================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 24, 2026 - 7:05 AM EDT ================================================================ An Iran-linked cyberattack knocked a British power plant offline for four days, the day's sharpest sign that state hackers now reach past data theft into physical infrastructure. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] An Iran-linked cyberattack knocked a UK power plant offline for four days as Treasury readies fresh Iran sanctions and Tehran threatens to seize 46 ships. see: Iran-Linked Cyberattack Shuts UK Power Plant; Treasury's 'Economic D-Day' on Iran * [TREND] AI is tilting cybersecurity toward offense, as Chinese-speaking UAT-10147 scales web-server intrusions while Ben Thompson argues incentives favor attackers in agentic security. see: UAT-10147 Scales Server Attacks With AI; Autonomy and Innovation * [TREND] Attackers converge on finance, exposing Apollo Global data and ranking cloaked fake bank sites via Chameleon SEO, as a record ATM jackpotting sentence lands. see: Apollo Global Data Breach; Chameleon SEO Poisoning Fakes Bank Sites; Record ATM Jackpotting Sentence * [UPDATE (new)] CISA ordered agencies to patch the actively exploited Zimbra flaw CVE-2026-73570 within three days after adding it to its Known Exploited Vulnerabilities catalog. see: CISA Orders Emergency Zimbra Patching * [TREND] Around Pittsburgh, schools brace for measles as classes resume, PRT ridership climbed 5%, and officials won't explain new teen-access limits on public spaces. see: Pennsylvania Schools Brace for Measles; PRT Ridership Rises 5%; Pittsburgh's Teen-Access Limits Draw Scrutiny * [UPDATE (new)] U.S.-Canada trade talks formally collapsed, hardening the tariff standoff a day after Ottawa set fresh retaliatory levies. see: U.S.-Canada Trade Talks Collapse SECURITY ---------------------------------------------------------------- 1. IRAN-LINKED CYBERATTACK SHUTS UK POWER PLANT Nation-State Activity · [apt, critical-infrastructure, nation-state] Latest developments: Iran-linked hackers knocked a United Kingdom power plant offline for four days, inflicting real-world operational disruption on Britain's distributed energy grid. SecurityWeek reports that attackers tied to Iran shut down a British power plant for four days, raising alarm over the resilience of distributed energy infrastructure and the prospect of repeatable strikes. Operators of distributed energy assets should harden operational-technology networks and segment control systems. - SecurityWeek: https://www.securityweek.com/iran-linked-hackers-shut-down-uk-power-plant-for-four-days/ 2. CISA ORDERS EMERGENCY ZIMBRA PATCHING Vulnerabilities and Exploits · [patch, zero-day, exploited] Latest developments: CISA ordered U.S. government agencies to patch the actively exploited Zimbra Collaboration Suite flaw CVE-2026-73570 within three days, escalating from last week's addition of the bug to its Known Exploited Vulnerabilities catalog. The OS command-injection bug CVE-2026-73570 lets attackers run commands on Zimbra Collaboration Suite mail servers, and CISA's directive gives federal agencies three days to apply the fix. Administrators running Zimbra should patch immediately. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw/ 3. UAT-10147 SCALES SERVER ATTACKS WITH AI Ransomware and Cybercrime · [malware, ai, cybercrime] Latest developments: Researchers exposed UAT-10147, a Chinese-speaking cybercrime group that uses AI to scale attacks on Windows and Linux web servers worldwide, deploying the SPECTRE implant with an EDR bypass and a Linux rootkit. UAT-10147 hits education, media, technology, and gaming organizations concentrated in Brazil, Bolivia, China, Canada, and Vietnam, uncovered after investigators found an exposed attacker directory. Web-server operators should hunt for SPECTRE, EDR tampering, and rootkit activity. - The Hacker News: https://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.html 4. CHAMELEON SEO POISONING FAKES BANK SITES Ransomware and Cybercrime · [phishing, fraud] Latest developments: Fortra's threat-intelligence unit FIRE named Chameleon SEO Poisoning, a technique that ranks cloaked fake banking websites for high-intent search terms and makes them play dead to slip past scanners, and logged a 40% jump in cases during the second quarter of 2026. Chameleon SEO Poisoning manipulates search results to steer victims to counterfeit bank login pages that harvest credentials while dodging automated crawlers. Banks and their customers should verify URLs and distrust search-ranked login links. - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/chameleon-seo-poisoning-fake-banking-websites-phishing/ 5. RECORD ATM JACKPOTTING SENTENCE Ransomware and Cybercrime · [fraud, cybercrime] Latest developments: A federal court sentenced Venezuelan national Juan Manuel Gouveia-Aguilera to eight years in prison, a record term, for an ATM jackpotting scheme that caused millions of dollars in losses. Gouveia-Aguilera helped run jackpotting attacks that force ATMs to spit out cash on command, draining machines of millions. The sentence marks the longest U.S. federal prison term for the crime. - SecurityWeek: https://www.securityweek.com/venezuelan-gets-record-federal-prison-term-for-atm-jackpotting/ 6. APOLLO GLOBAL DATA BREACH Data Breaches · [breach, finance] Latest developments: Private equity firm Apollo Global Management disclosed a breach that exposed personal information, part of a campaign that targets major financial companies. SecurityWeek reports intruders lifted personal data from Apollo Global Management in what appears to be a broader push against large financial firms. Affected individuals should watch for fraud and phishing tied to the exposure. - SecurityWeek: https://www.securityweek.com/personal-information-exposed-in-apollo-global-data-breach/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Treasury's 'Economic D-Day' on Iran Latest developments: Treasury Secretary Scott Bessent will unveil new sanctions on Iran on August 24, and Tehran threatened to fine or confiscate 46 ships it says violated Strait of Hormuz transit rules. The Trump administration is moving to intensify financial pressure on Iran to force concessions as talks stall, a step markets are calling an economic D-Day; oil fell more than 1.5% ahead of the announcement while gold climbed above $4,700 an ounce. - FT World: https://www.ft.com/content/63e11e59-1f21-488a-b89b-de4abbdd7396?syn-25a6b1a6=1 - FT Markets: https://www.ft.com/content/9ebcd1d7-9959-468b-af96-987ef5bf83a8?