================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, August 19, 2026 - 10:07 AM EDT ================================================================ The Justice Department charged 17 Iranian hackers tied to the Mabna Institute even as password spraying surged 155-fold and data-theft crews battered public networks from Latvia to Texas. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers keep skipping malware to just log in, with Huntress logging a 155-fold password-spraying surge and Operation CameraSwarm hijacking over 14,530 Dahua devices via credential attacks. see: Password Spraying and Credential Attacks Surge; Operation CameraSwarm Hijacks Dahua Devices * [TREND] State-backed espionage dominated as the Justice Department indicted Iran's Mabna Institute over university breaches while researchers exposed the SilkParasite operation deploying five new RATs across Central Asia. see: Iranian Mabna Institute Indictment; SilkParasite Espionage in Central Asia * [TREND] Data-theft extortion widened as Clop paraded more than 40 Windchill victims including Shell and Philips while breaches hit government and university networks from Latvia to Berlin. see: Clop Names Windchill Victims; Government and University Network Breaches * [UPDATE (new)] Markets moved August 19 as Treasury Secretary Bessent doubled debt buybacks to arrest a bond rout while oil rose a fourth day amid the Strait of Hormuz standoff. see: Treasury Doubles Debt Buybacks to Arrest Bond Rout; Iran Standoff Keeps the Strait of Hormuz Choked * [UPDATE (new)] Downtown Pittsburgh added arrivals as Kennywood opened a job fair for 300 Phantom Fall Fest roles and Okane debuted a three-level sushi spot on Fourth Avenue. see: Kennywood Hiring 300 for Phantom Fall Fest; Okane Opens Three-Level Sushi Spot Downtown SECURITY ---------------------------------------------------------------- 1. GOVERNMENT AND UNIVERSITY NETWORK BREACHES Data Breaches · [breach, government] Latest developments: Latvia's road-traffic agency confirmed thieves took data on roughly 1.2 million residents—about two-thirds of the population—drawing demands that senior officials resign; Berlin isolated its urban-development and mobility ministries from the government network after a breach; and the University of Texas at San Antonio delayed its fall semester three days to August 24, 2026 after weekend intrusions. Attackers hit public institutions across three countries; UT San Antonio, serving more than 42,000 students under Senior Executive Vice President Andrea Marks, took phones and academic systems offline, and Berlin's precautionary cutoff has held since Friday. - The Record: https://therecord.media/latvia-cyberattack-vehicle-data - The Record: https://therecord.media/berlin-cuts-two-state-ministries-off-government-breach - The Record: https://therecord.media/university-of-texas-forced-to-take-systems-offline-cyberattack-san-antonio - Help Net Security: https://www.helpnetsecurity.com/2026/08/19/ut-san-antonio-cyberattack-fall-semester-delay/ 2. CLOP NAMES WINDCHILL VICTIMS Ransomware and Cybercrime · [ransomware, extortion, breach] Latest developments: Clop listed more than 40 victims of its PTC Windchill and FlexPLM data-theft campaign, naming Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision on its leak site. Clop exploited a critical flaw in PTC's product-lifecycle-management software and planted a custom JavaServer Pages web shell built to decrypt stored credentials and map engineering data, then moved to extort the manufacturers it breached. - SecurityWeek: https://www.securityweek.com/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign/ - The Hacker News: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/clop-created-custom-web-shell-for-windchill-data-theft-attacks/ 3. IRANIAN MABNA INSTITUTE INDICTMENT Nation-State Activity · [apt, nation-state, policy] Latest developments: The Justice Department charged 17 members of Iran's Mabna Institute with breaching email accounts at US government agencies and stealing intellectual property from dozens of universities, and the State Department offered rewards up to $10 million for information on five of the defendants. The indicted hackers, tied to the Iranian government, targeted hundreds of universities and organizations in the United States and abroad; the Rewards for Justice program will pay for information leading to five named suspects. - The Record: https://therecord.media/iran-cyberattacks-us-doj - SecurityWeek: https://www.securityweek.com/us-charges-17-iranian-hackers-offers-10-million-rewards-for-5-of-them/ 4. PASSWORD SPRAYING AND CREDENTIAL ATTACKS SURGE Ransomware and Cybercrime · [credential-theft, mfa] Latest developments: Huntress measured a 155-fold jump in password-spraying attacks in the first half of 2026, including one