================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, August 16, 2026 - 8:06 AM EDT ================================================================ Artificial intelligence reshaped both sides of security today—driving a vulnerability-disclosure surge that has NIST reaching for AI, a $1 billion Cyera-Oasis deal to govern AI agents, and Anthropic's move to watermark Claude—while attackers actively exploited an unpatched macOS screen-sharing flaw to plant Monero miners. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] A flood of AI-discovered flaws is pushing NIST to weigh AI-driven triage even as Cyera bets $1 billion on Oasis to govern AI agent identities. see: AI-Driven Vulnerability Surge Pushes NIST Toward AI; Cyera Buys Oasis Security for AI Agent Control * [TREND] Public exploit code keeps shrinking defenders' window, with attackers planting Monero miners via macOS Screen Sharing days after disclosure as GitHub's Dependabot widens malware alerts to eight ecosystems. see: macOS Screen Sharing Flaw Exploited to Deploy Monero Miner; GitHub Dependabot Expands Malware Alerts to Eight Ecosystems * [TREND] Anthropic's plan to watermark Claude's output, prompted by the E.U. AI law, drew a sharp rebuttal from Ben Thompson calling it philosophically flawed and practically weak. see: Anthropic Plans to Watermark Claude's AI Text; Anthropic's Watermarking, How It (Probably) Works, Worse Than It Seems * [UPDATE (new)] NATO fighter jets shot down a suspected Russian drone over Romania, with allies publicly pinning the incursion on Moscow in a rare open attribution. see: NATO Jets Down Russian Drone Over Romania * [TREND] Skeptical readings pile up as Zitron argues AI's capital demands outrun revenue and Newport weighs whether AI coding tools truly change engineers' daily work. see: Premium: How Much Money Does AI Need?; On AI Coding and Its Discontents * [UPDATE (new)] Locally, the Pirates pushed Paul Skenes' start to Wednesday, the Steelers locked Keeanu Benton into five years, and Kate Douglass again lowered the 50 free world record. see: Pirates Push Back Skenes' Start; Benton's Five-Year Extension; Douglass Lowers 50 Free World Record Again SECURITY ---------------------------------------------------------------- 1. GITHUB DEPENDABOT EXPANDS MALWARE ALERTS TO EIGHT ECOSYSTEMS Vulnerabilities and Exploits · [supply-chain, malware, github] Latest developments: GitHub extended Dependabot malware alerts beyond npm to seven more package registries—PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. Since March 2026 Dependabot flagged malicious packages only for npm, leaving developers who pulled tainted dependencies from other registries with no warning. GitHub now covers eight ecosystems, closing a wide gap in software-supply-chain defense. - Help Net Security: https://www.helpnetsecurity.com/2026/08/16/week-in-review-salesforce-and-servicenow-portals-exposed-for-17-months-exploited-metabase-0-day/ 2. MACOS SCREEN SHARING FLAW EXPLOITED TO DEPLOY MONERO MINER Vulnerabilities and Exploits · [exploit, macos, cryptominer] Latest developments: The Netherlands' National Cyber Security Centre warned that attackers, armed with newly public exploit code, are logging into Macs over Screen Sharing and installing Monero cryptocurrency miners. The macOS authentication-bypass flaw lets a remote attacker log in over Screen Sharing without a password and seize full control of the machine. Mac owners should apply Apple's latest update immediately. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-exploit-macos-screen-sharing-flaw-to-deploy-monero-miner/ - Ars Technica Security: https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/ 3. AI-DRIVEN VULNERABILITY SURGE PUSHES NIST TOWARD AI AI Security · [ai, vulnerabilities, policy] Latest developments: Dark Reading reported that the National Institute of Standards and Technology, facing an AI-driven flood of vulnerability disclosures, is weighing AI tools to triage and process the backlog. AI-augmented research and scanning are pushing vulnerability disclosures to record volumes and straining the national reporting pipeline. NIST is now asking whether AI can help it manage the surge that AI itself helped create. - Dark Reading: https://www.darkreading.com/vulnerabilities-threats/ai-driven-bug-tsunami-nist-looks-to-ai 4. CYERA BUYS OASIS SECURITY FOR AI AGENT CONTROL AI Security · [ai, identity, acquisition] Latest developments: Cyera announced a roughly $1 billion acquisition of Oasis Security to build a unified control plane governing AI agent identities and access. The deal merges data security and identity into a single control plane that governs what AI agents can access, redefining privileged access around business context. It signals that enterprises now treat autonomous agents as a first-class identity risk. - Dark Reading: https://www.darkreading.com/identity-access-management-security/cyera-oasis-security-acquisition-ai-agent-control 5. ANTHROPIC PLANS TO WATERMARK CLAUDE'S AI TEXT AI Security · [ai, watermarking] Latest developments: BleepingComputer detailed how Anthropic plans to embed detectable watermarks in text its Claude models generate. Anthropic laid out a scheme to embed hidden signals in Claude-written text so others can identify AI-generated content. The effort aims to strengthen provenance as machine-written prose spreads across the web. - BleepingComputer: https://www.bleepingcomputer.com/news/artificial-intelligence/how-anthropic-plans-to-watermark-claudes-ai-generated-text/ BUSINESS AND POLITICS ---------------------------------------------------------------- * NATO Jets Down Russian Drone Over Romania Latest developments: NATO fighter jets shot down a suspected Russian drone that crossed into Romanian airspace, and allied officials pinned the incursion directly on Moscow in a rare public attribution. NATO warplanes downed a suspected Russian drone over Romania and blamed Moscow for the incursion, deepening fears that Russia's war on Ukraine could spill across the alliance's eastern frontier as Kyiv presses its own drone assault of more than 600 aircraft on Moscow. - WSJ World News: