================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, August 19, 2026 - 7:36 PM EDT ================================================================ The Justice Department charged 17 Iranian Mabna Institute hackers over $3.4 billion in stolen research as federal agencies warned that attackers now build critical-infrastructure exploits with AI-assisted code. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] The Justice Department indicted 17 Mabna Institute operatives over Iranian theft as the Chinese-nexus SilkParasite crew unleashed new remote access tools on Central Asian governments. see: Iranian Mabna Institute Charges; SilkParasite Central Asia Espionage * [TREND] Mass records keep spilling, with CareCloud, Latvia, and Sakura Internet exposing health, resident, and account data on millions of people. see: Healthcare and Government Data Breaches * [TREND] Adversaries fold generative AI into operations, from AI-assisted scripts exploiting Siemens S7 controllers, while writers debate AI programming and what an OpenAI collapse would mean. see: AI-Assisted Attacks on Siemens PLCs; On AI Coding and Its Discontents; What Happens If OpenAI Dies? * [UPDATE (new)] CISA added the MLflow SSRF bug CVE-2026-64849 to its Known Exploited Vulnerabilities catalog after SANS observed active scanning for the cloud metadata endpoint. see: MLflow SSRF Added to KEV Catalog * [UPDATE (new)] Hunt.io detailed Operation CameraSwarm, a 35-day campaign that hijacked more than 14,530 Dahua IP cameras, reconstructed from an exposed attacker working directory. see: Operation CameraSwarm Hijacks Dahua Cameras * [UPDATE (new)] Treasury ramped up long-dated bond buybacks to calm surging yields the same day Fed minutes revealed many FOMC members leaning toward a rate hike. see: Treasury Steps In to Steady the Bond Market; Fed Minutes Reveal Rate-Hike Bias SECURITY ---------------------------------------------------------------- 1. HEALTHCARE AND GOVERNMENT DATA BREACHES Data Breaches · [breach, healthcare] Latest developments: CareCloud raised its breach toll to 3.7 million patients, Latvia disclosed a theft of records on 1.2 million people that forced official resignations, and Sakura Internet reported intruders reached data on up to 1.36 million accounts. CareCloud told regulators a hacker who spent eight hours inside one electronic health record environment exposed data on 3,756,469 patients, far above an initial 350,000 estimate; Latvia's road traffic agency lost records on two-thirds of the country's population; and Japan's Sakura Internet exposed data on up to 1.36 million accounts through its sales management system. - BleepingComputer: https://www.bleepingcomputer.com/news/security/healthtech-firm-carecloud-data-breach-impacts-37-million-patients/ - The Record: https://therecord.media/electronic-health-record-company-carecloud-data-breach - The Record: https://therecord.media/latvia-cyberattack-vehicle-data - BleepingComputer: https://www.bleepingcomputer.com/news/security/sakura-internet-hack-exposes-data-of-up-to-136-million-accounts/ 2. IRANIAN MABNA INSTITUTE CHARGES Nation-State Activity · [apt, nation-state, policy] Latest developments: The Justice Department unsealed charges against 17 alleged Mabna Institute hackers tied to the Iranian government, and the State Department offered $10 million bounties on five of them. The Justice Department indicted 17 alleged members of Iran's Mabna Institute, a hacking-for-hire firm, accusing them of stealing $3.4 billion in intellectual property from dozens of US universities and breaching email accounts at federal agencies. - BleepingComputer: https://www.bleepingcomputer.com/news/security/us-charges-iranian-hackers-over-34-billion-intellectual-property-theft/ - SecurityWeek: https://www.securityweek.com/us-charges-17-iranian-hackers-offers-10-million-rewards-for-5-of-them/ - The Record: https://therecord.media/iran-cyberattacks-us-doj 3. AI-ASSISTED ATTACKS ON SIEMENS PLCS Critical Infrastructure Security · [ics, ai, critical-infrastructure] Latest developments: The NSA and FBI said the campaign behind CISA advisory AA26-231A leans on AI-assisted development to generate the scripts that exploit known Siemens S7 flaws. The NSA, FBI, CISA, and partner agencies warn that threat actors exploit Siemens S7 series programmable logic controllers running US critical infrastructure, and caution that the targeting reaches PLCs beyond Siemens; operators should inventory S7 devices and apply the advisory's mitigations. - The Record: https://therecord.media/nsa-fbi-warns-of-hackers-using-ai-generated-tools-critical-infrastructure - BleepingComputer: https://www.bleepingcomputer.com/news/security/us-warns-of-ai-powered-attacks-on-siemens-plcs-in-critical-infrastructure/ - CISA Advisories: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-231a 4. SILKPARASITE CENTRAL ASIA ESPIONAGE Nation-State Activity · [apt, espionage] Latest developments: