================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, August 15, 2026 - 7:35 PM EDT ================================================================ Fresh SaaS and consumer breaches at RingCentral, Beacon CRM, and ShipMonk lead a day thick with new macOS malware, an unpatched GeoServer zero-day, and a router-hijacking botnet. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] ShinyHunters dumped 1.6 million RingCentral records while a leaked AWS key spilled charity data, headlining a wave of cloud-key and SaaS breaches. see: RingCentral and SaaS Breach Wave * [TREND] Attackers are crowding onto the Mac, pairing the new Rust-based AmnesiaStealer infostealer with active exploitation of a passwordless Screen Sharing flaw that hands over full control. see: AmnesiaStealer and macOS Threats * [TREND] Internet-facing infrastructure is in the crosshairs as Evooo1Bot turns routers into SOCKS5 relays and an unpatched GeoServer SQL-injection zero-day enables remote code execution. see: Evooo1Bot Router Botnet; GeoServer Zero-Day Under Attack * [UPDATE (new)] Ukrainian police raided 94 fraudulent call centers in a nationwide operation, seizing $2 million and thousands of computers, phones, and SIM cards. see: Cybercrime Crackdowns Widen * [TREND] AI's economics and ethics dominate the Reading list, spanning Anthropic's watermarking, Zitron's tally of the industry's capital demands, and Newport on AI coding's limits. see: Anthropic’s Watermarking, How It (Probably) Works, Worse Than It Seems; Premium: How Much Money Does AI Need?; On AI Coding and Its Discontents * [UPDATE (new)] Monessen pushed its first school day to September 8 over confirmed fungal growth as Indiana Township supervisors voted down a contested housing development. see: Monessen Delays School Year Over Fungal Growth; Indiana Township Rejects Housing Development SECURITY ---------------------------------------------------------------- 1. EVOOO1BOT ROUTER BOTNET Ransomware and Cybercrime · [botnet, malware] Latest developments: BleepingComputer detailed Evooo1Bot, a new modular Mirai-based Linux botnet that infects internet-facing gateway devices and converts them into SOCKS5 traffic-relay nodes. The botnet rents compromised routers as proxies to anonymize criminal traffic; operators should patch gateway firmware, change default credentials, and block unsolicited inbound connections. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes/ 2. RINGCENTRAL AND SAAS BREACH WAVE Data Breaches · [breach] Latest developments: The ShinyHunters extortion crew published personal data on 1.6 million RingCentral accounts stolen in a July hack, a compromised AWS access key exposed in public JavaScript build artifacts spilled records across more than 1,000 charities running Beacon CRM, and a breach at logistics provider ShipMonk exposed 14,000 Trezor hardware-wallet customers. The three incidents leaked names, addresses, email addresses, and phone numbers through stolen credentials and third-party providers; affected users should expect targeted phishing, and operators should rotate any cloud keys exposed in build artifacts. - BleepingComputer: https://www.bleepingcomputer.com/news/security/ringcentral-data-breach-exposed-info-of-16-million-accounts/ - SecurityWeek: https://www.securityweek.com/1-6-million-likely-impacted-by-ringcentral-data-breach/ - SecurityWeek: https://www.securityweek.com/over-1000-charities-hit-by-beacon-crm-data-breach/ - SecurityWeek: https://www.securityweek.com/14000-trezor-customers-impacted-by-data-breach-at-shipmonk/ 3. AMNESIASTEALER AND MACOS THREATS Vulnerabilities and Exploits · [malware, macos] Latest developments: SecurityWeek detailed AmnesiaStealer, a new Rust-based macOS infostealer that harvests passwords, keychain secrets, Chromium browser data, and Safari cookies, while Ars Technica reported active exploitation of a macOS Screen Sharing flaw that lets remote attackers log in without a password and seize full control of a Mac. The two threats hit Mac users through malware and an authentication-bypass bug; users should update macOS, avoid untrusted installers, and disable Screen Sharing where they do not need it. - SecurityWeek: https://www.securityweek.com/amnesiastealer-macos-malware-steals-data-controls-browser-sessions/ - Ars Technica Security: https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/ 4. CYBERCRIME CRACKDOWNS WIDEN Ransomware and Cybercrime · [cybercrime, arrest] Latest developments: Ukrainian police raided 94 fraudulent call centers in a nationwide operation of more than 400 searches, seizing $2 million and thousands of computers, phones, and SIM cards, while a US court sentenced a former Brightly Software contractor to two years in prison for a $2.5 million data-theft extortion scheme. The call centers impersonated bank employees and pushed fake investment and cryptocurrency schemes; the twin actions show law enforcement pressing both organized fraud rings and insider extortionists. - Help Net Security: https://www.helpnetsecurity.com/2026/08/14/ukraine-fraudulent-call-centers-shut-down/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/data-analyst-sent-to-prison-for-stealing-data-extorting-employer/ 5. GEOSERVER ZERO-DAY UNDER ATTACK Vulnerabilities and Exploits · [zero-day, exploit] Latest developments: Hackers are exploiting an unpatched SQL-injection zero-day in GeoServer, the open-source geospatial server, to reach remote code execution before any fix exists. GeoServer powers mapping and location services for many governments and enterprises; administrators should restrict internet exposure and watch for exploitation until a patch ships. - SecurityWeek: https://www.securityweek.com/hackers-exploiting-unpatched-geoserver-zero-day/ 6. HONEYMYTE ADDS KERNEL ROOTKIT Nation-State Activity · [apt, rootkit] Latest developments: Kaspersky's Securelist found a new variant of the HoneyMyte espionage group's CoolClient backdoor carrying a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and analysts. HoneyMyte, a China-linked APT, uses CoolClient for long-term access; the rootkit deepens its stealth and raises the detection bar for targeted organizations. - Securelist (Kaspersky): https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran War Becomes a Contest of Economic Endurance Latest developments: President Trump today dismissed reports of food shortages and broken toilets aboard the USS Abraham Lincoln and vowed to extend its Middle East deployment as "not nearly long enough," hardening a standoff that now turns on which side buckles first under economic pressure. The Trump administration is doubling down on sanctions and a naval blockade of Iran while Tehran bets that high oil prices will force Washington to relent, keeping the Strait of Hormuz contested and crude markets on edge; reports of poor conditions aboard the carrier USS Abraham Lincoln have drawn demands from lawmakers and sailors' families for answers. - WSJ World News: https://www.wsj.com/world/middle-east/iran-war-economic-pressure-738b52cf?