infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Artificial intelligence sharpened both sides of the ledger, as the UAT-10147 crew automated web-server attacks while enterprises doubled hiring for AI skills and wrestled with unvetted tools.


Emerging Trends and Key Updates

Security

1. Breaches at Apollo Global, ReliaQuest, and a Korean Startup Platform

Data Breaches · [breach, social-engineering]

Latest developments: Private equity firm Apollo Global disclosed a breach exposing personal information within a campaign targeting major financial companies; ReliaQuest confirmed hackers impersonated its own security team to social-engineer an employee after a ShinyHunters intrusion, though the data-theft attempt failed; and South Korea's government-backed startup platform leaked encrypted personal data after developers embedded the encryption key in an API.

read more

The incidents span a private equity giant, a security vendor, and a public startup platform, exposing social-engineering and key-management failures. Organizations should rotate keys, keep them separate from the data they protect, and drill staff against impersonation.

Sources: SecurityWeek · BleepingComputer · BleepingComputer · ↑ top

2. AI Reshapes Security Work and Risk

AI Security · [ai, policy]

Latest developments: Akamai found the top 5% of enterprise AI power users hardcode unvetted tools into critical operations; the Cisco-founded AI Workforce Consortium reported cybersecurity job ads demanding AI skills doubled to 28.5% across G7 markets in a year; and Anthropic widened Mythos 5 access for defenders through its Claude Security beta and pledged a $35 million open-source fund.

read more

AI now drives hiring, tooling, and risk across security teams, with a small band of super-adopters concentrating the danger as demand for AI-fluent staff climbs and vendors push defensive scanning. Inventory shadow AI, vet embedded tools, and upskill staff.

Sources: The Hacker News · Help Net Security · SecurityWeek · ↑ top

3. Android Car Head-Unit Proxy Botnet

Ransomware and Cybercrime · [malware, botnet]

Latest developments: Kaspersky attributed the car head-unit malware to Chinese operators and called it the first documented case of malware built for that device class, spreading through the units' built-in software updaters to enroll internet-connected, SIM-equipped head units in a proxy botnet and run ad fraud.

read more

Infected Android head units, many carrying SIM slots and direct internet access, join a proxy botnet and commit ad fraud through legitimate updaters. Owners and vendors should scrutinize head-unit update sources and firmware integrity.

Sources: The Record · Help Net Security · ↑ top

4. CISA Emergency Zimbra Patch Order

Vulnerabilities and Exploits · [patch, exploit]

Latest developments: CISA ordered US federal agencies to patch an actively exploited Zimbra Collaboration Suite flaw within three days, tightening the clock on a bug already sitting in its Known Exploited Vulnerabilities catalog.

read more

The directive escalates pressure on the Zimbra command-injection vulnerability attackers now exploit in the wild, echoing a broader disclosure surge that pushed the Spring application framework past 200 patched flaws this year. Patch Zimbra immediately and audit Spring dependencies.

Sources: BleepingComputer · SecurityWeek · ↑ top

5. UAT-10147 AI-Scaled Server Attacks

Ransomware and Cybercrime · [malware, apt]

Latest developments: Researchers disclosed UAT-10147, a Chinese-speaking cybercrime crew that leans on AI to scale attacks against Windows and Linux web servers worldwide, dropping an implant called SPECTRE that carries EDR bypass and a Linux rootkit.

read more

UAT-10147 strikes servers across education, media, technology, and gaming, concentrating on Brazil, Bolivia, China, Canada, and Vietnam, and pairs AI-assisted tooling with EDR evasion and kernel-level persistence. Harden and patch internet-facing servers and hunt for the rootkit.

Sources: The Hacker News · ↑ top

6. Chameleon SEO Poisoning Fake Bank Sites

Ransomware and Cybercrime · [phishing, breach]

Latest developments: Fortra's threat intelligence unit, Fortra Intelligence and Research Experts, detailed Chameleon SEO Poisoning, a technique it tracked for three months that ranks cloaked fake banking pages for high-intent search terms and makes them play dead to dodge scanners, with cases up 40% in the second quarter of 2026.

read more

Attackers poison search results for terms like a bank's login page to funnel victims to credential-harvesting clones that hide from automated scanners. Banks and users should watch for lookalike domains and verify URLs before entering credentials.

Sources: Help Net Security · ↑ top

Business and Politics

U.S.-Canada Trade Talks Collapse

Latest developments: President Trump said August 24 the United States will raise tariffs on Canadian automobiles and parts to 50% starting in January, and formal U.S.-Canada negotiations broke down over the weekend without a deal.

read more

Trade talks between Washington and Ottawa fell apart, and Trump moved to lift the U.S. tariff on Canadian cars and auto parts to 50% effective January, escalating a trade war between the two neighbors and largest trading partners and threatening cross-border supply chains for automakers.

Sources: WSJ Politics · WSJ US Business · FT World · ↑ top

Pittsburgh

Weather

This Afternoon: Mostly Sunny, high 73F.

Tonight: Partly Cloudy, low 58F.

Tuesday: Mostly Sunny, high 78F.

