Classic bugs. Administrators should prioritize the unauthenticated, network-reachable flaws—SAP Commerce Cloud and Adobe ColdFusion CVE-2026-48362—ahead of the local chip fixes. - The Hacker News: https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html - SecurityWeek: https://www.securityweek.com/chipmaker-patch-tuesday-intel-amd-fix-over-80-vulnerabilities-combined/ - The Hacker News: https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html 4. RANSOMWARE STRIKES GOVERNMENT, INFRASTRUCTURE, AND LOGISTICS Ransomware and Cybercrime · [ransomware, critical-infrastructure, breach] Latest developments: The Gunra ransomware-as-a-service operation, built on leaked Conti code, exploited Fortinet firewall and VPN flaws and bypassed multifactor authentication against critical-infrastructure targets; ransomware crippled Colombia's Justice Ministry days before the country's presidential transition; and a cyberattack disrupted Ceva Logistics at eight European contract-logistics warehouses, delaying shipments. Ransomware crews keep hitting government, critical infrastructure, and supply-chain operators; organizations should patch Fortinet appliances, enforce phishing-resistant MFA, and isolate backups. - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/gunra-ransomware-gang-fortinet-flaws-bypasses-mfa - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/ransomware-hits-colombian-justice-ministry-presidential-transition - SecurityWeek: https://www.securityweek.com/ceva-logistics-operations-disrupted-by-cyberattack/ 5. LITELLM SUPPLY CHAIN COMPROMISE Software Supply Chain · [supply-chain, malware, breach] Latest developments: SecurityWeek and The Hacker News reported that two malicious LiteLLM releases sat on PyPI for roughly 40 minutes in March after the Trivy compromise, and CloudSEK's dataset of about 434,000 stolen files now maps exposure to more than 2,100 organizations. The trojanized builds harvested cloud keys, SSH keys, Kubernetes tokens, and database passwords from every system that installed them; affected users must rotate all secrets. - SecurityWeek: https://www.securityweek.com/over-2500-organizations-impacted-by-litellm-supply-chain-attack/ - The Hacker News: https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html 6. PROMPT INJECTIONS TURNED INTO DEFENSE AI Security · [ai, prompt-injection, defense] Latest developments: Bruce Schneier highlighted Tracebit research showing that placing prompt injections alongside passwords and cryptographic keys stored in Amazon Web Services often stops AI hacking agents cold, because the planted text orders the attacking model to break its own guardrails and it shuts down. The technique turns an autonomous attack agent's safety training into a tripwire defenders can plant beside their secrets. - Schneier on Security: https://www.schneier.com/blog/archives/2026/08/prompt-injections-for-defense.html PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Slight Chance Showers And Thunderstorms, high 83F. Tonight: Chance Showers And Thunderstorms, low 67F. Thursday: Partly Sunny then Slight Chance Showers And Thunderstorms, high 84F. Business: * Point Park Eyes Florida Campus Latest developments: Point Park University and the city of Bradenton, Florida, said August 12 they are exploring a partnership to open a Point Park location there. Point Park University, based downtown, is weighing its first out-of-state campus in Bradenton on Florida's Gulf coast, a move both the university and the city describe as still exploratory. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/08/12/point-park-university-pittsburgh-bradenton-florida/stories/202608100057 - TribLive: https://triblive.com/news/education-classroom/point-park-university-considers-expanding-to-bradenton-in-florida/ * Ross Park Mall Turns 40 Latest developments: Ross Park Mall said it will hold a public 40th-anniversary celebration Saturday, August 15. Ross Park Mall, the regional shopping center in Ross Township north of Pittsburgh, marks 40 years in business with a public celebration Saturday, August 15. - WPXI: https://www.wpxi.com/news/local/ross-park-mall-host-40th-anniversary-celebration/LNXQ2Q7Q2JHMDF4XUIAWAHYIFM/ Around town: * Red-Light Cameras Go Live Latest developments: Pittsburgh switched on its first automated red-light cameras August 12 at two intersections, opening the program's first phase. Pittsburgh activated automated red-light enforcement August 12, starting with the intersection of North Dallas Avenue and Penn Avenue in Point Breeze, one of two intersections in a first phase meant to curb crashes from drivers running lights. