daily plain-text briefing: security, markets, business, and pittsburgh
Fresh SaaS and consumer breaches at RingCentral, Beacon CRM, and ShipMonk lead a day thick with new macOS malware, an unpatched GeoServer zero-day, and a router-hijacking botnet.
Latest developments: BleepingComputer detailed Evooo1Bot, a new modular Mirai-based Linux botnet that infects internet-facing gateway devices and converts them into SOCKS5 traffic-relay nodes.
The botnet rents compromised routers as proxies to anonymize criminal traffic; operators should patch gateway firmware, change default credentials, and block unsolicited inbound connections.
Sources: BleepingComputer · ↑ top
Latest developments: The ShinyHunters extortion crew published personal data on 1.6 million RingCentral accounts stolen in a July hack, a compromised AWS access key exposed in public JavaScript build artifacts spilled records across more than 1,000 charities running Beacon CRM, and a breach at logistics provider ShipMonk exposed 14,000 Trezor hardware-wallet customers.
The three incidents leaked names, addresses, email addresses, and phone numbers through stolen credentials and third-party providers; affected users should expect targeted phishing, and operators should rotate any cloud keys exposed in build artifacts.
Sources: BleepingComputer · SecurityWeek · SecurityWeek · SecurityWeek · ↑ top
Latest developments: SecurityWeek detailed AmnesiaStealer, a new Rust-based macOS infostealer that harvests passwords, keychain secrets, Chromium browser data, and Safari cookies, while Ars Technica reported active exploitation of a macOS Screen Sharing flaw that lets remote attackers log in without a password and seize full control of a Mac.
The two threats hit Mac users through malware and an authentication-bypass bug; users should update macOS, avoid untrusted installers, and disable Screen Sharing where they do not need it.
Sources: SecurityWeek · Ars Technica Security · ↑ top
Latest developments: Ukrainian police raided 94 fraudulent call centers in a nationwide operation of more than 400 searches, seizing $2 million and thousands of computers, phones, and SIM cards, while a US court sentenced a former Brightly Software contractor to two years in prison for a $2.5 million data-theft extortion scheme.
The call centers impersonated bank employees and pushed fake investment and cryptocurrency schemes; the twin actions show law enforcement pressing both organized fraud rings and insider extortionists.
Sources: Help Net Security · BleepingComputer · ↑ top
Latest developments: Hackers are exploiting an unpatched SQL-injection zero-day in GeoServer, the open-source geospatial server, to reach remote code execution before any fix exists.
GeoServer powers mapping and location services for many governments and enterprises; administrators should restrict internet exposure and watch for exploitation until a patch ships.
Sources: SecurityWeek · ↑ top
Latest developments: Kaspersky's Securelist found a new variant of the HoneyMyte espionage group's CoolClient backdoor carrying a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and analysts.
HoneyMyte, a China-linked APT, uses CoolClient for long-term access; the rootkit deepens its stealth and raises the detection bar for targeted organizations.
Sources: Securelist (Kaspersky) · ↑ top
Latest developments: President Trump today dismissed reports of food shortages and broken toilets aboard the USS Abraham Lincoln and vowed to extend its Middle East deployment as "not nearly long enough," hardening a standoff that now turns on which side buckles first under economic pressure.
The Trump administration is doubling down on sanctions and a naval blockade of Iran while Tehran bets that high oil prices will force Washington to relent, keeping the Strait of Hormuz contested and crude markets on edge; reports of poor conditions aboard the carrier USS Abraham Lincoln have drawn demands from lawmakers and sailors' families for answers.
Sources: WSJ World News · WSJ Markets · FT World · ↑ top
Tonight: Mostly Cloudy then Showers And Thunderstorms, low 70F.
Sunday: Showers And Thunderstorms then Chance Showers And Thunderstorms, high 83F.
Sunday Night: Showers And Thunderstorms, low 71F.
Latest developments: The Monessen City School District set a new first day of Tuesday, September 8, after air-quality tests confirmed fungal growth on water-damaged building materials, expanding on the earlier discovery of "abnormalities" behind the walls.
The Monessen City School District in Westmoreland County pushed back the start of its school year to September 8 after routine summer maintenance turned up fungal growth on water-damaged materials in two bathrooms, an office area, and the concession room of its middle-high school building, prompting building-wide air-quality testing.
Sources: KDKA · Pittsburgh Post-Gazette · ↑ top
Latest developments: Indiana Township supervisors voted down a contested housing development, ending the proposal after resident opposition.
The board of supervisors in Indiana Township, Allegheny County, rejected plans for a new housing development that had drawn organized opposition from residents.
Latest developments: The Post-Gazette's film review of Thursday's preseason opener graded right tackle Troy Fautanu and the offensive line, finding they left "a lot to clean up."
Breaking down the Steelers' 28-9 preseason win over the Green Bay Packers, the Post-Gazette wrote that Troy Fautanu and the offensive line showed breakdowns in pass protection and the run game that leave "a lot to clean up" before the opener.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette assessed general manager Omar Khan's first Steelers draft class as a foundation to build around, days after Keeanu Benton signed a five-year extension.
The Post-Gazette wrote that Steelers general manager Omar Khan's first draft class—headlined by defensive tackle Keeanu Benton, the 2023 second-round pick who just agreed to a five-year, $73.75 million deal—has become a core the team can build the roster around.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Kate Douglass broke the women's 50-meter freestyle world record in the preliminary heats at the Pan Pacific Championships.
American swimmer Kate Douglass set a world record in the women's 50-meter freestyle during the morning preliminary heats of the Pan Pacific Championships.
Sources: ESPN Olympics · ↑ top
Latest developments: United States internationals Sergiño Dest and Ricardo Pepi combined for the winning goal to give PSV Eindhoven its first Dutch league victory of the season Saturday.
USMNT teammates Sergiño Dest and Ricardo Pepi linked up for the decisive goal as PSV Eindhoven beat Excelsior for their first Eredivisie win of the 2026-27 season on Saturday, August 15.
Sources: ESPN Soccer · ↑ top
S&P 500 7,762.91 ▲ +0.7% Dow 53,822.10 ▼ -0.2% Nasdaq 26,634.30 ▲ +1.0% WTI crude 82.45 ▲ +6.6% EUR/USD 1.1546 ▲ +0.1% GBP/USD 1.3509 ▲ +0.4% USD/JPY 159.01 ▲ +0.8%