campaign that fired more than 81 million login attempts in two weeks, while Palo Alto's Unit 42 updated its guidance after an actor calling itself TheHatman claimed a large haul of credentials from organizations' Microsoft Entra tenants. The attacks exploit legacy authentication and login flows that bypass multifactor authentication; defenders should disable legacy protocols and close gaps that leave some sign-ins unprotected. - BleepingComputer: https://www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/ - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/large-scale-credential-attacks/ 5. SILKPARASITE ESPIONAGE IN CENTRAL ASIA Nation-State Activity · [apt, espionage] Latest developments: Researchers exposed SilkParasite, a previously unreported espionage operation striking government bodies across Central Asia with seven remote-access-tool families, five of them never documented before: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. First spotted in late 2025, the intrusion set steals from Central Asian government agencies using an unusually broad custom toolkit. - The Hacker News: https://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.html 6. OPERATION CAMERASWARM HIJACKS DAHUA DEVICES Ransomware and Cybercrime · [iot, botnet] Latest developments: Hunt.io reconstructed Operation CameraSwarm from a 407-megabyte exposed working directory, finding attackers compromised more than 14,530 Dahua devices between June 17 and July 22, 2026 using credential attacks, two authentication-bypass flaws, and a peer-to-peer relay technique. The campaign hijacked Dahua surveillance cameras and recorders at scale; owners should replace default credentials and patch the exploited authentication bypasses. - The Hacker News: https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Treasury Doubles Debt Buybacks to Arrest Bond Rout Latest developments: Treasury Secretary Scott Bessent moved August 19 to double the department's buybacks of long-term government debt, and 30-year yields dove on the news even as officials said they will not use repurchases to calm acute market stress. The selloff that began with the August 13 U.S. 30-year auction had driven long-term borrowing costs to multi-decade highs worldwide, and the Treasury's step to double repurchases pulled yields back for now; the intervention matters to every leveraged holder of duration, and some Wall Street desks warn the rout has further to run. - Financial Times: https://www.ft.com/content/777c9014-2f12-45cf-8224-6bbe808c62cb?syn-25a6b1a6=1 - Wall Street Journal: https://www.wsj.com/livecoverage/stock-market-today-dow-sp-500-nasdaq-08-19-2026?mod=rss_markets_main - Wall Street Journal: https://www.wsj.com/world/why-wall-street-thinks-the-brutal-bond-rout-is-just-getting-started-c84e9131?mod=rss_markets_main * Iran Standoff Keeps the Strait of Hormuz Choked Latest developments: Oil rose a fourth straight day August 19 as talks to reopen the Strait of Hormuz and end the war stalled, and France moved to expel two Iranian officials after accusing Tehran of attacking French diplomats. The U.S. blockade of Iranian ships has throttled traffic through the Strait of Hormuz, the chokepoint for much of the world's seaborne oil, keeping crude bid; France's expulsion of two Iranian officials widens a confrontation that has already drawn threats of Iranian strikes on American and European targets. - Wall Street Journal: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-growing-concerns-over-supply-disruptions-c33bffbd?mod=rss_markets_main - Financial Times: https://www.ft.com/content/9d9d4388-2b90-48c7-8294-9c2183ba6ba6?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Partly Sunny then Slight Chance Showers And Thunderstorms, high 81F. Tonight: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, low 64F. Thursday: Rain Showers Likely, high 79F. Business: * Kennywood Hiring 300 for Phantom Fall Fest Latest developments: Kennywood opened a job fair August 19 to fill more than 300 seasonal positions, including scare actors and makeup artists, before its Phantom Fall Fest opens. The West Mifflin amusement park Kennywood is recruiting scare actors, makeup artists, and other seasonal staff to run Phantom Fall Fest, its autumn Halloween event. - WPXI: https://www.wpxi.com/news/local/kennywood-holding-job-fair-ahead-phantom-fall-fest-looking-fill-300-positions/WJUJYSFRGVCO5MNNOFSA7TIG6U/ * Okane Opens Three-Level Sushi Spot Downtown Latest developments: Pittsburgh Magazine reported August 19 that Okane, at 245 Fourth Avenue Downtown, runs three distinct dining experiences across its three floors. Okane occupies a three-story building at 245 Fourth Avenue in Downtown Pittsburgh; its ground-floor Sweet Spot pours Vietnamese coffee and fruit teas and plates desserts such as a fish-shaped matcha taiyaki, with sushi service upstairs. