daily plain-text briefing: security, markets, business, and pittsburgh
Artificial intelligence sharpened both sides of the ledger, as the UAT-10147 crew automated web-server attacks while enterprises doubled hiring for AI skills and wrestled with unvetted tools.
Latest developments: Private equity firm Apollo Global disclosed a breach exposing personal information within a campaign targeting major financial companies; ReliaQuest confirmed hackers impersonated its own security team to social-engineer an employee after a ShinyHunters intrusion, though the data-theft attempt failed; and South Korea's government-backed startup platform leaked encrypted personal data after developers embedded the encryption key in an API.
The incidents span a private equity giant, a security vendor, and a public startup platform, exposing social-engineering and key-management failures. Organizations should rotate keys, keep them separate from the data they protect, and drill staff against impersonation.
Sources: SecurityWeek · BleepingComputer · BleepingComputer · ↑ top
Latest developments: Akamai found the top 5% of enterprise AI power users hardcode unvetted tools into critical operations; the Cisco-founded AI Workforce Consortium reported cybersecurity job ads demanding AI skills doubled to 28.5% across G7 markets in a year; and Anthropic widened Mythos 5 access for defenders through its Claude Security beta and pledged a $35 million open-source fund.
AI now drives hiring, tooling, and risk across security teams, with a small band of super-adopters concentrating the danger as demand for AI-fluent staff climbs and vendors push defensive scanning. Inventory shadow AI, vet embedded tools, and upskill staff.
Sources: The Hacker News · Help Net Security · SecurityWeek · ↑ top
Latest developments: Kaspersky attributed the car head-unit malware to Chinese operators and called it the first documented case of malware built for that device class, spreading through the units' built-in software updaters to enroll internet-connected, SIM-equipped head units in a proxy botnet and run ad fraud.
Infected Android head units, many carrying SIM slots and direct internet access, join a proxy botnet and commit ad fraud through legitimate updaters. Owners and vendors should scrutinize head-unit update sources and firmware integrity.
Sources: The Record · Help Net Security · ↑ top
Latest developments: CISA ordered US federal agencies to patch an actively exploited Zimbra Collaboration Suite flaw within three days, tightening the clock on a bug already sitting in its Known Exploited Vulnerabilities catalog.
The directive escalates pressure on the Zimbra command-injection vulnerability attackers now exploit in the wild, echoing a broader disclosure surge that pushed the Spring application framework past 200 patched flaws this year. Patch Zimbra immediately and audit Spring dependencies.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: Researchers disclosed UAT-10147, a Chinese-speaking cybercrime crew that leans on AI to scale attacks against Windows and Linux web servers worldwide, dropping an implant called SPECTRE that carries EDR bypass and a Linux rootkit.
UAT-10147 strikes servers across education, media, technology, and gaming, concentrating on Brazil, Bolivia, China, Canada, and Vietnam, and pairs AI-assisted tooling with EDR evasion and kernel-level persistence. Harden and patch internet-facing servers and hunt for the rootkit.
Sources: The Hacker News · ↑ top
Latest developments: Fortra's threat intelligence unit, Fortra Intelligence and Research Experts, detailed Chameleon SEO Poisoning, a technique it tracked for three months that ranks cloaked fake banking pages for high-intent search terms and makes them play dead to dodge scanners, with cases up 40% in the second quarter of 2026.
Attackers poison search results for terms like a bank's login page to funnel victims to credential-harvesting clones that hide from automated scanners. Banks and users should watch for lookalike domains and verify URLs before entering credentials.
Sources: Help Net Security · ↑ top
Latest developments: President Trump said August 24 the United States will raise tariffs on Canadian automobiles and parts to 50% starting in January, and formal U.S.-Canada negotiations broke down over the weekend without a deal.
Trade talks between Washington and Ottawa fell apart, and Trump moved to lift the U.S. tariff on Canadian cars and auto parts to 50% effective January, escalating a trade war between the two neighbors and largest trading partners and threatening cross-border supply chains for automakers.
Sources: WSJ Politics · WSJ US Business · FT World · ↑ top
This Afternoon: Mostly Sunny, high 73F.
Tonight: Partly Cloudy, low 58F.
Tuesday: Mostly Sunny, high 78F.
