daily plain-text briefing: security, markets, business, and pittsburgh
Federal agencies sounded alarms across critical infrastructure as Medusa ransomware topped 500 victims and CISA warned of active attacks on Siemens industrial controllers, while AI agents surfaced on both sides of the cyber fight.
Latest developments: Attackers now actively exploit the Windows Internet Key Exchange Extension remote-code-execution flaw CVE-2026-33824, one of four bugs CISA added to its Known Exploited Vulnerabilities catalog alongside Apple macOS CVE-2026-65400, Microsoft SharePoint CVE-2026-55040, and Broadcom VMware vCenter CVE-2026-59310.
CISA ordered federal agencies to patch the four flaws, which enable remote code execution, authentication bypass, and device takeover. Oracle separately shipped 943 fixes closing more than 1,000 vulnerabilities in its August 2026 update.
Sources: BleepingComputer · The Hacker News · SecurityWeek · SecurityWeek · ↑ top
Latest developments: The FBI, CISA, and Health and Human Services updated their joint advisory on August 19, 2026, raising Medusa's confirmed toll past 500 organizations, up from 300 a year earlier, and adding more than 200 fresh victims through April 2026.
Medusa, a ransomware-as-a-service operation running since June 2021, has struck more than 500 organizations across critical infrastructure sectors including healthcare. The agencies press defenders to patch, deploy phishing-resistant multifactor authentication, and segment networks.
Sources: BleepingComputer · Help Net Security · The Record · ↑ top
Latest developments: WIRED reconstructed Flock Safety's next-generation Flock OS Investigate AI, already in use by some police departments, showing it reaches far past license-plate reading, and separately found the ClarityCheck reverse-image people-search service left more than 9 million face photos exposed.
Police surveillance systems and people-search services keep widening their reach and spilling data. A body-camera clip surfaced by 404 Media caught an officer misusing a license-plate reader to stalk a woman.
Sources: Wired Security · Wired Security · 404 Media · ↑ top
Latest developments: ReliaQuest dissected the JavaServer Pages web shell Clop plants on PTC Windchill and FlexPLM servers, finding a full extortion platform that decrypts stored credentials and maps product-lifecycle vaults, as the gang listed more than 40 victims including Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.
Clop exploited a critical flaw in PTC's Windchill and FlexPLM product-lifecycle-management software to steal engineering data. Affected companies should hunt for the JSP web shell and rotate credentials.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Google's Mandiant disclosed its Agentic Vulnerability Discovery Harness, which found more than 100 verified high-severity flaws in two days while combing stolen corporate repositories, as Dark Reading reported a Chinese-language operator ran what researchers call the first near-autonomous AI attack, compromising government agencies likely in Taiwan.
AI agents now hunt vulnerabilities for defenders and drive intrusions for attackers. Mandiant has run its harness internally for ten months across tens of millions of lines of code.
Sources: Help Net Security · Dark Reading · ↑ top
Latest developments: CISA published advisory AA26-231A on August 19, 2026, warning of an active threat against Siemens S7 series programmable logic controllers and cautioning that the wider campaign targets PLCs beyond Siemens.
The advisory tells every PLC owner to inventory Siemens S7 devices and apply mitigations. Programmable logic controllers run physical processes in factories, utilities, and pipelines, making them prime targets for operational disruption.
Sources: CISA Advisories · ↑ top
Latest developments: Ukrainian President Volodymyr Zelensky fired a top aide August 19 as investigators raided the official's home and his ousted defense minister publicly demanded wartime elections, the gravest challenge to his rule since Russia invaded in 2022.
Mounting corruption allegations and a blistering attack from his removed defense minister, who argues Ukraine's democracy is in danger and wants elections held during the war, have opened the biggest internal threat to Zelensky's leadership since the fighting began.
Sources: WSJ World News · FT World · ↑ top
Latest developments: Grain prices surged August 19 as attacks on Black Sea terminals and ships shut down Ukrainian exports, and analysts warned of a global food-price shock if the strikes continue.
The war has cut off grain flowing through Ukraine's Black Sea ports, driving up prices worldwide and raising the risk of a broad food-price shock, the Financial Times reported.
This Afternoon: Slight Chance Showers And Thunderstorms, high 81F.
Tonight: Chance Showers And Thunderstorms, low 64F.
