================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, August 19, 2026 - 1:35 PM EDT ================================================================ Federal agencies sounded alarms across critical infrastructure as Medusa ransomware topped 500 victims and CISA warned of active attacks on Siemens industrial controllers, while AI agents surfaced on both sides of the cyber fight. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Artificial intelligence now cuts both ways as Google's Mandiant harness surfaced over 100 verified flaws in two days while a Chinese-language operator ran a near-autonomous attack on a government. see: AI Hunts Bugs and Runs Near-Autonomous Attacks * [TREND] Ransomware crews keep grinding through essential services, with Medusa's confirmed toll crossing 500 organizations and Clop's Windchill web shell maturing into a purpose-built extortion platform. see: Medusa Ransomware Breaches 500 Critical Infrastructure Orgs; Clop Windchill Extortion Web Shell * [UPDATE (new)] CISA flagged fresh active exploitation, adding the Windows IKE flaw CVE-2026-33824 and Apple macOS bugs to its catalog while warning of a live threat to Siemens S7 controllers. see: Windows IKE and macOS Flaws Actively Exploited; Siemens S7 PLCs Under Active Threat * [TREND] Police surveillance tools both leak and expand as Flock's Investigate AI pushes tracking past license plates while a reverse-image people-search service exposed 9 million face photos. see: Police Surveillance Tools Expose Faces and Data * [UPDATE (new)] Ukraine's war hit a new inflection as Zelensky fired a top aide amid home raids while strikes on Black Sea grain terminals threatened a global food-price shock. see: Zelensky Faces Gravest Threat of the War; Black Sea Grain Exports Choked Off SECURITY ---------------------------------------------------------------- 1. WINDOWS IKE AND MACOS FLAWS ACTIVELY EXPLOITED Vulnerabilities and Exploits · [exploit, patch, kev] Latest developments: Attackers now actively exploit the Windows Internet Key Exchange Extension remote-code-execution flaw CVE-2026-33824, one of four bugs CISA added to its Known Exploited Vulnerabilities catalog alongside Apple macOS CVE-2026-65400, Microsoft SharePoint CVE-2026-55040, and Broadcom VMware vCenter CVE-2026-59310. CISA ordered federal agencies to patch the four flaws, which enable remote code execution, authentication bypass, and device takeover. Oracle separately shipped 943 fixes closing more than 1,000 vulnerabilities in its August 2026 update. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-critical-windows-ike-extension-flaw-now-exploited-in-attacks/ - The Hacker News: https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html - SecurityWeek: https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-microsoft-vmware-apple-vulnerabilities/ - SecurityWeek: https://www.securityweek.com/943-patches-rolled-out-with-oracles-august-2026-security-update/ 2. MEDUSA RANSOMWARE BREACHES 500 CRITICAL INFRASTRUCTURE ORGS Ransomware and Cybercrime · [ransomware, critical-infrastructure, advisory] Latest developments: The FBI, CISA, and Health and Human Services updated their joint advisory on August 19, 2026, raising Medusa's confirmed toll past 500 organizations, up from 300 a year earlier, and adding more than 200 fresh victims through April 2026. Medusa, a ransomware-as-a-service operation running since June 2021, has struck more than 500 organizations across critical infrastructure sectors including healthcare. The agencies press defenders to patch, deploy phishing-resistant multifactor authentication, and segment networks. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/19/medusa-ransomware-cisa-warning/ - The Record: https://therecord.media/more-than-200-medusa-ransomware-victims-in-last-year-cisa 3. POLICE SURVEILLANCE TOOLS EXPOSE FACES AND DATA Policy and Regulation · [surveillance, privacy, facial-recognition] Latest developments: WIRED reconstructed Flock Safety's next-generation Flock OS Investigate AI, already in use by some police departments, showing it reaches far past license-plate reading, and separately found the ClarityCheck reverse-image people-search service left more than 9 million face photos exposed. Police surveillance systems and people-search services keep widening their reach and spilling data. A body-camera clip surfaced by 404 Media caught an officer misusing a license-plate reader to stalk a woman. - Wired Security: https://www.wired.com/story/flock-safety-os-investigate/ - Wired Security: https://www.wired.com/story/reverse-lookup-service-exposed-millions-of-photos-of-peoples-faces/ - 404 Media: https://www.404media.co/i-saw-a-shiny-thing-cop-explains-why-he-used-license-plate-reader-to-stalk-woman/ 4. CLOP WINDCHILL EXTORTION WEB SHELL Ransomware and Cybercrime · [ransomware, clop, data-theft] Latest developments: ReliaQuest dissected the JavaServer Pages web shell Clop plants on PTC Windchill and FlexPLM servers, finding a full extortion platform that decrypts stored credentials and maps product-lifecycle vaults, as the gang listed more than 40 victims including Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision. Clop exploited a critical flaw in PTC's Windchill and FlexPLM product-lifecycle-management software to steal engineering data. Affected companies should hunt for the JSP web shell and rotate credentials. - The Hacker