Researchers detailed SilkParasite, a previously unreported espionage operation that wields seven remote access tool families, five documented for the first time, against Central Asian governments. SilkParasite, a Chinese-nexus group researchers link to FamousSparrow, spear-phishes government bodies across Central Asia and deploys seven RAT families, including five new ones: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. - Dark Reading: https://www.darkreading.com/threat-intelligence/silkparasite-central-asian-orgs-flurry-rats - The Hacker News: https://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.html 5. OPERATION CAMERASWARM HIJACKS DAHUA CAMERAS Ransomware and Cybercrime · [iot, botnet] Latest developments: Hunt.io disclosed Operation CameraSwarm, a 35-day campaign that compromised more than 14,530 Dahua IP cameras, reconstructed from a 407 MB exposed attacker working directory. Attackers hijacked more than 14,530 Dahua IP cameras between June 17 and July 22, 2026, mostly in Ukraine and Russia, using credential attacks, two authentication-bypass flaws, and a peer-to-peer relay technique; camera owners should reset credentials and patch firmware. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-compromise-14-500-dahua-web-cameras-in-35-day-campaign/ - The Hacker News: https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html 6. MLFLOW SSRF ADDED TO KEV CATALOG Vulnerabilities and Exploits · [vulnerability, patch, ai] Latest developments: CISA formally added the MLflow flaw CVE-2026-64849 to its Known Exploited Vulnerabilities catalog, a day after researchers reported active scanning, and SANS observed probes hunting the cloud metadata endpoint the bug abuses. CISA cataloged CVE-2026-64849, a server-side request forgery flaw in the open-source MLflow AI platform, as actively exploited; attackers use such flaws to reach the cloud metadata service at 169.254.169.254 and steal IAM role credentials and service account tokens. - CISA Advisories: https://www.cisa.gov/news-events/alerts/2026/08/19/cisa-adds-one-known-exploited-vulnerability-catalog - SANS Internet Storm Center: https://isc.sans.edu/diary/rss/33260 BUSINESS AND POLITICS ---------------------------------------------------------------- * Treasury Steps In to Steady the Bond Market Latest developments: The Treasury Department said August 19 it would ramp up buybacks of longer-dated bonds; yields dove and stocks rose as Washington moved to calm a market where borrowing costs had hit their highest in nearly two decades. Long-dated Treasury yields had climbed to almost twenty-year highs on debt and inflation worries, and federal debt crossed $40 trillion the same week; Treasury Secretary Scott Bessent signaled Washington's willingness to intervene in the market that anchors global borrowing costs. - FT Markets: https://www.ft.com/content/777c9014-2f12-45cf-8224-6bbe808c62cb?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/investing/bond-yields-dive-after-treasury-increases-buybacks-e48483f7?mod=rss_markets_main - FT Markets: https://www.ft.com/content/673f8c35-1433-479f-803f-0597cbe7ef74?syn-25a6b1a6=1 * Fed Minutes Reveal Rate-Hike Bias Latest developments: The Federal Reserve released minutes August 19 from its July meeting showing 'many' FOMC members thought a rate increase would soon be warranted if inflation stays elevated. With July consumer prices up 3.4% year over year, the Federal Open Market Committee expressed rising concern over persistent inflation and a readiness to raise borrowing costs, a hawkish tilt for a Fed under Chairman Kevin Warsh. - FT World: https://www.ft.com/content/aad0fdbb-f3bf-4b99-b826-7bde552b9d81?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/a2e60734-8b02-4474-8059-4c0cba0ff5c4 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Chance Showers And Thunderstorms, low 64F. Thursday: Patchy Fog, high 78F. Thursday Night: Slight Chance Showers And Thunderstorms then Areas Of Fog, low 60F. Business: * UPMC Restores Vision With Iris Implant Latest developments: UPMC surgeons have begun using a newly FDA-approved artificial iris implant to restore normal vision for patients whose irises were destroyed by traumatic eye injuries. Injuries from baseball, hockey, lacrosse, tennis, and squash can shatter the eye's iris; UPMC ophthalmologists now implant the recently approved device to rebuild sight for those patients. - WPXI: https://www.wpxi.com/news/local/upmc-doctors-restoring-sight-with-newly-approved-implant-surgery/HMSFKWZVWJENNPQFWWRI6SGPOM/ * Turnpike Adds Route 981 Interchange Latest developments: The Pennsylvania Turnpike Commission added a new diamond interchange connecting the turnpike and State Route 981 in Mount Pleasant Township to its 2026-27 capital plan, ending years of discussion. The interchange in Mount Pleasant Township, Westmoreland County, aims to lift connectivity and economic development in the area; a separately proposed interchange in