https://www.wsj.com/world/europe/nato-jets-down-suspected-russian-drone-over-romania-19d66e3d?mod=rss_worldnews PITTSBURGH ---------------------------------------------------------------- Weather: Today: Showers And Thunderstorms, high 83F. Tonight: Showers And Thunderstorms, low 71F. Monday: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 82F. Business: * Pennsylvania Data-Center Fight Latest developments: The battle over data-center construction across Pennsylvania grinds on while the General Assembly sits idle through its summer recess. Residents such as homeschooling parent Anna Clement are pressing Pennsylvania lawmakers over the noise and scale of proposed data centers, a fight that continues without state regulation as the legislature stays on break, even as the industry courts the commonwealth's cheap power. - TribLive: https://triblive.com/news/pennsylvania/noisy-data-center-debate-goes-on-while-lawmakers-on-summer-break/ * Pitt Targets Aggressive Childhood Cancer Latest developments: University of Pittsburgh researchers reported progress against an aggressive cancer most often diagnosed in infants, testing a new combination of two treatments. University of Pittsburgh researchers are pairing two therapies to attack an aggressive cancer diagnosed mostly in infants, an approach they say could also work against other tumors and adds to the region's research-economy pipeline. - TribLive: https://triblive.com/local/regional/pitt-researchers-combine-therapies-to-target-aggressive-childhood-cancer/ Around town: * Turnpike Safety Changes After Tunnel Fire Latest developments: The Pennsylvania Turnpike is adopting new safety measures after a fire inside the Allegheny Mountain Tunnel. The Pennsylvania Turnpike is making safety changes following a fire in the Allegheny Mountain Tunnel, one of the toll road's mountain tunnels in the Allegheny highlands that carry traffic between the Pittsburgh region and central Pennsylvania. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/08/16/pennsylvania-turnpike-fire-alegheny-mountain-tunnel/stories/202608160049 * Butler County Special Election Latest developments: A special election to fill Pennsylvania's 12th state House district in Butler County shapes up as an early read on the 2026 midterms. A special election for the 12th state House district seat in Butler County is drawing outsized attention as a bellwether that could forecast how November's midterm elections break across Pennsylvania. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-local/2026/08/16/butler-county-special-election-12th-house-district/stories/202608140051 SPORTS ---------------------------------------------------------------- Around the Teams: * Pirates Push Back Skenes' Start Latest developments: The Pirates moved ace Paul Skenes' next start from Sunday to Wednesday to give the All-Star extra rest. Manager Don Kelly pushed Paul Skenes' scheduled start against the Boston Red Sox back three days to Wednesday for added rest; Skenes said he doesn't necessarily disagree with the call amid the Pirates' second-half slide. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/15/pirates-red-sox-paul-skenes-start/stories/202608150043 * Benton's Five-Year Extension Latest developments: The Steelers set defensive tackle Keeanu Benton's new deal at five years and $73.75 million, and Benton spoke at Saturday's training camp. The Pittsburgh Steelers locked up defensive tackle Keeanu Benton, the Wisconsin product from general manager Omar Khan's first draft class, on a five-year, $73.75 million extension, cementing him as a defensive-line cornerstone. - Post-Gazette Steelers: https://www.post-gazette.com/sports/2026/08/14/steelers-nfl-defensive-end-keeanu-benton-wisconsin/stories/202608140076 Team USA: * Ledecky's First 800m International Loss Latest developments: Lani Pallister of Australia ran down Katie Ledecky to win the 800-meter freestyle at the Pan Pacific Championships, the first time an international rival beat Ledecky in the event. Australia's Lani Pallister edged Katie Ledecky in the 800-meter freestyle at the Pan Pacific Championships, handing the American her first international loss in a race she has owned; Pallister had already beaten Ledecky in the 400 free a day earlier. - ESPN Olympics: https://www.espn.com/olympics/swimming/story/_/id/49625094/pallister-hands-ledecky-first-international-800-free-loss * Douglass Lowers 50 Free World Record Again Latest developments: Kate Douglass broke the women's 50-meter freestyle world record a second time in one day, winning the Pan Pacific final in 23.19 seconds. Kate Douglass lowered her own 50-meter freestyle world record twice on Saturday at the Pan Pacific Championships, capping the day by winning the final in 23.19 seconds. - ESPN Olympics: https://www.espn.com/olympics/swimming/story/_/id/49620191/kate-douglass-blazes-50-meter-freestyle-world-record READING ---------------------------------------------------------------- * Stratechery -- Anthropic's Watermarking, How It (Probably) Works, Worse Than It Seems Ben Thompson argues Anthropic's move to watermark AI output, adopted to satisfy the E.U.'s AI law, is a bad idea on philosophical grounds and would work worse in practice than it appears. https://stratechery.com/2026/anthropics-watermarking-how-it-probably-works-worse-than-it-seems/ * Ed Zitron -- Premium: How Much Money Does AI Need? Zitron tallies the enormous capital the AI industry keeps demanding and argues the sums have swelled far beyond what current revenue can justify. https://www.wheresyoured.at/premium-how-much-money-does-ai-need/ * Cal Newport -- On AI Coding and Its Discontents Newport uses a converted AI skeptic's account from Silicon Valley to weigh how much AI coding tools actually change the day-to-day work of software engineering. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,762.91 ▲ +0.7% Dow 53,822.10 ▼ -0.2% Nasdaq 26,634.30 ▲ +1.0% WTI crude 82.45 ▲ +6.6% EUR/USD 1.1546 ▲ +0.1% GBP/USD 1.3500 ▲ +0.3% USD/JPY 159.01 ▲ +0.8% ================================================================ Generated 2026-08-16 08:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================