daily plain-text briefing: security, markets, business, and pittsburgh
North Korea's Lazarus Group weaponized a freshly patched Windows zero-day for espionage as attackers raced to exploit VMware vCenter and a 153-gigabyte credential trove spilled from the LiteLLM supply-chain breach.
Latest developments: Check Point Research attributed zero-day exploitation of a newly patched Windows flaw to North Korea's Lazarus Group, which planted a never-before-seen backdoor at defense and aerospace firms in France, Germany, Brazil, and India under its Operation Dream Job fake-recruiter scheme, while a public exploit named ShieldBreak from Nightmare Eclipse, dropped on Patch Tuesday, lets any user spawn a shell with SYSTEM privileges.
Lazarus, Pyongyang's flagship espionage crew, uses bogus job offers to deliver its backdoor, and the ShieldBreak exploit escalates any account to full system control on unpatched machines. Apply Microsoft's August updates now.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Attackers are actively exploiting the recently patched critical directory-traversal flaw CVE-2026-59310 in VMware vCenter's Syslog Server to deploy a reverse SSH tool for persistence and remote access.
The CVSS 9.8 bug lets remote attackers run arbitrary code on vCenter, the management hub for VMware virtual environments. Broadcom has shipped a fix and administrators should patch immediately.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: Hudson Rock obtained and analyzed a 153GB archive stolen in the LiteLLM supply-chain attack, finding 433,909 files and 118,829 CI runner credential dumps tied to 2,488 corporate domains including AWS, Samsung, Cisco, and Salesforce.
The compromised LiteLLM AI package scraped and exfiltrated secrets from roughly 2,500 users. Hudson Rock co-founder Alon Gal is running a global ethical disclosure effort, and exposed organizations must rotate their credentials.
Sources: Help Net Security · Ars Technica Security · ↑ top
Latest developments: Fortinet patched authentication flaws in FortiWeb and FortiManager that let attackers log in with random usernames and passwords or impersonate any FortiGate appliance.
The bugs undermine authentication in two widely deployed Fortinet products that guard enterprise networks. Administrators should apply the fixes before attackers reverse-engineer the patches.
Sources: SecurityWeek · ↑ top
Latest developments: Researchers exposed Jewelbug, a hackers-for-hire APT that runs state cyber espionage and financially motivated cryptocurrency heists from the same web panel.
Jewelbug mixes nation-state intelligence collection with profit-driven crypto theft, blurring the line between government-directed spying and criminal operations. Defenders tracking state actors should watch for financial motives alongside espionage.
Sources: Dark Reading · ↑ top
Latest developments: Hardware wallet maker Trezor disclosed a data breach affecting nearly 14,000 customers after hackers compromised ShipMonk, its shipping and logistics provider.
The intrusion exposed customer data through a third-party vendor rather than Trezor's own systems, leaving cryptocurrency owners open to targeted phishing. Affected customers should treat unexpected Trezor-branded messages as suspect.
Sources: BleepingComputer · ↑ top
Latest developments: The White House said Thursday that Canada, Japan, the European Union, and more than 40 other governments are letting China route roughly $60 billion in goods through their ports to dodge U.S. tariffs.
The Trump administration branded the practice a "transshipment scam" and put allied economies at the center of it, a sharp escalation of trade friction that reaches close partners and threatens billions in trade flows.
This Afternoon: Partly Sunny, high 83F.
Tonight: Mostly Cloudy then Patchy Fog, low 67F.
Friday: Chance Rain Showers, high 82F.
Latest developments: A new report from UPMC's Center for Connected Medicine and KLAS Research found that most U.S. hospitals and health systems now use artificial intelligence, with deployment accelerating.
UPMC's Pittsburgh-based Center for Connected Medicine, working with KLAS Research, documented rapid AI adoption across hospitals for clinical and administrative work, a marker of how fast the technology is reaching patient care.
Latest developments: Point Park University and the city of Bradenton, Florida, announced this week they are exploring a partnership that could bring a Point Park location to the Gulf Coast city.
