daily plain-text briefing: security, markets, business, and pittsburgh
Data thieves flooded the market with records lifted from McDonald's, France's tax service, and crypto-wallet maker SafePal, while a China-linked crew turned a VMware vCenter flaw into ransomware.
Latest developments: Cryptocurrency wallet maker SafePal disclosed a breach exposing order data on 39,798 customers, and a threat actor is now selling the stolen information.
An authorization flaw in an order-tracking plug-in let one customer view another's order details—names, emails, shipping addresses, phone numbers, and purchase records—for orders placed March 2, 2025 through April 11, 2026. Affected buyers face phishing and physical-targeting risk.
Sources: BleepingComputer · Help Net Security · SecurityWeek · ↑ top
Latest developments: A threat actor claims it pulled millions of records from McDonald's, Tata Consultancy Services, Vodafone, and other large companies out of Microsoft Azure environments.
The attacker is advertising the stolen data for sale across several Fortune 500 firms. Companies running workloads in Azure should audit access keys and rotate exposed credentials.
Sources: SecurityWeek · ↑ top
Latest developments: France's Ministry of the Economy and Finance confirmed the intrusion into the General Directorate of Public Finances stole data on 678,000 individuals, above the 600,000 a hacker first claimed.
An attacker reached DGFiP systems and took personal data belonging to 678,000 people. Affected French taxpayers should brace for targeted fraud and phishing.
Sources: BleepingComputer · ↑ top
Latest developments: Researchers tied the exploitation of CVE-2026-59310 in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat that now deploys Babuk-derived ransomware.
CVE-2026-59310 is a CVSS 9.8 directory-traversal flaw in VMware vCenter that yields remote code execution. Organizations must apply Broadcom's patch and hunt for the reverse SSH persistence attackers plant.
Sources: The Hacker News · ↑ top
Latest developments: Microsoft is building a Microsoft Defender patch for the ShieldBreak privilege-escalation zero-day, now tracked as CVE-2026-69414, that researcher Nightmare Eclipse disclosed last week.
ShieldBreak lets attackers escalate privileges on Windows systems. Until Microsoft ships the fix, defenders should tighten Defender configurations and watch for exploitation.
Sources: BleepingComputer · ↑ top
Latest developments: Researchers at the University of Birmingham and Durham University unveiled Download More RAM, an attack that knocks down some of Windows 11's toughest protections by targeting the configuration chip on DIMM memory modules without opening the machine.
The attack assumes an intruder already holds privileged access, then abuses a DIMM configuration chip that never verifies who is asking to defeat hardware-backed defenses. Enterprises should treat privileged access as the critical control.
Sources: Help Net Security · ↑ top
Latest developments: A ceasefire in the U.S.-Iran war is set to expire August 17, and intercepted communications show Tehran's hard-line leaders preparing to escalate into a longer, costlier war.
The United States and Iran remain at war over the Strait of Hormuz, the passage for roughly a fifth of the world's seaborne oil; Washington enforces a blockade of Iranian ports while Iran and Oman inch toward a deal on the strait, keeping a heavy risk premium in Brent and WTI crude.
Sources: WSJ World News · WSJ US Business · WSJ Markets · WSJ Markets · ↑ top
Latest developments: Japan's 10-year government bond yield climbed toward 3% on August 17, a level unseen in three decades, as a weak yen stokes inflation.
A sliding yen and quickening inflation pushed Japanese long-term rates to their highest in a generation while second-quarter growth came in below forecasts during the Iran energy shock; the surge tests Treasury Secretary Scott Bessent's yen backstop through the Federal Reserve's FIMA repo facility, which the Financial Times calls a wobbly support.
Sources: FT Markets · FT Markets · FT World · ↑ top
Today: Showers And Thunderstorms, high 81F.
Tonight: Chance Showers And Thunderstorms then Patchy Fog, low 63F.
Tuesday: Patchy Fog then Mostly Sunny, high 82F.
Latest developments: WPXI reported August 17 that Allegheny County's foreclosure rate now ranks among the highest in the country.
One in almost every 1,900 properties in Allegheny County faces foreclosure, a rate that places the Pittsburgh region near the worst in the United States.
Latest developments: Les Murphy has struck out on his own with a new restaurant, Murph's Kitchen, in Millvale.
After 12 years running the wing operation at a Mount Washington bar, Les Murphy opened Murph's Kitchen inside Strange Roots in Millvale.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: KDKA reported August 17 that PennDOT's diverging diamond interchange project on the Parkway West in Robinson Township is kicking into high gear.
PennDOT is building a diverging diamond interchange on the Parkway West in Robinson Township, another major project alongside its ongoing work on the Parkway East and the I-79 Wexford interchange.
Latest developments: PublicSource reported August 17 that Dormont officials are weighing the redevelopment as AI-assisted misinformation muddies the public debate.
Dormont is considering a proposal to replace the park-and-ride at its Red Line light-rail station with 180 apartments, including affordable units, in the borough just south of Pittsburgh.
Sources: PublicSource · ↑ top
Latest developments: Free tuition took effect this fall for qualifying students at the University of Pittsburgh's regional campuses.
The University of Pittsburgh now covers tuition for qualifying students at its branch campuses, including Pitt-Greensburg, where junior Shelby Cloak returns for the fall term under the new benefit.
Latest developments: The North Allegheny Tiger Marching Band's annual Bingo Night fundraiser returns Friday, August 21.
The North Allegheny Tiger Marching Band holds its Bingo Night fundraiser Friday, August 21, at McKnight Elementary School in McCandless.
Latest developments: The Post-Gazette's August 16 camp report flagged accumulating offensive mistakes at Steelers practice in Latrobe.
Post-Gazette camp observations from Latrobe on August 16 described a run of offensive miscues, even as linebacker Elandon Roberts again brought a physical edge to the defense.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's Off The Bat column asked August 17 whether the sliding Pirates can still apply lessons from their 2024 late-season collapse.
With the Pirates fading again in the second half, the Post-Gazette revisited the club's 2024 collapse and questioned whether the front office and roster can learn from it before the season slips away.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Kate Douglass lowered her own 50-meter freestyle world record a second time, winning the Pan Pacific final in 23.19 seconds.
American Kate Douglass broke the women's 50-meter freestyle world record twice in one day at the Pan Pacific Championships, capping it by winning the final in 23.19 seconds.
Sources: ESPN Olympics · ↑ top
Latest developments: Lani Pallister of Australia handed Katie Ledecky her first international loss in the 800-meter freestyle.
At the Pan Pacific Championships, Lani Pallister of Australia beat Katie Ledecky in the 800-meter freestyle, Ledecky's first international loss in the event, days after Pallister also edged her in the 400 free.
Sources: ESPN Olympics · ↑ top
S&P 500 7,762.91 ▲ +0.7% Dow 53,822.10 ▼ -0.2% Nasdaq 26,634.30 ▲ +1.0% WTI crude 82.45 ▲ +6.6% EUR/USD 1.1542 ▲ +0.1% GBP/USD 1.3493 ▲ +0.2% USD/JPY 159.01 ▲ +0.8%