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/dig-in-with-graver-rooftop-sushi-supermarket-smashburgers-and-a-coffee-cruiser/ Around town: * Sharpsburg Library Ends Its Food Pantry Latest developments: The Sharpsburg Community Library will close its five-year emergency food pantry to concentrate on what it calls a bigger need for toiletries. The Sharpsburg Community Library ran an emergency food pantry for five years and now plans to redirect that effort toward supplying toiletries to residents. - TribLive: https://triblive.com/local/fox-chapel/sharpsburg-community-library-ends-food-pantry-to-focus-on-bigger-need-for-toiletries/ * Deer Lakes Opens Year With New Leadership Latest developments: The Deer Lakes School District starts the 2026 school year with new leadership and 10 newly hired teachers. The Deer Lakes School District in the Allegheny Valley begins the academic year under a new administration, adding 10 teachers to its ranks. - TribLive: https://triblive.com/local/valley-news-dispatch/deer-lakes-starts-school-year-with-new-leadership-and-10-new-teachers/ Events: * Pittsburgh's Inaugural Cat Walk Latest developments: Pittsburgh City Paper reported August 19 that the inaugural Cat Walk will center on Legion Memorial Park, pairing the walking tour with craft vendors and community tables. Pittsburgh holds its first Cat Walk on Saturday, August 22, in the Brighton Heights neighborhood, combining a walking tour with craft vendors and organizations tabling at Legion Memorial Park. - Pittsburgh City Paper: https://www.pghcitypaper.com/news-2/community-profile/pittsburghs-inaugural-cat-walk-will-bring-whiskers-and-whimsy-to-brighton-heights-august-22/ SPORTS ---------------------------------------------------------------- Around the Teams: * Fittipaldo Fields Watt and Porter Contract Questions Latest developments: In his August 19 chat, Post-Gazette Steelers writer Ray Fittipaldo took reader questions on Aaron Rodgers, head coach Mike McCarthy, T.J. Watt, and cornerback Joey Porter Jr.'s contract. Post-Gazette Steelers writer Ray Fittipaldo held his weekly chat August 19, working through the quarterback picture under new coach Mike McCarthy and questions about T.J. Watt and Joey Porter Jr.'s contract situation. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/19/nfl-rumors-rodgers-mccarthy-allar-watt-porter-contract/stories/202608190030 * Off The Bat Weighs the Pirates' Slide Latest developments: A Post-Gazette Off The Bat column asked whether the Pirates can still learn from their 2024 second-half collapse as this year's fade deepens. The Post-Gazette's Off The Bat column drew a line between the Pirates' current downturn and the team's 2024 collapse, questioning whether Pittsburgh can change course before the season slips away. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/17/off-the-bat-is-it-too-late-for-the-pirates-to-learn-from-the-2024-collapse/stories/202608170006 Team USA: * Moultrie Out for the Season With ACL Tear Latest developments: ESPN reported August 18 that Portland Thorns and United States forward Olivia Moultrie will miss the rest of the NWSL season with a torn ACL. Olivia Moultrie, the young United States women's national team forward, tore her ACL and will sit out the remainder of the NWSL season, though her Portland Thorns keep climbing ESPN's power rankings in her absence. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49638146/nwsl-power-rankings-even-olivia-moultrie-portland-thorns-rise-kansas-city-current-sink READING ---------------------------------------------------------------- * Stratechery -- Apple Settles With E.U., U.S. App Store Fees, ATT Rules in Germany Ben Thompson argues Apple's App Store is finally bowing to lower fees under regulatory pressure, and that the settlement, though late, gives the E.U. the outcome it sought. https://stratechery.com/2026/apple-settles-with-e-u-u-s-app-store-fees-att-rules-in-germany/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron war-games a collapse of OpenAI, tracing how the company's failure would ripple through the finances and infrastructure of the wider AI industry. https://www.wheresyoured.at/what-happens-if-openai-dies/ * Cal Newport -- On AI Coding and Its Discontents Newport works through a converted skeptic's account of coding with AI, weighing the real productivity gains against what the tools do to the craft and experience of programming. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,754.01 ▲ +0.3% Dow 53,629.17 ▼ -0.7% Nasdaq 26,611.06 ▲ +0.5% WTI crude 83.27 ▲ +5.1% EUR/USD 1.1553 ▲ +0.1% GBP/USD 1.3523 ▲ +0.5% USD/JPY 159.32 ▲ +0.7% ================================================================ Generated 2026-08-19 10:07 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================