infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Attackers pounced on a max-severity SAP Commerce Cloud flaw within three days of its patch as France's tax agency and oil giant Shell confronted fresh data-theft claims.


Emerging Trends and Key Updates

Security

1. Compliance and Post-Quantum Deadlines Advance

Policy and Regulation · [policy, encryption, compliance]

Latest developments: Google Cloud published a post-quantum cryptography roadmap targeting 2029 readiness with milestones in 2027 and 2028, AWS Certificate Manager set 2027 to phase out email-validated certificate renewals ahead of the CA/Browser Forum's March 15, 2028 cutoff, and Europe opened 17 draft Cyber Resilience Act standards for comment.

read more

The moves push enterprises toward quantum-resistant encryption, stronger certificate validation, and Cyber Resilience Act conformity, whose connected-product rules bind manufacturers by the end of 2027.

Sources: SecurityWeek · Help Net Security · Help Net Security · ↑ top

2. France Tax Breach and Shell Clop Claim

Data Breaches · [breach, ransomware, extortion]

Latest developments: France confirmed intruders reached the Directorate General of Public Finances in late June by stealing or misusing an identity, while a hacker claims 600,000 victims, and Shell opened an investigation after the Clop gang claimed it stole 89 gigabytes of data.

read more

France's tax authority, the DGFiP, is probing the June intrusion, and oil giant Shell is examining Clop's extortion claim; neither has confirmed the full scope.

Sources: The Record · BleepingComputer · ↑ top

3. SAP Commerce Cloud Flaw Under Active Exploitation

Vulnerabilities and Exploits · [vulnerability, exploit, patch]

Latest developments: Threat intelligence firm Defused reports attackers began targeting a maximum-severity SAP Commerce Cloud remote code execution flaw just three days after SAP patched it.

read more

The vulnerability lets attackers run code on SAP Commerce Cloud e-commerce deployments; administrators should apply SAP's fix immediately.

Sources: BleepingComputer · ↑ top

4. Trivy Scanner Drives 2,500-Org Compromise

Software Supply Chain · [supply-chain, breach]

Latest developments: SecurityWeek reports the open-source scanner Trivy drove the compromise of 2,500 organizations, with over 95 percent of them exposed before the malicious LiteLLM packages first blamed ever appeared.

read more

Investigators traced the mass compromise to Trivy exposure across enterprises; affected organizations should review how they deploy the scanner.

Sources: SecurityWeek · ↑ top

5. Cyera Buys Oasis for AI Agent Identity Control

AI Security · [ai, identity, m&a]

Latest developments: Cyera agreed to buy Oasis Security for $1 billion to merge data security and identity into one control plane for AI agents, redefining privileged access around business context in place of static roles.

read more

The deal targets the governance gap as enterprises deploy autonomous AI agents that need scoped, monitored access to data and systems.

Sources: Dark Reading · ↑ top

6. Flock Tightens License-Plate Privacy Controls

Policy and Regulation · [privacy, surveillance, policy]

Latest developments: Flock Safety will require every customer to turn on its Audit Assistance feature for flagging abnormal searches and will hold most license-plate data for only seven days, answering scandals over officer abuse.

read more

Flock Safety runs a nationwide automated license-plate reader network used by police departments; the new controls follow reports of officers misusing the system.

Sources: The Record · ↑ top

Pittsburgh

Weather

Today: Slight Chance Showers And Thunderstorms, high 82F.

Tonight: Partly Cloudy, low 66F.

Saturday: Mostly Sunny, high 86F.

Business

Leetsdale Faith-Based Boxing Gym Falls Through

Latest developments: TribLive reported August 14 that organizers pulled the plan after they could not satisfy Leetsdale borough ordinances.

read more

A proposed faith-based boxing gym in Leetsdale, a borough in Allegheny County's Sewickley area, will not open; the organizers abandoned the project after finding no way to comply with borough ordinances.

Sources: TribLive · ↑ top

Derry Pool Rebounds on Higher Lifeguard Pay

Latest developments: TribLive reported August 14 that the Derry Community Pool ran a smooth 2026 season after raising lifeguard pay.

read more

Derry Borough Mayor Nathan Bundy said the Derry Community Pool in Westmoreland County operated smoothly all summer on strong attendance and higher lifeguard wages, reversing 2025, when a lifeguard shortage forced the pool to close on several days.

Sources: TribLive · ↑ top

Around Town

Pennsylvania Funds Free Menstrual Products in Schools

Latest developments: WTAE reported August 14 that Pennsylvania will spend $9 million over three years to place free menstrual products in schools.

read more

Pennsylvania is directing $9 million over the next three years to supply free menstrual products in its public schools, a program the state frames as attacking "period poverty" among students.

Sources: WTAE · ↑ top

Pennsylvania Game Commission Ends Deputy Warden Program

Latest developments: WPXI reported August 14 that the Pennsylvania Game Commission will officially end its Deputy Game Warden Program on September 1.

read more

The Pennsylvania Game Commission is closing its Deputy Game Warden Program, which embedded volunteer deputies within law enforcement, effective September 1, 2026.

Sources: WPXI · ↑ top

North Allegheny Opens 2026-27 Year August 18

Latest developments: TribLive reported August 14 that North Allegheny School District begins classes August 18 with a larger student body.

read more

North Allegheny School District, north of Pittsburgh, starts its 2026-27 school year on August 18, 2026, adding enrollment along with new and returning staff.

Sources: TribLive · ↑ top

Sports

Around the Teams

Steelers Quarterbacks Impress in Preseason Debut

Latest developments: Post-Gazette and TribLive coverage August 13-14 praised Drew Allar, Will Howard, and Mason Rudolph and the new-look passing attack after Aaron Rodgers sat out.

read more

With Aaron Rodgers resting, quarterbacks Drew Allar, Will Howard, and Mason Rudolph each moved the Steelers' offense in Mike McCarthy's preseason opener against Green Bay; Post-Gazette columnist Noah Hiles wrote the team's new passing scheme made a strong first impression, and TribLive said the Allar hype train had left the station.

Sources: Post-Gazette · Post-Gazette · ↑ top

Rookie Germie Bernard Shines in NFL Debut

Latest developments: The Post-Gazette reported August 14 that rookie receiver Germie Bernard made plays and "doesn't blink" in his first NFL action.

read more

Steelers rookie wide receiver Germie Bernard drew praise for a composed preseason debut against the Packers, catching passes and settling into the offense without visible nerves, the Post-Gazette reported.

Sources: Post-Gazette · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,757.29  ▲ +1.5%
Dow        53,883.00  ▲ +0.5%
Nasdaq     26,626.59  ▲ +2.0%
WTI crude      81.61  ▲ +3.7%
EUR/USD       1.1540  ▲ +0.1%
GBP/USD       1.3493  ▲ +0.2%
USD/JPY       158.81  ▲ +0.4%