================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, August 13, 2026 - 10:05 AM EDT ================================================================ Germany's cabinet and the Trump White House both moved to legalize offensive hacking, as attackers pressed a national ID flaw, fresh phishing kits, and account takeovers. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Germany's cabinet approved legislation letting its spy agencies hack foreign systems and sabotage adversaries' supply chains, pushing offensive operations once reserved for intelligence services into statute. see: Governments Authorize Offensive Hacking * [TREND] Phishing is losing its tells as Cisco Talos's JWR framework clones real checkout pages, while the FBI warns criminals hijack accounts to steal and resell explicit images. see: JWR Phishing Framework; FBI Explicit-Image Account Takeovers * [UPDATE (new)] Fresh WordPress and Wireshark patches close remote code execution holes just as researchers report severe flaws in the browser extension underpinning Belgium's eID. see: Fresh WordPress and Wireshark Patches; Belgium eID Authentication Flaws * [UPDATE (new)] Kaspersky detailed a new Armored Likho campaign masquerading as fundraising appeals to drop a Still Toolkit that steals Telegram data and eavesdrops on victims. see: Armored Likho Espionage Campaign * [UPDATE (new)] Local development advances as Wegmans breaks ground on its first western Pennsylvania store in Cranberry and phase one of the New Granada Theater restoration wraps. see: Wegmans Breaks Ground in Cranberry; New Granada Restoration Phase One Done * [UPDATE (new)] The Steelers' Gabriel Rubio pushes for a 53-man roster spot while the Pirates shift Oneil Cruz's rehab assignment to Double-A Altoona. see: Gabriel Rubio Pushes for the 53; Oneil Cruz Rehab Moves to Altoona SECURITY ---------------------------------------------------------------- 1. GOVERNMENTS AUTHORIZE OFFENSIVE HACKING Policy and Regulation · [policy, offensive] Latest developments: Germany's cabinet approved legislation that would let its intelligence agencies hack foreign systems, sabotage adversaries' supply chains, and feed false information to extremists inside Germany in the biggest overhaul of the country's postwar spy laws, while President Donald Trump signed a memo directing the National Coordination Center to open a program where private security firms apply to hack foreign cybercrime gangs under contracts that may carry a forfeitable $1 million bond. Two Western governments moved the same week to legitimize offensive cyber operations long reserved for spy agencies, blurring lines between state action and private hack-back and raising retaliation risk for enterprises caught in the middle. - The Record: https://therecord.media/germany-spy-agency-powers - BleepingComputer: https://www.bleepingcomputer.com/news/security/white-house-taps-security-firms-for-offensive-hack-back-operations/ - The Record: https://therecord.media/trump-cyber-crime-offensive - SecurityWeek: https://www.securityweek.com/white-house-mobilizes-security-firms-for-operations-against-foreign-cybercrime-gangs/ 2. FRESH WORDPRESS AND WIRESHARK PATCHES Vulnerabilities and Exploits · [patch, rce] Latest developments: WordPress 7.0.4 patched a remote code execution flaw that attackers holding author-level or higher permissions could exploit through malicious PostScript files, and Wireshark 4.6.8 fixed 28 bugs, nine of them in file parsers that fire the moment someone opens a booby-trapped capture file. Both tools run in vast deployments, and the Wireshark parser flaws need no network access to trigger, so administrators should update WordPress installations and analyzer builds promptly. - SecurityWeek: https://www.securityweek.com/wordpress-7-0-4-patches-remote-code-execution-vulnerability/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/13/wireshark-4-6-8-patches-security-bugs/ 3. JWR PHISHING FRAMEWORK Ransomware and Cybercrime · [phishing] Latest developments: Cisco Talos exposed JWR, an undocumented phishing framework its developer branded internally, built to convincingly impersonate the checkout and login pages of major payment and shopping platforms, as the Greatness phishing-as-a-service platform mounted attacks that need no fake website, riding a real Microsoft login page and a moment of