Business

Highmark Health Earnings Rebound

Latest developments: Highmark Health reported August 24 that first-half earnings soared on the strength of its insurance arm, a year after the company sank more than $175 million into the red.

read more

Highmark Health, the Pittsburgh-based Blue Cross insurer and parent of Allegheny Health Network, swung back to strong profit in the first half of 2026, with rising second-quarter operating income driven by its insurance business and reversing last year's steep loss.

Sources: TribLive · Pittsburgh Post-Gazette · ↑ top

Scarmazzi Homes Names Canon Theatre

Latest developments: The Canonsburg Educational and Cultural Institute announced August 24 that builder Scarmazzi Homes signed a 15-year deal to become founding naming sponsor of the new Canon Theatre in Canonsburg.

read more

Scarmazzi Homes, a Washington County homebuilder, will lend its name to the new Canon Theatre in downtown Canonsburg under a 15-year sponsorship with the Canonsburg Educational and Cultural Institute, backing the venue's opening.

Sources: WPXI · ↑ top

Blank Rome Builds Out Construction Practice

Latest developments: Blank Rome said August 24 it hired a Jones Day partner in Pittsburgh and tapped him to co-chair its firmwide construction and infrastructure practice.

read more

The law firm Blank Rome recruited a partner from rival Jones Day in Pittsburgh to co-lead its firmwide Construction and Infrastructure practice, deepening the firm's building-and-infrastructure bench.

Sources: WPXI · ↑ top

Around Town

Pittsburgh Public Schools Start the Year

Latest developments: Pittsburgh Public Schools opened classes August 24 with updated policies and new curriculum, and Mayor Corey O'Connor greeted students at several buildings, including Arlington PreK-8.

read more

Students across Pittsburgh Public Schools returned to classrooms Monday under revised policies and new course offerings, as the district also prepares for building closures set to take effect at the end of the school year.

Sources: WTAE · WPXI · ↑ top

County to Spray Six Neighborhoods for West Nile

Latest developments: The Allegheny County Health Department said it will spray for mosquitoes in six Pittsburgh neighborhoods on Wednesday, August 26, after recent positive West Nile Virus tests.

read more

The Allegheny County Health Department scheduled mosquito spraying across six Pittsburgh neighborhoods for Wednesday following positive West Nile Virus samples, a routine effort to knock down the virus-carrying population.

Sources: WPXI · ↑ top

Post-Gazette's Wischnowski to Step Down

Latest developments: The Pittsburgh Post-Gazette said August 24 that executive editor Stan Wischnowski will step down in late September.

read more

Stan Wischnowski, executive editor of the Pittsburgh Post-Gazette, will leave the newsroom's top job in late September, a leadership change at the region's largest daily.

Sources: Pittsburgh Post-Gazette · ↑ top

Events

Turkey Fund Kickoff Show at the Pittsburgh Playhouse

Latest developments: KDKA opened ticket sales August 24 for the 45th annual Pittsburgh Today Live Turkey Fund Kickoff Show.

read more

KDKA's Pittsburgh Today Live holds its 45th annual Turkey Fund Kickoff Show on Friday, September 18, 2026, at 9 a.m. at the Pittsburgh Playhouse, benefiting the Greater Pittsburgh Community Food Bank, with guests Joe Manganiello and Kaitlin O'Connor; tickets are on sale now.

Sources: KDKA · ↑ top

Sports

Around the Teams

Ramsey Returns, Porter at an Impasse

Latest developments: Coach Mike McCarthy said August 24 that cornerback Jalen Ramsey came off the physically-unable-to-perform list to practice and rookie first-round tackle Max Iheanachor returned after 2½ weeks out, while contract talks with cornerback Joey Porter Jr. hit an impasse and Porter stayed on PUP.

read more

The Steelers got their versatile veteran defensive back Jalen Ramsey back on the field and saw first-round pick Max Iheanachor practice again after a shoulder-and-neck injury, but McCarthy said the club and Joey Porter Jr. remain stuck on a contract extension as the fourth-year corner sits on the PUP list with a back issue.

Sources: Pittsburgh Post-Gazette · ↑ top

Debate Over Keeping Four Quarterbacks

Latest developments: Pittsburgh columnists argued August 22 through 24 over whether the Steelers should carry four quarterbacks into the season.

read more

With Mason Rudolph, Will Howard, and Drew Allar competing for backup jobs behind Aaron Rodgers, TribLive's Mark Madden said keeping all four would have zero impact on the season, TribLive's Tim Benz saw value in holding onto the group, and the Post-Gazette's Noah Hiles argued rostering four passers would be a mistake.

Sources: Post-Gazette Steelers · ↑ top

Team USA

Rose Lavelle Leaves With Head Injury

Latest developments: U.S. women's national team midfielder Rose Lavelle left in the first half of Gotham FC's scoreless NWSL draw with Angel City FC on Sunday, August 23, with a head injury.

read more

Gotham FC substituted playmaker Rose Lavelle, a mainstay of the U.S. women's national team, before halftime of a 0-0 draw against Angel City FC, a worrying exit for a key American midfielder as the NWSL season continues.

Sources: ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,692.07  ▼ -0.9%
Dow        53,260.49  ▼ -1.0%
Nasdaq     26,302.67  ▼ -1.2%
WTI crude      86.03  ▲ +4.3%
EUR/USD       1.1620  ▲ +0.7%
GBP/USD       1.3575  ▲ +0.6%
USD/JPY       159.05  = +0.0%