Point Park University President Chris Brussalis said the Downtown Pittsburgh school sits in the early stages of evaluating a Bradenton partnership, with its Conservatory of Performing Arts the likely starting point.
Latest developments: Allegheny Township is moving to draft a data center ordinance, joining a wave of Western Pennsylvania municipalities writing zoning rules for the power-hungry facilities.
Allegheny Township, in Westmoreland County's Alle-Kiski Valley, is crafting an ordinance to govern where and how data centers can rise, part of a scramble among local governments to manage the industry's spread.
Latest developments: Country singer Morgan Wallen's foundation donated nearly $40,000 in musical instruments to Sto-Rox Jr.-Sr. High School.
Sto-Rox Jr.-Sr. High School, in the McKees Rocks and Stowe Township district west of Pittsburgh, received the instruments from Wallen's foundation ahead of the school year, a lift for its music program.
Latest developments: Frazer Township officials plan to sign a service agreement with the Allegheny Valley Regional Police Department later this month.
Frazer, in Allegheny County, is moving to contract its policing to the Allegheny Valley Regional Police Department, reshaping how the township covers law enforcement.
Latest developments: The 26th annual Little Italy Days opens today, Thursday, August 13, in Bloomfield and runs through Sunday, August 16.
Little Italy Days, the Italian-heritage street festival of food, music, and vendors, fills Liberty Avenue in Pittsburgh's Bloomfield neighborhood this weekend, August 13 through 16.
Sources: NEXTpittsburgh · ↑ top
Latest developments: The Post-Gazette reported the Steelers are set to re-sign veteran linebacker Elandon Roberts.
A Post-Gazette source said Pittsburgh will reunite with off-ball linebacker Elandon Roberts, adding a physical run defender to Patrick Graham's front seven as camp winds toward roster cuts.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: On Not Just Football, Cam Heyward and co-host Hayden broke down the first live-tackling reps of camp and the roster battles taking shape at Saint Vincent.
In their week-two check-in from Saint Vincent College in Latrobe, Steelers captain Cam Heyward covered Saturday Night Lights standouts, dorm life, rookie hazing and pricey rookie dinners, and debated 2027 Hall of Fame candidates including Antonio Brown.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: After a lopsided loss to the Miami Marlins, manager Don Kelly said the Pirates "felt sorry for ourselves" as their second-half slide deepened.
Don Kelly's frustration spilled into public view following the Marlins loss, the latest in a skid that has sunk the Pirates in the National League Central and dimmed their season.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Katie Ledecky won the 1,500-meter freestyle and the United States set a world record in the 4x100 mixed medley relay on the opening night of the Pan Pacific Championships.
On day one of the Pan Pacific Championships, Katie Ledecky took the 1,500 free and the American squad closed the night with a world record in the mixed medley relay, a commanding start for U.S. swimming.
Sources: ESPN Olympics · ↑ top
Latest developments: Olympic monobob gold medalist Elana Meyers Taylor said she will miss the coming World Cup bobsled season because of post-concussion symptoms.
Elana Meyers Taylor, the decorated American bobsledder and Olympic monobob champion, disclosed months of post-concussion symptoms and will not slide in the upcoming World Cup season.
Sources: ESPN Olympics · ↑ top
Latest developments: USA Swimming placed chief financial officer Cory Hilliard on leave after learning of his arrest on theft and embezzlement charges tied to a previous job.
USA Swimming, the sport's national governing body, sidelined CFO Cory Hilliard, 54, hired last December, following his arrest over alleged theft and embezzlement during his earlier tenure as an administrator in the University of Colorado athletic department.
Sources: ESPN Olympics · ↑ top
S&P 500 7,739.48 ▲ +2.3% Dow 53,892.03 ▲ +1.2% Nasdaq 26,535.65 ▲ +2.6% WTI crude 80.81 ▲ +1.1% EUR/USD 1.1546 ▲ +0.3% GBP/USD 1.3487 ▲ +0.4% USD/JPY 158.46 ▼ -0.5%