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-falls-on-possible-position-adjustments-before-potential-u-s-sanctions-on-iran-6d0d22c3?mod=rss_markets_main * U.S.-Canada Trade Talks Collapse Latest developments: The Wall Street Journal reported August 24 that U.S.-Canada trade talks have formally failed, hardening the tariff standoff a day after Ottawa set fresh retaliatory levies. The United States and Canada, each other's largest trading partners, are spiraling toward a full trade war after 50% U.S. tariffs took effect and Prime Minister Mark Carney held to his 'no deal is better than a bad deal' doctrine, which draws broad support across Canada's political spectrum. - WSJ US Business: https://www.wsj.com/logistics-report/u-s-canada-trade-talks-fail-7c8cdc47?mod=pls_whats_news_us_business_f - WSJ World News: https://www.wsj.com/world/americas/canadas-carney-puts-his-no-deal-is-better-than-a-bad-deal-doctrine-to-the-test-9d9b5f6e?mod=rss_worldnews PITTSBURGH ---------------------------------------------------------------- Weather: Today: Mostly Sunny, high 73F. Tonight: Partly Cloudy, low 58F. Tuesday: Mostly Sunny, high 78F. Business: * Homer City Boom May Fund Indiana County Broadband Latest developments: A Post-Gazette report August 24 finds the economic boom around the former Homer City coal plant could finally extend affordable high-speed internet across Indiana County. Redevelopment at the shuttered Homer City Generating Station in Indiana County is building momentum that officials hope will pull long-underserved rural areas into modern broadband access and affordability. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/08/24/homer-city-coal-indiana-county-broadband-affordability/stories/202608190047 * Cost of Living Comfortably in Pittsburgh Climbs Latest developments: A Post-Gazette analysis August 24 reports the income needed to live comfortably in Pittsburgh has risen steeply. The Post-Gazette found the price of living comfortably in Pittsburgh is climbing, squeezing household budgets across the region even as the city keeps its reputation for affordability. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/money/2026/08/24/pittsburgh-price-of-living-comfortably/stories/202608230053 Around town: * PRT Ridership Rises 5% Latest developments: Pittsburgh Regional Transit reported ridership climbed 5%, the Post-Gazette said August 24. Pittsburgh Regional Transit's ridership rose 5% as riders return to buses and light rail across Allegheny County, a gain the agency touts amid its broader Bus Line Refresh planning. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/08/24/pittsburgh-regional-transit-improved-ridership/stories/202608210057 * Pittsburgh's Teen-Access Limits Draw Scrutiny Latest developments: PublicSource reported August 24 that Pittsburgh officials will not explain how they decided to restrict teens' access to some public spaces this summer. Fears of 'teen takeovers' led Pittsburgh to limit youth access to certain public spaces over the summer, and PublicSource found city officials tight-lipped about who made those calls and how, raising transparency questions. - PublicSource: https://www.publicsource.org/pittsburgh-teen-restrictions-transparency/ * Pennsylvania Schools Brace for Measles Latest developments: A Post-Gazette report August 24 details how area schools are preparing as measles spreads across Pennsylvania and classes resume. With measles cases climbing statewide and the first Allegheny County case since 2019 confirmed at UPMC Children's Hospital of Pittsburgh, Pennsylvania schools are checking vaccination records and readiness for the new year. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/health/2026/08/24/pennsylvania-measles-schools/stories/202608230063 Events: * Sweetwater Arts Center Open House Latest developments: TribLive reported August 24 that Sweetwater Center for the Arts in Sewickley will hold a public open house August 29. Sweetwater Center for the Arts hosts an open house Saturday, August 29, 2026, from 11 a.m. to 3 p.m. at its Sewickley campus, inviting the public to tour its classes and studios. - TribLive: https://triblive.com/local/sewickley/sweetwater-center-for-the-arts-to-host-an-open-house-aug-29/ SPORTS ---------------------------------------------------------------- Team USA: * Rose Lavelle Leaves With Head Injury Latest developments: U.S. international Rose Lavelle left Gotham FC's scoreless draw with Angel City FC in the first half August 23 with a head injury, ESPN reported. Gotham FC midfielder Rose Lavelle, a mainstay of the U.S. women's national team, came off in the first half of a scoreless NWSL draw against Angel City FC because of a head injury, an added worry for the USWNT. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49709156/us-international-rose-lavelle-suffers-head-injury-gotham-fc-draw READING ---------------------------------------------------------------- * Stratechery -- Autonomy and Innovation Ben Thompson argues incentives favor offense in agentic cybersecurity, the same dynamic he expects to hold back incumbents and power startups over the long run. https://stratechery.com/2026/autonomy-and-innovation/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron traces how deeply the AI industry and its vendors depend on OpenAI, and games out the fallout across the sector should the company collapse. https://www.wheresyoured.at/what-happens-if-openai-dies/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1620 ▲ +0.7% GBP/USD 1.3575 ▲ +0.6% USD/JPY 159.05 = +0.0% ================================================================ Generated 2026-08-24 07:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================