misplaced trust. New phishing toolkits strip away the telltale signs defenders train users to spot, cloning legitimate payment and login pages so victims surrender credentials with no suspicious URL in sight. - Cisco Talos: https://blog.talosintelligence.com/dissecting-the-jwr-phishing-framework/ - Graham Cluley: https://grahamcluley.com/smashing-security-podcast-480/ 4. BELGIUM EID AUTHENTICATION FLAWS Vulnerabilities and Exploits · [vulnerability, rce] Latest developments: Researchers found severe vulnerabilities in a browser extension underpinning Belgium's electronic ID trust framework that fully compromise it and open citizen accounts to remote code execution. Belgium's national eID logs citizens into government and banking services through a browser extension, and the flaws let attackers run code and hijack accounts; the case spotlights broader risk in security-critical browser extensions. - Dark Reading: https://www.darkreading.com/application-security/belgium-eid-authentication-citizen-accounts-rce 5. ARMORED LIKHO ESPIONAGE CAMPAIGN Nation-State Activity · [apt, espionage] Latest developments: Kaspersky detailed a new Armored Likho campaign that poses as fundraising appeals and drops a fresh Still Toolkit built to steal Telegram data and eavesdrop on victims. Armored Likho is a cyber-espionage group whose latest lures masquerade as charity fundraising to install malware that harvests Telegram messages and monitors targets. - Securelist (Kaspersky): https://securelist.com/armored-likho-still-toolkit/121033/ 6. FBI EXPLICIT-IMAGE ACCOUNT TAKEOVERS Ransomware and Cybercrime · [social-engineering, breach] Latest developments: The FBI issued an alert that criminals use leaked passwords, social engineering, and spoofed social media sites to hijack adults' and children's online accounts, steal sexually explicit images and videos, and sell them online. The bureau urged strong unique passwords, multifactor authentication, and caution with unsolicited messages, warning that families with minors face particular risk. - The Record: https://therecord.media/social-engineering-hackers-explicit-photos-fbi-alert - BleepingComputer: https://www.bleepingcomputer.com/news/security/fbi-warns-of-hackers-targeting-online-accounts-to-steal-explicit-photos/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Oil Retreats as Hormuz Claims Clash Latest developments: Crude futures fell Thursday after days of gains, with Washington and Tehran each claiming control of the Strait of Hormuz and shipping through the waterway still throttled. Traffic through the Strait of Hormuz, the chokepoint for roughly a fifth of the world's seaborne oil, remains limited amid the U.S.-Iran standoff; shippers told the Wall Street Journal they doubt President Trump's assertion that the passage has reopened. - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-falls-amid-rising-u-s-inventories-8ca9d77f?mod=rss_markets_main - WSJ US Business: https://www.wsj.com/business/the-morning-risk-report-paramount-has-discussed-creating-a-board-to-ensure-cnns-independence-1cde1364?mod=pls_whats_news_us_business_f PITTSBURGH ---------------------------------------------------------------- Weather: Today: Partly Sunny, high 84F. Tonight: Mostly Cloudy then Patchy Fog, low 67F. Friday: Patchy Fog then Chance Showers And Thunderstorms, high 83F. Business: * Wegmans Breaks Ground in Cranberry Latest developments: Wegmans held the groundbreaking Thursday for its first western Pennsylvania store, a Cranberry Township location it says will create about 450 jobs and open in 2027. The New York grocer is building at the Cool Springs development in Cranberry Township, Butler County, near the Pittsburgh Penguins' UPMC Lemieux Sports Complex, marking its entry into the Pittsburgh grocery market. - WTAE: https://www.wtae.com/article/wegmans-butler-county-grocery-store-groundbreaking/73423285 - KDKA: https://www.cbsnews.com/pittsburgh/news/wegmans-groundbreaking-today-pittsburgh-area-cranberry-township/ * New Granada Restoration Phase One Done Latest developments: The first phase of the $28 million restoration of the New Granada Theater in the Hill District finished, and backers held a ribbon-cutting Wednesday with the University of Pittsburgh as anchor tenant. The New Granada Theater on Centre Avenue, once a jazz landmark in Pittsburgh's Hill District, lit