infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Mobile threats dominate the day as ToxicPanda widens to 349 apps, Android car head units join proxy botnets, and Medusa ransomware crosses 500 victims.


Emerging Trends and Key Updates

Security

1. ToxicPanda and Grandoreiro Banking Trojans Expand

Ransomware and Cybercrime · [android, malware, banking]

Latest developments: ToxicPanda now abuses Android VPN permissions to choke Google Play updates, widens its targeting to 349 applications, and carries 167 remote commands, as SecurityWeek spotlights a persistent Grandoreiro campaign sweeping Latin America and Europe.

read more

ToxicPanda is Android banking malware that steals credentials and drains banking and cryptocurrency accounts, and Grandoreiro is a long-running trojan hitting banks across Latin America and Europe. Users should install apps only from trusted stores and scrutinize every permission request.

Sources: BleepingComputer · SecurityWeek · ↑ top

2. Medusa Ransomware Hits More Than 500 Organizations

Ransomware and Cybercrime · [ransomware, extortion]

Latest developments: Medusa ransomware has struck more than 500 organizations, a sharp jump in the operation's victim tally.

read more

Medusa runs as ransomware-as-a-service, encrypting files and extorting victims across sectors worldwide. Organizations should patch internet-facing systems, enforce multifactor authentication, and keep offline backups.

Sources: Help Net Security · ↑ top

3. Android Car Head Unit Proxy Botnet

Ransomware and Cybercrime · [android, supply-chain, botnet]

Latest developments: New reporting shows the head-unit supply-chain malware enlists compromised units in a proxy botnet and commits ad fraud, riding a legitimate device-update app to spread across DoFun-built firmware.

read more

A supply-chain attack seeds malware in Android car head units through the built-in update app, then routes traffic through the victim devices or runs ad fraud. Buyers and integrators should verify firmware sources and watch head-unit network traffic.

Sources: BleepingComputer · ↑ top

4. Apple Spyware Warnings Surge

Nation-State Activity · [spyware, mobile]

Latest developments: Apple sent an unprecedented number of threat notifications, warning users that mercenary spyware targets their devices.

read more

Apple's threat notifications alert individuals that state-grade mercenary spyware aims at their iPhones and other devices. Recipients should update immediately and turn on Lockdown Mode.

Sources: Wired Security · ↑ top

Business and Politics

U.S.-Canada Trade War Escalates

Latest developments: Canada answered the new U.S. levies with fresh post-Labor-Day tariffs of its own on August 23, and Ottawa and Washington traded blame for the collapse of talks a day after 50% U.S. tariffs took effect.

read more

President Trump's 50% tariffs on roughly $20 billion of Canadian goods and Prime Minister Mark Carney's retaliatory levies now threaten to push American prices higher months before the midterm elections, and Carney told Canadians that Trump 'miscalculated' by escalating.

Sources: WSJ World News · FT World · FT World · ↑ top

Pittsburgh

Weather

Tonight: Chance Rain Showers then Slight Chance Showers And Thunderstorms, low 56F.

Monday: Mostly Sunny, high 73F.

Monday Night: Partly Cloudy, low 57F.

Business

Morici Warns Economy Imperils GOP Senate

Latest developments: Economist Peter Morici argued in TribLive on August 23 that President Trump's tariffs and economic turbulence now put Republican control of the U.S. Senate at risk in November.

read more

Peter Morici, a University of Maryland economist writing for TribLive, contends that Trump's remaking of the economy and America's global standing could cost Republicans their Senate majority in the midterm elections.

Sources: TribLive · ↑ top

Jeannette Contractor Charged With Fraud

Latest developments: Police charged a Jeannette man with home improvement fraud, WPXI reported August 23, after they said he took payment for a painting job and never did the work.

read more

A Jeannette man faces multiple charges in Westmoreland County after police said he accepted money for contracting work and never performed it, a caution for homeowners hiring tradespeople.

Sources: WPXI · ↑ top

Around Town

Wilkins Township Road Closes for Repairs

Latest developments: A road in Wilkins Township will close Monday, August 24, for emergency repairs, WTAE reported August 23, as crews clear storm debris that backed up against a bridge deck.

read more

Crews in Wilkins Township, Allegheny County, will temporarily shut a road starting Monday to remove storm debris jammed against a bridge deck and to handle other maintenance.

Sources: WTAE · ↑ top

Lewis Faults Special-Education Funding

Latest developments: In a TribLive op-ed August 23, Andrew Lewis argued that Pennsylvania's adequacy-funding formula leaves several Western Pennsylvania school districts ill-equipped to serve a rising number of special-education students.

read more

Andrew Lewis contends that Western Pennsylvania districts absorbing large influxes of special-education students remain underfunded, a gap he says the state's adequacy formula fails to close even as overall aid rises.

Sources: TribLive · ↑ top

Homewood Event Sends Kids Back to School

Latest developments: A community event called The Give Back in Pittsburgh's Homewood neighborhood offered children free haircuts and school supplies on August 23, days before classes resume.

read more

Organizers of The Give Back styled local children's hair and handed out school supplies in Homewood, timing the effort to the start of the new school year.

Sources: WPXI · ↑ top

Sports

Around the Teams

Steelers Weigh Winners and Losers After Jets

Latest developments: The Post-Gazette graded which Steelers helped or hurt their roster case after the second preseason game against the New York Jets, spotlighting the quarterback picture around Will Howard and Drew Allar.

read more

The Post-Gazette's rising-and-falling review of the Steelers' preseason loss to the Jets weighed the young quarterbacks' standing under head coach Mike McCarthy as roster decisions near.

Sources: Post-Gazette Steelers · ↑ top

Not Just Football Continues Camp Series

Latest developments: Cam Heyward's 'Not Just Football' podcast released the second episode of its training-camp series on August 21, featuring defensive linemen Keeanu Benton and Sebastian Joseph-Day.

read more

Cam Heyward and Hayden Walsh hosted Steelers defensive linemen Keeanu Benton and Sebastian Joseph-Day on 'Not Just Football,' talking through the coming season on the show's Monday-Wednesday-Friday camp run.

Sources: Not Just Football with Cam Heyward · ↑ top

Team USA

Pepi and Dest Score for PSV

Latest developments: United States forward Ricardo Pepi and defender Sergiño Dest both scored on August 23 as PSV Eindhoven routed Groningen 5-1 in the Eredivisie.

read more

Ricardo Pepi and Sergiño Dest, both regulars for the U.S. men's national team, found the net in PSV Eindhoven's 5-1 win over Groningen, a lift for two Americans ahead of the 2026 World Cup the United States co-hosts.

Sources: ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,692.07  ▼ -0.9%
Dow        53,260.49  ▼ -1.0%
Nasdaq     26,302.67  ▼ -1.2%
WTI crude      86.03  ▲ +4.3%
EUR/USD       1.1620  ▲ +0.7%
GBP/USD       1.3575  ▲ +0.6%
USD/JPY       159.05  = +0.0%