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/business/navy-deployment-in-middle-east-not-nearly-long-enough-trump-says-b6af0bac?mod=rss_markets_main - FT World: https://www.ft.com/content/4bd6537f-db17-4013-be3f-c70a1299183c?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Mostly Cloudy then Showers And Thunderstorms, low 70F. Sunday: Showers And Thunderstorms then Chance Showers And Thunderstorms, high 83F. Sunday Night: Showers And Thunderstorms, low 71F. Around town: * Monessen Delays School Year Over Fungal Growth Latest developments: The Monessen City School District set a new first day of Tuesday, September 8, after air-quality tests confirmed fungal growth on water-damaged building materials, expanding on the earlier discovery of "abnormalities" behind the walls. The Monessen City School District in Westmoreland County pushed back the start of its school year to September 8 after routine summer maintenance turned up fungal growth on water-damaged materials in two bathrooms, an office area, and the concession room of its middle-high school building, prompting building-wide air-quality testing. - KDKA: https://www.cbsnews.com/pittsburgh/news/monessen-school-district-delayed-mold-air-quality/ - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/08/15/monnessen-school-district-school-delay/stories/202608150029 * Indiana Township Rejects Housing Development Latest developments: Indiana Township supervisors voted down a contested housing development, ending the proposal after resident opposition. The board of supervisors in Indiana Township, Allegheny County, rejected plans for a new housing development that had drawn organized opposition from residents. - WPXI: https://www.wpxi.com/news/local/indiana-township-supervisors-vote-down-controversial-housing-development-plans/I6ETOCQT4BD4PMPQXUJCVHW234/ SPORTS ---------------------------------------------------------------- Around the Teams: * Film Study Flags Fautanu and the Line Latest developments: The Post-Gazette's film review of Thursday's preseason opener graded right tackle Troy Fautanu and the offensive line, finding they left "a lot to clean up." Breaking down the Steelers' 28-9 preseason win over the Green Bay Packers, the Post-Gazette wrote that Troy Fautanu and the offensive line showed breakdowns in pass protection and the run game that leave "a lot to clean up" before the opener. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/15/film-fautanu-offensiveline-nfl-preseason/stories/202608130063 * Khan's First Draft Class Anchors the Roster Latest developments: The Post-Gazette assessed general manager Omar Khan's first Steelers draft class as a foundation to build around, days after Keeanu Benton signed a five-year extension. The Post-Gazette wrote that Steelers general manager Omar Khan's first draft class—headlined by defensive tackle Keeanu Benton, the 2023 second-round pick who just agreed to a five-year, $73.75 million deal—has become a core the team can build the roster around. - Post-Gazette Steelers: https://www.post-gazette.com/sports/2026/08/15/steelers-gm-omar-khan-draft-benton-keeanu/stories/202608150038 Team USA: * Douglass Sets 50 Freestyle World Record Latest developments: Kate Douglass broke the women's 50-meter freestyle world record in the preliminary heats at the Pan Pacific Championships. American swimmer Kate Douglass set a world record in the women's 50-meter freestyle during the morning preliminary heats of the Pan Pacific Championships. - ESPN Olympics: https://www.espn.com/olympics/swimming/story/_/id/49620191/kate-douglass-blazes-50-meter-freestyle-world-record * Dest and Pepi Combine for PSV Win Latest developments: United States internationals Sergiño Dest and Ricardo Pepi combined for the winning goal to give PSV Eindhoven its first Dutch league victory of the season Saturday. USMNT teammates Sergiño Dest and Ricardo Pepi linked up for the decisive goal as PSV Eindhoven beat Excelsior for their first Eredivisie win of the 2026-27 season on Saturday, August 15. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49621314/usa-sergino-dest-ricardo-pepi-psv-eindhoven-excelsior READING ---------------------------------------------------------------- * Stratechery -- Anthropic’s Watermarking, How It (Probably) Works, Worse Than It Seems Ben Thompson argues that Anthropic's move to watermark AI-generated output in response to the European Union's AI law is a bad idea, flawed first on philosophical grounds and weaker in practice than it appears. https://stratechery.com/2026/anthropics-watermarking-how-it-probably-works-worse-than-it-seems/ * Ed Zitron -- Premium: How Much Money Does AI Need? Zitron tallies the staggering scale of capital the AI industry must keep raising to sustain its buildout and argues the demands are outrunning any plausible revenue to justify them. https://www.wheresyoured.at/premium-how-much-money-does-ai-need/ * Cal Newport -- On AI Coding and Its Discontents Newport uses a senior Silicon Valley engineer's turn from AI skeptic to convert to examine what AI-assisted coding actually delivers and where its limits and frustrations lie. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,762.91 ▲ +0.7% Dow 53,822.10 ▼ -0.2% Nasdaq 26,634.30 ▲ +1.0% WTI crude 82.45 ▲ +6.6% EUR/USD 1.1546 ▲ +0.1% GBP/USD 1.3509 ▲ +0.4% USD/JPY 159.01 ▲ +0.8% ================================================================ Generated 2026-08-15 19:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================