News: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html - SecurityWeek: https://www.securityweek.com/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign/ 5. AI HUNTS BUGS AND RUNS NEAR-AUTONOMOUS ATTACKS AI Security · [ai, apt, vulnerability] Latest developments: Google's Mandiant disclosed its Agentic Vulnerability Discovery Harness, which found more than 100 verified high-severity flaws in two days while combing stolen corporate repositories, as Dark Reading reported a Chinese-language operator ran what researchers call the first near-autonomous AI attack, compromising government agencies likely in Taiwan. AI agents now hunt vulnerabilities for defenders and drive intrusions for attackers. Mandiant has run its harness internally for ten months across tens of millions of lines of code. - Help Net Security: https://www.helpnetsecurity.com/2026/08/19/google-mandiant-avdh-ai-vulnerability-discovery-tool/ - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/china-linked-hacker-ai-capabilities-apac-attack 6. SIEMENS S7 PLCS UNDER ACTIVE THREAT Critical Infrastructure Security · [ics, ot, critical-infrastructure] Latest developments: CISA published advisory AA26-231A on August 19, 2026, warning of an active threat against Siemens S7 series programmable logic controllers and cautioning that the wider campaign targets PLCs beyond Siemens. The advisory tells every PLC owner to inventory Siemens S7 devices and apply mitigations. Programmable logic controllers run physical processes in factories, utilities, and pipelines, making them prime targets for operational disruption. - CISA Advisories: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-231a BUSINESS AND POLITICS ---------------------------------------------------------------- * Zelensky Faces Gravest Threat of the War Latest developments: Ukrainian President Volodymyr Zelensky fired a top aide August 19 as investigators raided the official's home and his ousted defense minister publicly demanded wartime elections, the gravest challenge to his rule since Russia invaded in 2022. Mounting corruption allegations and a blistering attack from his removed defense minister, who argues Ukraine's democracy is in danger and wants elections held during the war, have opened the biggest internal threat to Zelensky's leadership since the fighting began. - WSJ World News: https://www.wsj.com/world/europe/zelenskys-leadership-comes-under-biggest-threat-since-war-began-0946f40e?mod=rss_worldnews - FT World: https://www.ft.com/content/5799e5fa-c836-443b-935d-eb9fb58681b6?syn-25a6b1a6=1 * Black Sea Grain Exports Choked Off Latest developments: Grain prices surged August 19 as attacks on Black Sea terminals and ships shut down Ukrainian exports, and analysts warned of a global food-price shock if the strikes continue. The war has cut off grain flowing through Ukraine's Black Sea ports, driving up prices worldwide and raising the risk of a broad food-price shock, the Financial Times reported. - FT World: https://www.ft.com/content/91f17b0f-9c31-483e-b828-d90dad931a2f?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Slight Chance Showers And Thunderstorms, high 81F. Tonight: Chance Showers And Thunderstorms, low 64F. Thursday: Patchy Fog, high 78F. Business: * Langeloth Metallurgical Settles With NLRB Latest developments: Langeloth Metallurgical Co. agreed August 19 to a $3.66 million settlement with the National Labor Relations Board. Langeloth Metallurgical, a metals producer in Washington County, will pay $3.66 million to settle a National Labor Relations Board complaint. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/career-workplace/2026/08/19/langeloth-metallurgical-nlrb-settlement-pittsburgh/stories/202608190033 * 84 Lumber Names New CFO Latest developments: 84 Lumber named Dustin Hauenstein its chief financial officer, the company announced August 19. 84 Lumber, the privately held building-materials supplier based in Eighty Four, Washington County, appointed Dustin Hauenstein as its new chief financial officer. - WPXI: https://www.wpxi.com/news/local/84-lumber-names-new-chief-financial-officer/YTNXBEBFORH6ZHCZDPMM5MF47E/ * Sharon Regional Fights Utility Shutoff Latest developments: Sharon Regional Medical Center filed a complaint August 19 with the Pennsylvania Public Utility Commission after its utility issued the hospital a shutoff notice. Sharon Regional Medical Center, a hospital in Mercer County, took its dispute to state regulators over a utility's threat to cut off service. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/healthcare-business/2026/08/19/sharon-regional-medical-center-puc/stories/202608190031 Around town: * County Weighs Landlord Rehousing Rule Latest developments: Allegheny County Council introduced an ordinance August 18 that would require landlords to pay to temporarily rehouse tenants displaced when a dwelling is ruled unsafe. The proposed Allegheny County ordinance would put the cost of temporary housing on property owners whenever a rental is deemed unsafe for tenants. - TribLive: https://triblive.com/news/health-now/new-allegheny-county-proposal-could-make-rental-property-owners-pay-for-temporary-tenant-rehousing/ * County HIV Diagnoses Hit Record Low Latest developments: The Allegheny County Health Department reported August 19 that the county recorded 53 new HIV diagnoses in 2025, the fewest since surveillance began. Allegheny