daily plain-text briefing: security, markets, business, and pittsburgh
Researchers dismantled Windows 11's toughest defenses in software alone as supply-chain malware colonized Android cars and pro-Ukraine hackers burrowed into Russian technology firms.
Latest developments: Researchers at the University of Birmingham and Durham University showed how to knock down some of Windows 11's strongest protections through software alone, without opening or modifying the target machine, once an attacker already holds privileged access.
The technique defeats hardware-backed Windows 11 defenses after an intruder gains privileged access, undercutting protections many enterprises lean on; administrators should tighten privilege escalation controls and monitor for local compromise.
Sources: Help Net Security · ↑ top
Latest developments: Kaspersky, which found the threat in June 2026, detailed a supply-chain campaign that plants malware in Android vehicle head-unit firmware built by DoFun and spreads through the units' built-in update apps to run a multi-stage downloader.
The malware enlists compromised car infotainment systems into a proxy botnet and drives ad fraud; owners and installers of DoFun-firmware head units should treat built-in updaters as an infection vector.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Russian network-monitoring firm Microolap confirmed a cyberattack after the pro-Ukraine group Black Spark claimed it spent more than a month inside the company's systems, including its EtherSensor traffic-analysis platform, as Ukraine paired cyber and drone strikes against a Russian ecommerce giant.
Pro-Ukraine hacktivists are penetrating Russian technology and commerce companies and lingering for weeks; Russian operators of EtherSensor and similar network tooling face intrusion and data theft.
Sources: The Record · Wired Security · ↑ top
Latest developments: BleepingComputer reported that more than 9,300 AWS access keys leaked publicly between August 2022 and August 2026 remain active and valid, handing full control of corporate accounts, as Unit 42 warned attackers increasingly target CI/CD pipelines and developer tools over application code.
Long-exposed cloud credentials still unlock corporate AWS accounts, and the software development lifecycle itself has become the target; organizations should rotate and revoke stale keys and lock down developer pipelines.
Sources: BleepingComputer · Unit 42 (Palo Alto) · ↑ top
Latest developments: Lawmakers called for a formal investigation into how recent CISA staffing cuts have hit the agency and whether it has replaced the expertise it lost.
Congress wants to measure the operational damage from CISA workforce reductions even as cash-strapped local governments already scramble for cyber defense help.
Sources: The Record · Dark Reading · ↑ top
Latest developments: Researchers detailed iAuthFlow V2, a phishing toolkit that registers an attacker-controlled passkey during account takeover so intruders keep access even after victims change passwords and revoke active sessions.
The kit converts passkeys into a persistence mechanism that survives standard incident response; defenders should audit and remove unrecognized registered passkeys after any suspected account compromise.
Sources: SecurityWeek · ↑ top
Latest developments: The 50% U.S. tariffs went live early Saturday, August 22, on about $20 billion of Canadian goods, and Prime Minister Mark Carney told Canadians that President Trump 'miscalculated' by escalating.
Negotiations between Washington and Ottawa collapsed Friday night after U.S. Trade Representative Jamieson Greer said Canada walked away from agreed terms, and Carney pledged to match the levies dollar for dollar starting September 8, opening a tariff war between two G7 allies.
Sources: WSJ World News · FT World · WSJ World News · ↑ top
Today: Mostly Sunny, high 75F.
Tonight: Partly Cloudy then Slight Chance Rain Showers, low 57F.
Monday: Sunny, high 73F.
Latest developments: The Post-Gazette reported August 23 that a new kosher market on Murray Avenue in Squirrel Hill will stock entirely kosher goods after a monthslong dispute over the store.
Murray's Avenue Market in Pittsburgh's Squirrel Hill neighborhood, the city's traditional Jewish commercial heart, resolved a months-long fight to reopen as a fully kosher grocery.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: TribLive reported August 23 that U.S. Representative Mike Kelly, seeking a ninth term, faces Democrat Justin Wagner in his Western Pennsylvania district.
Mike Kelly, the second-longest-tenured member of Pennsylvania's congressional delegation, will defend his seat against Justin Wagner in the northwestern district anchored around Butler and Erie counties.
Latest developments: The Post-Gazette reported August 23 that thousands of Pittsburgh Public Schools students are starting their final first day of classes at buildings the district plans to shut.
Pittsburgh Public Schools opened the new year at several schools slated for closure, marking the last opening day for students and staff at those buildings before the district consolidates.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: A Post-Gazette investigation published August 23 found that weak vaccination enforcement in Pennsylvania charter schools leaves thousands of children unprotected as measles spreads.
The reporting lands as Allegheny County confirmed its first measles case since 2019, showing charter schools across the state track and enforce required immunizations far less rigorously than traditional public schools.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette's Steelers notes August 23 laid out the latest on cornerback Joey Porter Jr.'s contract situation and Jalen Ramsey's injury status.
The Steelers are weighing Porter's next deal as the Pittsburgh native enters a pivotal season, while veteran defensive back Jalen Ramsey's health is drawing attention heading toward the opener.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Post-Gazette columnist Noah Hiles argued August 22 that keeping four quarterbacks in 2026 would be a mistake for the Steelers.
Hiles wrote that carrying Aaron Rodgers, Mason Rudolph, Will Howard, and Drew Allar on the roster wastes a spot the Steelers need elsewhere, and the team should trim the group before the season.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: A Post-Gazette analysis August 21 marked Ben Cherington approaching 1,000 games as Pirates general manager by tracing seven straight losing seasons under owner Bob Nutting.
The piece charts how Cherington's rebuild has failed to produce a winning club since he took over in 2019, framing the milestone against the franchise's long slide.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN published its ranking of the 25 best NWSL players August 22, two-thirds through the 2026 season, weighing United States internationals Trinity Rodman and Rose Lavelle for the top spot.
The list gauges the current form of American women's national team regulars in the NWSL, the domestic league that supplies most of the U.S. roster, ahead of the next international window.
Sources: ESPN Soccer · ↑ top
Latest developments: ESPN ranked the best Premier League careers by U.S. men's national team players August 21 as the 2026-27 English season opened with several Americans set for big minutes.
The list places Christian Pulisic, goalkeeper Brad Friedel, and Clint Dempsey among the top American performers in England's top flight, a guide for fans following USMNT stars after the summer World Cup.
Sources: ESPN Soccer · ↑ top
S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% EUR/USD 1.1640 ▲ +0.8% GBP/USD 1.3575 ▲ +0.6% USD/JPY 159.00 ▼ -0.2%