Thursday: Patchy Fog, high 78F.
Latest developments: Langeloth Metallurgical Co. agreed August 19 to a $3.66 million settlement with the National Labor Relations Board.
Langeloth Metallurgical, a metals producer in Washington County, will pay $3.66 million to settle a National Labor Relations Board complaint.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: 84 Lumber named Dustin Hauenstein its chief financial officer, the company announced August 19.
84 Lumber, the privately held building-materials supplier based in Eighty Four, Washington County, appointed Dustin Hauenstein as its new chief financial officer.
Latest developments: Sharon Regional Medical Center filed a complaint August 19 with the Pennsylvania Public Utility Commission after its utility issued the hospital a shutoff notice.
Sharon Regional Medical Center, a hospital in Mercer County, took its dispute to state regulators over a utility's threat to cut off service.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Allegheny County Council introduced an ordinance August 18 that would require landlords to pay to temporarily rehouse tenants displaced when a dwelling is ruled unsafe.
The proposed Allegheny County ordinance would put the cost of temporary housing on property owners whenever a rental is deemed unsafe for tenants.
Latest developments: The Allegheny County Health Department reported August 19 that the county recorded 53 new HIV diagnoses in 2025, the fewest since surveillance began.
Allegheny County's 53 new HIV diagnoses in 2025 fell 32% from 2024 and 54% since 2016, a decline County Executive Sara Innamorato credited to a decade of expanded testing, outreach, and treatment.
Latest developments: A contract dispute between the Fox Chapel Authority and Pittsburgh Water could force a 141% water-rate increase on Lower Valley customers.
Lower Valley property owners served by the Fox Chapel Authority face a potential 141% water-rate increase unless the authority resolves its contract fight with Pittsburgh Water.
Latest developments: The Oscar Mayer Wienermobile rolls into Pittsburgh Friday, August 21.
The Oscar Mayer Wienermobile visits Dad's Dog & Burger on Liberty Avenue in Bloomfield Friday, August 21, from 10 a.m. to 1 p.m., where the eatery will serve fried bologna breakfast sandwiches and Oscar Mayer chili dogs.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: The World Square Festival returns to Market Square this weekend.
The World Square Festival turns Market Square in downtown Pittsburgh into a gathering of cultures from around the globe this weekend.
Latest developments: Post-Gazette writer Ray Fittipaldo published his first Steelers 53-man roster projection August 19, sorting the picture behind quarterbacks Drew Allar and Will Howard.
In his August 19 projection, Ray Fittipaldo mapped who makes the Steelers' opening roster, weighing the young quarterbacks behind starter Aaron Rodgers.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Cam Heyward's 'Not Just Football' podcast launched its training-camp series August 19 with safety DeShon Elliott and linebacker Patrick Queen.
On the first camp-series episode of 'Not Just Football with Cam Heyward,' Steelers defenders DeShon Elliott and Patrick Queen joined the Heyward hosts to talk through the season ahead.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: Post-Gazette columnist Noah Hiles argued August 18 that the Pirates should move Carmen Mlodzinski back to the bullpen after another rough start.
Noah Hiles wrote that Carmen Mlodzinski keeps faltering as a starter and belongs in relief, a call for general manager Ben Cherington to rethink the right-hander's role.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Christian Pulisic returned to AC Milan training August 18, his first session since the injury that ended the United States' run at the 2026 World Cup.
United States captain Christian Pulisic rejoined AC Milan on the training ground after recovering from the injury he suffered as the U.S. exited the World Cup in the round of 16.
Sources: ESPN Soccer · ↑ top
Latest developments: Zoe Thompson, 14, signed a Nike name, image, and likeness deal this week, joining her older sisters Alyssa and Gisele.
Zoe Thompson, the youngest of the Thompson soccer sisters that includes United States players Alyssa and Gisele, signed a name, image, and likeness deal with Nike at age 14.
Sources: ESPN Soccer · ↑ top
S&P 500 7,754.01 ▲ +0.3% Dow 53,629.17 ▼ -0.7% Nasdaq 26,611.06 ▲ +0.5% WTI crude 83.27 ▲ +5.1% EUR/USD 1.1553 ▲ +0.1% GBP/USD 1.3523 ▲ +0.5% USD/JPY 159.32 ▲ +0.7%