daily plain-text briefing: security, markets, business, and pittsburgh
The ShinyHunters extortion group published personal data on 1.6 million RingCentral accounts, the largest of a day thick with third-party vendor breaches.
Latest developments: The ShinyHunters group published data on 1.6 million RingCentral accounts, Trezor disclosed 14,000 customers exposed through logistics provider ShipMonk, and a compromised AWS access key found in public JavaScript build artifacts drove a Beacon CRM breach hitting more than 1,000 charities.
RingCentral, a cloud communications provider, lost names, addresses, emails, and phone numbers on 1.6 million accounts to ShinyHunters, which broke in during July; hardware wallet maker Trezor and over 1,000 charities using Beacon CRM lost similar records through hacked suppliers. Audit vendor access, rotate exposed keys, and watch for phishing against affected customers.
Sources: BleepingComputer · SecurityWeek · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Kaspersky found HoneyMyte's CoolClient backdoor now ships a kernel-mode rootkit driver that hides processes, files, and network connections; BleepingComputer tied the Jewelbug group to espionage against governments and militaries running in parallel with cryptocurrency fraud; and Apple sent fresh threat notifications warning targets of mercenary spyware attacks.
HoneyMyte, a China-linked APT, deepened CoolClient's stealth with a Windows rootkit, while Jewelbug blends state espionage against government webmail with crypto theft and Apple's alerts flag commercial spyware aimed at individual iPhones. Targets should preserve alerts, harden endpoints, and seek forensic help.
Sources: Securelist (Kaspersky) · BleepingComputer · BleepingComputer · ↑ top
Latest developments: Ukrainian police raided 94 fraudulent call centers in more than 400 searches, seizing roughly $2 million and thousands of computers, phones, and SIM cards, and a US court sentenced a former Brightly Software data-analyst contractor to two years for a $2.5 million data-theft extortion scheme.
The Ukrainian call centers impersonated bank employees and pushed fake investment and cryptocurrency services to drain victims' accounts, while the Brightly insider stole company data to extort his employer. Both cases show law enforcement striking fraud operations and rogue contractors alike.
Sources: Help Net Security · BleepingComputer · BleepingComputer · ↑ top
Latest developments: SecurityWeek reports hackers are exploiting an unpatched GeoServer SQL injection zero-day for remote code execution, and WordPress shipped 7.0.4 to close a separate remote code execution flaw that Author-level users could trigger through malicious PostScript files.
GeoServer, the open-source geospatial server, carries a SQL injection defect attackers exploit for code execution with no fix yet available, so operators should restrict exposure and monitor logs; WordPress 7.0.4 patches its own PostScript-based RCE. Update WordPress immediately and isolate exposed GeoServer instances.
Sources: SecurityWeek · SecurityWeek · ↑ top
Latest developments: SecurityWeek detailed AmnesiaStealer, a Rust-based macOS infostealer that harvests passwords, keychain contents, Chromium browser data, and Safari cookies while hijacking browser sessions, and The Record documented a new Mirai variant adding encrypted command-and-control traffic and a sniffer that hunts default credentials.
AmnesiaStealer targets Mac users' credentials and live sessions, while the upgraded Mirai code quietly recruits exposed devices with default logins into a botnet. Change default passwords, monitor endpoints, and block unusual outbound traffic.
Sources: SecurityWeek · The Record · ↑ top
Latest developments: Watermark-removal tools flooded the web days after Anthropic began watermarking Claude's text output, including an open-source project with over 4,500 GitHub stars, though none can prove they work because Anthropic withholds its detector, and 404 Media found a litigant who hid a prompt injection in a legal filing instructing any AI reader to rule in their favor.
Anthropic's new text watermark for Claude drew immediate removal tools of unverifiable efficacy, and a court filing's buried instruction shows prompt injection creeping into everyday documents. Treat AI-processed text as untrusted input and validate provenance claims.
Sources: BleepingComputer · 404 Media · ↑ top
Latest developments: Talks over the Strait of Hormuz stalled, driving Brent crude toward $88 and a weekly gain near 6% as the United States prepared to send another aircraft carrier to the Middle East, while home-loan rates jumped across America and several large European economies.
Iran's blockade of the Strait of Hormuz, the chokepoint for much of the world's seaborne oil, has kept crude elevated for weeks; the Financial Times reports the standoff has now pushed mortgage costs higher for households in the United States and big European economies, spreading the shock far from the Gulf.