Penn Township remains on pause. - KDKA: https://www.cbsnews.com/pittsburgh/news/pennsylvania-turnpike-route-981-interchange/ - WTAE: https://www.wtae.com/article/pennsylvania-turnpike-westmoreland-county-mount-pleasant-township/73477882 Around town: * Special Election for Cranberry House Seat Latest developments: Cranberry Township, Butler County, holds a special election to fill a vacant Pennsylvania House seat, pitting Democrat Brandon Dukes against Republican Scott Timko. The contest decides who represents Cranberry Township in the Pennsylvania House of Representatives, filling a seat left open in the closely watched chamber. - WTAE: https://www.wtae.com/article/cranberry-special-election-state-house-seat-results/73458952 * Go Westmoreland Fare Hike Vote Latest developments: The Westmoreland County Transit Authority board votes Thursday, August 20, on a nearly 25% fare increase for its Go Westmoreland shared-ride program. The shared-ride service carries seniors and residents on social-service benefits across Westmoreland County, and the proposed increase would raise their fares by almost a quarter. - TribLive: https://triblive.com/local/westmoreland/transit-authority-set-to-vote-on-go-westmoreland-fare-hike/ * Pittsburgh Sets Annual Tornado Record Latest developments: The National Weather Service confirmed August 19 an EF-0 tornado in the Orchard Hills section of Kiski Township, Armstrong County, the 30th tornado of 2026 in its coverage area and a new annual record. The 85-mph EF-0 from Sunday's storms pushed the NWS Pittsburgh office—which covers western Pennsylvania and parts of eastern Ohio and northern West Virginia—past its previous record of 29 tornadoes in a single year. - KDKA: https://www.cbsnews.com/pittsburgh/news/record-tornadoes-nws-pittsburgh-2026/ - TribLive: https://triblive.com/local/valley-news-dispatch/weather-service-tornado-touched-down-sunday-in-kiski-township/ SPORTS ---------------------------------------------------------------- Around the Teams: * Young QBs Get Spotlight vs. Jets Latest developments: The Post-Gazette reported August 19 that young quarterbacks Will Howard and Drew Allar will take center stage in Friday's preseason game against the New York Jets. With Aaron Rodgers and the veterans expected to rest, the Steelers hand extended reps to Will Howard and Drew Allar, the young passers Mike McCarthy is evaluating behind them. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/19/nfl-news-allar-howard-rudolph-rodgers-mccarthy-preseason/stories/202608190034 Team USA: * U.S. U-20 Women Miss Stars for World Cup Latest developments: ESPN reported the United States will enter next month's Under-20 Women's World Cup without several of its biggest age-eligible stars. The U.S. under-20 women aim for their first Under-20 Women's World Cup title since 2012, a run complicated by the absence of several of their top age-eligible players. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49662865/usa-u20-womens-world-cup-roster * Haji Wright Sidelined Up to 12 Weeks Latest developments: United States forward Haji Wright will miss up to 12 weeks with a quad injury, ESPN reported, a major blow to newly promoted Coventry City. Wright, a U.S. men's national team striker, tore up his schedule with a quad injury as Coventry City returns to the Premier League, an absence that could stretch to three months. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49661670/usa-coventry-city-haji-wright-injury-premier-league READING ---------------------------------------------------------------- * Stratechery -- Apple Settles With E.U., U.S. App Store Fees, ATT Rules in Germany Ben Thompson argues Apple has finally accepted lower App Store fees as it settles with the European Union, cuts U.S. fees, and adopts App Tracking Transparency rules in Germany, and that the EU should be satisfied with the outcome even though it arrived late. https://stratechery.com/2026/apple-settles-with-e-u-u-s-app-store-fees-att-rules-in-germany/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron games out the collapse of OpenAI, tracing how the failure of the industry's flagship company would ripple across an AI economy that has grown dependent on it. https://www.wheresyoured.at/what-happens-if-openai-dies/ * Cal Newport -- On AI Coding and Its Discontents Newport weighs the promise and the pitfalls of AI-assisted programming through the story of a Silicon Valley engineer who turned from skeptic to convert, asking what the tools cost as well as what they deliver. https://calnewport.com/on-ai-coding-and-its-discontents/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,754.01 ▲ +0.3% Dow 53,629.17 ▼ -0.7% Nasdaq 26,611.06 ▲ +0.5% WTI crude 83.27 ▲ +5.1% EUR/USD 1.1562 ▲ +0.2% GBP/USD 1.3524 ▲ +0.3% USD/JPY 159.37 ▲ +0.6% ================================================================ Generated 2026-08-19 19:36 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================