County's 53 new HIV diagnoses in 2025 fell 32% from 2024 and 54% since 2016, a decline County Executive Sara Innamorato credited to a decade of expanded testing, outreach, and treatment. - WPXI: https://www.wpxi.com/news/local/allegheny-county-records-fewest-new-hiv-diagnoses-since-surveillance-began/7JPX37M5INFYLIM3PBLGRDR2HM/ * Fox Chapel Water Rate Hike Looms Latest developments: A contract dispute between the Fox Chapel Authority and Pittsburgh Water could force a 141% water-rate increase on Lower Valley customers. Lower Valley property owners served by the Fox Chapel Authority face a potential 141% water-rate increase unless the authority resolves its contract fight with Pittsburgh Water. - TribLive: https://triblive.com/local/valley-news-dispatch/contract-dispute-could-force-141-rate-hike-for-fox-chapel-authority-water-customers/ Events: * Wienermobile Stops in Bloomfield Latest developments: The Oscar Mayer Wienermobile rolls into Pittsburgh Friday, August 21. The Oscar Mayer Wienermobile visits Dad's Dog & Burger on Liberty Avenue in Bloomfield Friday, August 21, from 10 a.m. to 1 p.m., where the eatery will serve fried bologna breakfast sandwiches and Oscar Mayer chili dogs. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/hot-dogs-pittsburgh/ * World Square Festival Returns Latest developments: The World Square Festival returns to Market Square this weekend. The World Square Festival turns Market Square in downtown Pittsburgh into a gathering of cultures from around the globe this weekend. - KDKA: https://www.cbsnews.com/pittsburgh/video/preview-of-the-world-square-festival/ SPORTS ---------------------------------------------------------------- Around the Teams: * Fittipaldo's First 53-Man Projection Latest developments: Post-Gazette writer Ray Fittipaldo published his first Steelers 53-man roster projection August 19, sorting the picture behind quarterbacks Drew Allar and Will Howard. In his August 19 projection, Ray Fittipaldo mapped who makes the Steelers' opening roster, weighing the young quarterbacks behind starter Aaron Rodgers. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/19/53man-roster-projection-nfl-preseason-kaleb-allar-howard/stories/202608190004 * Not Just Football Opens Camp Series Latest developments: Cam Heyward's 'Not Just Football' podcast launched its training-camp series August 19 with safety DeShon Elliott and linebacker Patrick Queen. On the first camp-series episode of 'Not Just Football with Cam Heyward,' Steelers defenders DeShon Elliott and Patrick Queen joined the Heyward hosts to talk through the season ahead. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=ZQGSMsozME4 * Hiles Wants Mlodzinski in the Bullpen Latest developments: Post-Gazette columnist Noah Hiles argued August 18 that the Pirates should move Carmen Mlodzinski back to the bullpen after another rough start. Noah Hiles wrote that Carmen Mlodzinski keeps faltering as a starter and belongs in relief, a call for general manager Ben Cherington to rethink the right-hander's role. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/18/hiles-column-mlodzinski-starter-bullpen-cherington/stories/202608180046 Team USA: * Pulisic Back in Training at Milan Latest developments: Christian Pulisic returned to AC Milan training August 18, his first session since the injury that ended the United States' run at the 2026 World Cup. United States captain Christian Pulisic rejoined AC Milan on the training ground after recovering from the injury he suffered as the U.S. exited the World Cup in the round of 16. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49660572/christian-pulisic-injury-milan-training-usa-world-cup-injury * Zoe Thompson, 14, Signs With Nike Latest developments: Zoe Thompson, 14, signed a Nike name, image, and likeness deal this week, joining her older sisters Alyssa and Gisele. Zoe Thompson, the youngest of the Thompson soccer sisters that includes United States players Alyssa and Gisele, signed a name, image, and likeness deal with Nike at age 14. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49659965/zoe-thompson-14-sister-gisele-alyssa-signs-nike-nil-deal READING ---------------------------------------------------------------- * Stratechery -- Apple Settles With E.U., U.S. App Store Fees, ATT Rules in Germany Ben Thompson argues Apple's App Store is finally accepting lower fees under regulatory pressure, and the concessions, though overdue, land as the right outcome for the EU and developers. https://stratechery.com/2026/apple-settles-with-e-u-u-s-app-store-fees-att-rules-in-germany/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron games out the collapse of OpenAI, tracing how much of the current AI economy and its capital spending hinges on the company's survival. https://www.wheresyoured.at/what-happens-if-openai-dies/ * Cal Newport -- On AI Coding and Its Discontents Newport uses a converted skeptic's account to examine what AI-assisted coding actually changes for software engineers and where its promises break down. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,754.01 ▲ +0.3% Dow 53,629.17 ▼ -0.7% Nasdaq 26,611.06 ▲ +0.5% WTI crude 83.27 ▲ +5.1% EUR/USD 1.1553 ▲ +0.1% GBP/USD 1.3523 ▲ +0.5% USD/JPY 159.32 ▲ +0.7% ================================================================ Generated 2026-08-19 13:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================