Sources: WSJ Markets · FT World · ↑ top
Today: Slight Chance Showers And Thunderstorms, high 82F.
Tonight: Partly Cloudy, low 66F.
Saturday: Mostly Sunny, high 86F.
Latest developments: PublicSource published an August 14 examination of how Pittsburgh's Homewood neighborhood holds together after decades of lost investment.
Homewood, a predominantly Black neighborhood in Pittsburgh's East End, shed population and commerce over decades; PublicSource found its endurance now rests on a handful of small-business owners, preserved local history, and a deep music tradition.
Sources: PublicSource · ↑ top
Latest developments: TribLive reported August 14 that the owner of South Pike Postal in Buffalo Township stopped a customer from losing $100,000 to scammers.
Two months ago a woman walked into South Pike Postal in Buffalo Township to overnight-ship a coffee pot she had bought at Dollar General; the shop owner recognized a scam underway and intervened, sparing her a $100,000 loss.
Latest developments: TribLive reported August 14 that renovations at five North Allegheny schools remain on schedule, with construction starting this coming year at slightly higher estimated costs.
The North Allegheny School District, in the northern suburbs of Pittsburgh, is renovating five schools; officials say the work stays on schedule though the estimated price crept up, with construction set to begin during the 2026-27 school year.
Latest developments: WPXI reported August 14 that Woodland Hills School Board member Terri Lawson, tied to a theft case, is expected to resign in September.
Terri Lawson, a member of the Woodland Hills School Board east of Pittsburgh, faces a theft case and plans to step down from the board next month.
Latest developments: KDKA and WTAE forecast light showers around Pittsburgh on Friday, a dry and pleasant Saturday, and an Impact Day Sunday with rounds of rain.
Forecasters call Saturday the best day of the weekend across the Pittsburgh region, with light passing showers Friday and heavier, more widespread rain returning Sunday, the first round arriving before dawn.
Latest developments: KDKA reported August 14 that Little Italy Days opened in Pittsburgh's Bloomfield neighborhood, running through the weekend of August 13-16 in its 24th year.
Little Italy Days, a free street festival built around Italian culture, music, and food, fills Liberty Avenue in Pittsburgh's Bloomfield neighborhood through Sunday, August 16; caterer Tambellini Event Catering alone expects to serve roughly 2,400 meatballs, 500 pounds of sausage, and 500 pounds of pasta.
Sources: KDKA · NEXTpittsburgh Arts & Entertainment · ↑ top
Latest developments: The Post-Gazette cited a source saying the Steelers are set to re-sign veteran linebacker Elandon Roberts.
Pittsburgh is bringing Elandon Roberts back, restoring an experienced run-stuffing linebacker to Patrick Graham's front seven for the 2026 season.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The 'Not Just Football with Cam Heyward' episode posted August 12 checked in from week two of Steelers camp at Saint Vincent College.
On his 'Not Just Football' podcast, Steelers defensive lineman Cam Heyward and co-host Hayden broke down the first live-tackling reps and Saturday Night Lights standouts, swapped stories about dorm life and expensive rookie dinners, and debated a 2027 Hall of Fame class that includes Antonio Brown.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: ESPN reported that Katie Ledecky won the 1,500-meter freestyle on the August 12 opening night of the Pan Pacific Championships, and the United States closed the session with a world record in the 4x100-meter mixed medley relay.
At the Pan Pacific swimming championships, American distance star Katie Ledecky took the 1,500 freestyle and the United States set a world record in the mixed medley relay, with Gretchen Walsh and Katharine Berkoff among the night's winners.
Sources: ESPN Olympics · ↑ top
Latest developments: ESPN reported August 12 that Olympic monobob champion Elana Meyers Taylor will miss the coming World Cup bobsled season.
Elana Meyers Taylor, the United States monobob Olympic gold medalist, said post-concussion symptoms that have lingered for months will keep her out of the entire upcoming World Cup bobsled season.
Sources: ESPN Olympics · ↑ top
S&P 500 7,757.29 ▲ +1.5% Dow 53,883.00 ▲ +0.5% Nasdaq 26,626.59 ▲ +2.0% WTI crude 81.61 ▲ +3.7% EUR/USD 1.1540 ▲ +0.1% GBP/USD 1.3493 ▲ +0.2% USD/JPY 158.81 ▲ +0.4%