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-automated-red-light-enforcement-begins-today-what-to-know/ - TribLive: https://triblive.com/local/pittsburghs-1st-red-light-cameras-go-live/ * Penn Hills Averts Support-Staff Strike Latest developments: The Penn Hills School District reached a contract agreement with its support professionals August 12, averting a threatened strike. The Penn Hills School District settled with its union of support professionals, heading off a possible strike as the new school year approaches. - WPXI: https://www.wpxi.com/news/local/penn-hills-school-district-reaches-agreement-with-support-professionals-averting-strike/VJPW5NDYYZAZXLYQ5JNHZ74ONU/ Events: * Heroes' Walk at Flight 93 Latest developments: Organizers set this year's Heroes' Walk at the Flight 93 National Memorial for Saturday, September 26. The annual Heroes' Walk at the Flight 93 National Memorial near Shanksville in Somerset County, honoring the 40 passengers and crew who died September 11, 2001, takes place Saturday, September 26. - TribLive: https://triblive.com/local/regional/heroes-walk-at-flight-93-national-memorial-set-for-sept-26/ SPORTS ---------------------------------------------------------------- Around the Teams: * Heyward Breaks Down Camp Roster Battles Latest developments: The Not Just Football podcast posted its week-two training-camp episode August 12 from Saint Vincent College in Latrobe. On Not Just Football, Steelers defensive lineman Cam Heyward and co-host Hayden recapped the first live-tackling reps and the Saturday Night Lights standouts at Saint Vincent College, walked through the roster battles brewing, and debated who belongs in the 2027 Hall of Fame class, starting with Antonio Brown. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=wqrQO2-iRcE * Rubio Pushes for Roster Spot Latest developments: The Post-Gazette reported August 12 that defensive lineman Gabriel Rubio has a real chance at the Steelers' 53-man roster. Gabriel Rubio, a stout run-stuffing defensive lineman out of Notre Dame, is emerging in Steelers training camp with a genuine shot at making the 53-man roster, the Post-Gazette reported. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/12/gabriel-rubio-notredame-nfl-draft-roster/stories/202608110004 * Cruz Rehab Shifts to Altoona Latest developments: The Pirates moved Oneil Cruz's rehab assignment to Double-A Altoona, where he went hitless in his first game August 11. The Pirates transferred star Oneil Cruz's rehab assignment to the Double-A Altoona Curve as he works back from injury, and he went hitless in his debut there. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/11/pirates-oneil-cruz-rehab-altoona-injury/stories/202608110051 Team USA: * Meyers Taylor to Miss Bobsled Season Latest developments: Elana Meyers Taylor said August 12 she will sit out the coming World Cup bobsled season with post-concussion symptoms. Elana Meyers Taylor, the United States Olympic monobob gold medalist, revealed she has battled post-concussion symptoms for months and will skip the upcoming World Cup bobsled season. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49591194/olympian-elana-meyers-taylor-miss-world-cup-bobsled-season * USA Swimming Sidelines CFO Latest developments: USA Swimming placed chief financial officer Cory Hilliard on leave August 11 after learning of his arrest. USA Swimming put chief financial officer Cory Hilliard, 54, hired last December, on leave following his arrest on theft and embezzlement charges tied to a prior job as an administrator in the University of Colorado athletic department. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49578646/usa-swimming-places-cfo-cory-hilliard-leave-arrest READING ---------------------------------------------------------------- * Stratechery -- Anthropic's Watermarking, How It (Probably) Works, Worse Than It Seems Ben Thompson argues that Anthropic's plan to watermark AI output in response to the European Union's AI law is a mistake, faulting it first on philosophical grounds and then on how poorly the mechanism holds up in practice. https://stratechery.com/2026/anthropics-watermarking-how-it-probably-works-worse-than-it-seems/ * Ed Zitron -- Don't Look Up Ed Zitron presses his running case that the economics behind the AI boom are unsustainable and that investors and the press keep refusing to confront the warning signs. https://www.wheresyoured.at/dont-look-up/ * Cal Newport -- On AI Coding and Its Discontents Cal Newport works through the account of a Silicon Valley senior engineer who turned from AI-coding skeptic to convert, using it to weigh what these tools genuinely change about the craft of software. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,734.49 ▲ +2.9% Dow 54,007.80 ▲ +2.5% Nasdaq 26,490.64 ▲ +3.9% WTI crude 79.20 ▼ -3.1% EUR/USD 1.1543 ▲ +0.5% GBP/USD 1.3476 ▲ +0.5% USD/JPY 158.15 ▼ -1.5% ================================================================ Generated 2026-08-12 13:36 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================