daily plain-text briefing: security, markets, business, and pittsburgh
Suspected Iranian hackers knocked a British power plant offline for four days, pushing nation-state cyber operations past espionage into physical sabotage of critical infrastructure.
Latest developments: Fresh reporting ties the four-day July 2026 outage to a broader wave, placing it alongside a coordinated attack that hit more than 30 US community water utilities around the same time and raising fears of repeatable strikes on Britain's distributed grid.
Suspected Iranian hackers took a British power plant offline for four days in July 2026, per sources cited by The Telegraph, causing real-world operational disruption and exposing the fragility of the country's critical infrastructure.
Sources: SecurityWeek · Help Net Security · ↑ top
Latest developments: Red Hat and the Keycloak project patched CVE-2026-18963, a CVSS 9.1 flaw that lets an unauthenticated remote attacker force a password reset and seize any account, while the Spring application framework shipped fixes for 91 more vulnerabilities.
Keycloak is a widely deployed open-source identity and access management server; the password-reset bug hands attackers full account takeover, so administrators should apply the Red Hat and Keycloak patches immediately.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Fortra detailed Gunra, a gang exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, and manufacturing, as Black Kite reported mid-market companies absorbing 73% of disclosed ransomware incidents from January 2023 through June 2026.
Gunra breaks in through unpatched perimeter devices to run double-extortion attacks; the gang and its peers increasingly target mid-market firms earning $10 million to $1 billion, so patching internet-facing VPNs and firewalls is the priority defense.
Sources: Graham Cluley · Help Net Security · ↑ top
Latest developments: Seqrite Labs exposed Operation QUICSILVER, a China-nexus espionage campaign using graduation-ceremony invitation lures to drop a Go backdoor called QUICAgent on Myanmar government and information-technology targets.
QUICSILVER phishes Myanmar's public sector with themed decoys that install the QUICAgent backdoor for persistent access; Seqrite assesses a China-aligned actor with moderate confidence.
Sources: The Hacker News · ↑ top
Latest developments: Gen Digital flagged two new loaders that likely sell access to ransomware groups: WordlistLoader delivers Amatera Stealer through ClearFake campaigns and ClickFix fake-captcha lures, and SynkLoader phishes Windows passwords for next-stage payloads.
WordlistLoader and SynkLoader operate as initial-access malware, dropping the Amatera information stealer and harvesting credentials to hand ransomware affiliates a foothold; the ClickFix lure tricks users into pasting attacker commands themselves.
Sources: The Hacker News · ↑ top
Latest developments: The Dutch Data Protection Authority fined Uber 825 million euros, nearly $1 billion, for violating the EU's General Data Protection Regulation through automated suspensions of driver accounts.
The Netherlands' privacy regulator found Uber's algorithmic account suspensions breached GDPR protections around automated decision-making, one of the largest data-protection penalties on record and a warning to firms running consequential automated systems on personal data.
Sources: SecurityWeek · ↑ top
Latest developments: President Trump said August 24 the United States will lift tariffs on Canadian cars and steel to 50%, a fresh escalation beyond the levies and retaliation already reported.
Trump moved to raise U.S. tariffs on Canadian automobiles and steel to 50%, deepening the trade war with Prime Minister Mark Carney's government after talks between Washington and Ottawa collapsed and Canada set its own post-Labor-Day retaliation.
Sources: FT World · WSJ US Business · ↑ top
Today: Mostly Sunny, high 73F.
Tonight: Partly Cloudy, low 58F.
Tuesday: Mostly Sunny, high 78F.
Latest developments: With 50% U.S. tariffs on Canadian exports now in effect and Ottawa's retaliation looming, WTAE laid out August 24 which everyday goods could climb in price for area shoppers.
WTAE reported that a range of everyday consumer goods could grow more expensive across the Pittsburgh region if Canada retaliates for the 50% U.S. tariffs on Canadian exports that just took effect.
Latest developments: KDKA reported August 24 that Texas chain Buc-ee's filed a trademark-infringement suit against Beaver's Mini Mart in Beavercreek, Ohio, over its beaver logo, stirring a regional backlash.
Buc-ee's Ltd., the Texas convenience-store chain known for its buck-toothed beaver mascot, sued Beaver's Mini Mart in Beavercreek, Ohio, for trademark infringement, and supporters across Ohio rallied to the small store's defense.
Latest developments: A water main broke overnight August 24 at Chartiers Avenue and Steuben Street in Pittsburgh's West End, buckling the road and cutting service to about 32 customers.
A large water main break at Chartiers Avenue and Steuben Street in the Elliott section of Pittsburgh's West End buckled the roadway and closed it to traffic, leaving roughly 32 customers without water service.
Sources: WPXI · Pittsburgh Post-Gazette · ↑ top
Latest developments: Oakmont Council amended the borough code to permit limited hunting in Dark Hollow Woods under its newly adopted deer-management program.
Oakmont Council voted to amend the borough's code to allow limited deer hunting in Dark Hollow Woods, aligning the ordinance with the deer-management program the borough recently adopted.
Latest developments: TribLive reported August 24 that Pittsburgh Arlington PreK-8, long one of the district's most troubled schools, aims to sustain last year's academic gains as classes resume.
Pittsburgh Arlington PreK-8, a Pittsburgh Public Schools building where learning and working had grown overwhelming for years, turned its performance around last school year, and its staff intends to keep the momentum going.
Latest developments: The Post-Gazette reported August 23 on the state of cornerback Joey Porter Jr.'s contract talks and the status of Jalen Ramsey's injury.
In its Steelers notes, the Post-Gazette laid out where matters stand on a possible new deal for cornerback Joey Porter Jr. and on the injury sidelining veteran defensive back Jalen Ramsey as the regular season nears.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Cam Heyward's 'Not Just Football' posted the third training-camp episode August 24, hosting wide receivers Roman Wilson, Germie Bernard, and Michael Pittman Jr.
On episode three of the 'Not Just Football' training-camp series, Cam Heyward and Hayden Walsh talked with Steelers wide receivers Roman Wilson, Germie Bernard, and Michael Pittman Jr. about life in the receiver room, with the show posting new camp episodes Monday, Wednesday, and Friday.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Post-Gazette profiled catcher Rafael Flores Jr. on August 24 and his drive to prove the David Bednar trade paid off for the Pirates.
Post-Gazette's Off The Bat detailed catcher Rafael Flores Jr.'s effort to show the Pirates' David Bednar trade was worth it, as he pushes for a role down the stretch of the season.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1620 ▲ +0.7% GBP/USD 1.3575 ▲ +0.6% USD/JPY 159.05 = +0.0%