Latest developments: Highmark Health reported August 24 that first-half earnings soared on the strength of its insurance arm, a year after the company sank more than $175 million into the red.
Highmark Health, the Pittsburgh-based Blue Cross insurer and parent of Allegheny Health Network, swung back to strong profit in the first half of 2026, with rising second-quarter operating income driven by its insurance business and reversing last year's steep loss.
Sources: TribLive · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Canonsburg Educational and Cultural Institute announced August 24 that builder Scarmazzi Homes signed a 15-year deal to become founding naming sponsor of the new Canon Theatre in Canonsburg.
Scarmazzi Homes, a Washington County homebuilder, will lend its name to the new Canon Theatre in downtown Canonsburg under a 15-year sponsorship with the Canonsburg Educational and Cultural Institute, backing the venue's opening.
Latest developments: Blank Rome said August 24 it hired a Jones Day partner in Pittsburgh and tapped him to co-chair its firmwide construction and infrastructure practice.
The law firm Blank Rome recruited a partner from rival Jones Day in Pittsburgh to co-lead its firmwide Construction and Infrastructure practice, deepening the firm's building-and-infrastructure bench.
Latest developments: Pittsburgh Public Schools opened classes August 24 with updated policies and new curriculum, and Mayor Corey O'Connor greeted students at several buildings, including Arlington PreK-8.
Students across Pittsburgh Public Schools returned to classrooms Monday under revised policies and new course offerings, as the district also prepares for building closures set to take effect at the end of the school year.
Latest developments: The Allegheny County Health Department said it will spray for mosquitoes in six Pittsburgh neighborhoods on Wednesday, August 26, after recent positive West Nile Virus tests.
The Allegheny County Health Department scheduled mosquito spraying across six Pittsburgh neighborhoods for Wednesday following positive West Nile Virus samples, a routine effort to knock down the virus-carrying population.
Latest developments: The Pittsburgh Post-Gazette said August 24 that executive editor Stan Wischnowski will step down in late September.
Stan Wischnowski, executive editor of the Pittsburgh Post-Gazette, will leave the newsroom's top job in late September, a leadership change at the region's largest daily.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: KDKA opened ticket sales August 24 for the 45th annual Pittsburgh Today Live Turkey Fund Kickoff Show.
KDKA's Pittsburgh Today Live holds its 45th annual Turkey Fund Kickoff Show on Friday, September 18, 2026, at 9 a.m. at the Pittsburgh Playhouse, benefiting the Greater Pittsburgh Community Food Bank, with guests Joe Manganiello and Kaitlin O'Connor; tickets are on sale now.
Latest developments: Coach Mike McCarthy said August 24 that cornerback Jalen Ramsey came off the physically-unable-to-perform list to practice and rookie first-round tackle Max Iheanachor returned after 2½ weeks out, while contract talks with cornerback Joey Porter Jr. hit an impasse and Porter stayed on PUP.
The Steelers got their versatile veteran defensive back Jalen Ramsey back on the field and saw first-round pick Max Iheanachor practice again after a shoulder-and-neck injury, but McCarthy said the club and Joey Porter Jr. remain stuck on a contract extension as the fourth-year corner sits on the PUP list with a back issue.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Pittsburgh columnists argued August 22 through 24 over whether the Steelers should carry four quarterbacks into the season.
With Mason Rudolph, Will Howard, and Drew Allar competing for backup jobs behind Aaron Rodgers, TribLive's Mark Madden said keeping all four would have zero impact on the season, TribLive's Tim Benz saw value in holding onto the group, and the Post-Gazette's Noah Hiles argued rostering four passers would be a mistake.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: U.S. women's national team midfielder Rose Lavelle left in the first half of Gotham FC's scoreless NWSL draw with Angel City FC on Sunday, August 23, with a head injury.
Gotham FC substituted playmaker Rose Lavelle, a mainstay of the U.S. women's national team, before halftime of a 0-0 draw against Angel City FC, a worrying exit for a key American midfielder as the NWSL season continues.
Sources: ESPN Soccer · ↑ top
S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1620 ▲ +0.7% GBP/USD 1.3575 ▲ +0.6% USD/JPY 159.05 = +0.0%