its restored marquee again; Pitt opened a community engagement center inside the building as the project's anchor. - WTAE: https://www.wtae.com/article/hill-district-pitt-community-center-granada-theater-restoration/73423397 - WPXI: https://www.wpxi.com/news/local/first-phase-28m-historic-new-granada-restoration-hill-district-complete/P7H3LMDCYRHGNCUJB65BP64HPY/ Around town: * Pitt Bans E-Scooters on Campus Latest developments: The University of Pittsburgh barred students from parking or storing electric scooters anywhere on campus, including dorm rooms, under a new policy carrying impound fees that start at $100. The rule covers Pitt's Oakland campus and student housing; violators risk having their scooters impounded and paying fees beginning at $100. - WTAE: https://www.wtae.com/article/university-of-pittsburgh-e-scooter-policy/73419211 * Tunnel Lane Restrictions Sunday Latest developments: Single-lane restrictions and rolling stoppages will hit the Fort Pitt and Liberty tunnels on Sunday for survey work, weather permitting. The Fort Pitt Tunnel and Liberty Tunnel funnel heavy commuter traffic into downtown Pittsburgh from the south and west; drivers should expect delays through both on Sunday. - WPXI: https://www.wpxi.com/news/local/stoppages-lane-restrictions-planned-fort-pitt-liberty-tunnel-survey-work/Q57ZUUYIKFFTDLI7IY32ZDPHDI/ Events: * Luke Combs at Acrisure Stadium in 2027 Latest developments: Luke Combs will bring his My Kinda Saturday Night Tour to Acrisure Stadium on Saturday, May 8, 2027, his first Pittsburgh show since he sold out the same stadium in 2023. Country star Luke Combs plays Acrisure Stadium on Pittsburgh's North Shore on Saturday, May 8, 2027; the tour opens April 3 in Arlington, Texas, and wraps in late June in California. - KDKA: https://www.cbsnews.com/pittsburgh/news/luke-combs-concert-tour-pittsburgh-acrisure-stadium-2027/ - WPXI: https://www.wpxi.com/news/local/luke-combs-bringing-his-my-kinda-saturday-night-tour-pittsburgh/B6KYJ23HNBF2NGRBND2MSJ4YEU/ SPORTS ---------------------------------------------------------------- Around the Teams: * Gabriel Rubio Pushes for the 53 Latest developments: The Post-Gazette reports rookie defensive lineman Gabriel Rubio, a stout run defender out of Notre Dame, is emerging in camp with a real shot at the Steelers' 53-man roster. Gabriel Rubio, a run-stuffing lineman from Notre Dame, has drawn notice at Steelers training camp at Saint Vincent College in Latrobe and could play his way onto the final roster. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/12/gabriel-rubio-notredame-nfl-draft-roster/stories/202608110004 * Oneil Cruz Rehab Moves to Altoona Latest developments: The Pirates transferred Oneil Cruz's injury rehab assignment to Double-A Altoona, where he went hitless in his first game there. Oneil Cruz, among the Pirates' most electric hitters, is working back from injury through the minor leagues; Pittsburgh shifted his rehab to the Altoona Curve. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/11/pirates-oneil-cruz-rehab-altoona-injury/stories/202608110051 READING ---------------------------------------------------------------- * Stratechery -- Anthropic's Watermarking, How It (Probably) Works, Worse Than It Seems Ben Thompson argues that Anthropic's move to watermark AI output in response to the E.U.'s AI law is a mistake on philosophical grounds and works worse in practice than its backers suggest. https://stratechery.com/2026/anthropics-watermarking-how-it-probably-works-worse-than-it-seems/ * Ed Zitron -- Don't Look Up Zitron invokes the film's willful denial of a looming catastrophe to argue that investors and the press keep ignoring mounting evidence that the AI spending boom is unsustainable. https://www.wheresyoured.at/dont-look-up/ * Cal Newport -- On AI Coding and Its Discontents Newport works through the promise and the limits of AI coding tools by way of a senior Silicon Valley engineer who described himself as a skeptic turned convert. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,739.48 ▲ +1.9% Dow 53,892.03 ▲ +1.2% Nasdaq 26,535.65 ▲ +3.3% WTI crude 80.81 ▲ +1.1% EUR/USD 1.1546 ▲ +0.3% GBP/USD 1.3487 ▲ +0.4% USD/JPY 158.46 ▼ -0.5% ================================================================ Generated 2026-08-13 10:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================