================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 24, 2026 - 1:36 PM EDT ================================================================ Artificial intelligence sharpened both sides of the ledger, as the UAT-10147 crew automated web-server attacks while enterprises doubled hiring for AI skills and wrestled with unvetted tools. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Enterprises are doubling demand for AI skills while super-adopters hardcode unvetted tools into critical systems and UAT-10147 leans on AI to scale attacks on web servers. see: AI Reshapes Security Work and Risk; UAT-10147 AI-Scaled Server Attacks * [TREND] Financial-sector fraud runs on cheap infrastructure as Chameleon SEO Poisoning cloaks fake bank pages from scanners while breaches hit Apollo Global and ReliaQuest. see: Chameleon SEO Poisoning Fake Bank Sites; Breaches at Apollo Global, ReliaQuest, and a Korean Startup Platform * [TREND] Kaspersky documents the first malware built for car head-units, enrolling SIM-equipped dashboards into a proxy botnet through their own update mechanisms. see: Android Car Head-Unit Proxy Botnet * [UPDATE (new)] CISA ordered federal agencies to patch an actively exploited Zimbra Collaboration flaw within three days of it entering the exploited-vulnerabilities catalog. see: CISA Emergency Zimbra Patch Order * [TREND] Commentators debate AI's real danger, with Newport and Zitron flagging shaky lab finances and OpenAI's fragility while Thompson argues agentic security favors offense. see: Has AI Gone Rogue?; What Happens If OpenAI Dies?; Autonomy and Innovation SECURITY ---------------------------------------------------------------- 1. BREACHES AT APOLLO GLOBAL, RELIAQUEST, AND A KOREAN STARTUP PLATFORM Data Breaches · [breach, social-engineering] Latest developments: Private equity firm Apollo Global disclosed a breach exposing personal information within a campaign targeting major financial companies; ReliaQuest confirmed hackers impersonated its own security team to social-engineer an employee after a ShinyHunters intrusion, though the data-theft attempt failed; and South Korea's government-backed startup platform leaked encrypted personal data after developers embedded the encryption key in an API. The incidents span a private equity giant, a security vendor, and a public startup platform, exposing social-engineering and key-management failures. Organizations should rotate keys, keep them separate from the data they protect, and drill staff against impersonation. - SecurityWeek: https://www.securityweek.com/personal-information-exposed-in-apollo-global-data-breach/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/reliaquest-confirms-failed-data-theft-attack-after-shinyhunters-breach/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/south-korean-startup-platform-breach-exposes-key-management-failures/ 2. AI RESHAPES SECURITY WORK AND RISK AI Security · [ai, policy] Latest developments: Akamai found the top 5% of enterprise AI power users hardcode unvetted tools into critical operations; the Cisco-founded AI Workforce Consortium reported cybersecurity job ads demanding AI skills doubled to 28.5% across G7 markets in a year; and Anthropic widened Mythos 5 access for defenders through its Claude Security beta and pledged a $35 million open-source fund. AI now drives hiring, tooling, and risk across security teams, with a small band of super-adopters concentrating the danger as demand for AI-fluent staff climbs and vendors push defensive scanning. Inventory shadow AI, vet embedded tools, and upskill staff. - The Hacker News: https://thehackernews.com/2026/08/the-outsized-shadow-why-5-of-ai-users.html - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/cybersecurity-job-ads-ai-skills-research/ - SecurityWeek: https://www.securityweek.com/anthropic-expands-mythos-5-access-to-more-defenders-unveils-35m-open-source-fund/ 3. ANDROID CAR HEAD-UNIT PROXY BOTNET Ransomware and Cybercrime · [malware, botnet] Latest developments: Kaspersky attributed the car head-unit malware to Chinese operators and called it the first documented case of malware built for that device class, spreading through the units' built-in software updaters to enroll internet-connected, SIM-equipped head units in a proxy botnet and run ad fraud. Infected Android head units, many carrying SIM slots and direct internet access, join a proxy botnet and commit ad fraud through legitimate updaters. Owners and vendors should scrutinize head-unit update sources and firmware integrity. - The Record: https://therecord.media/android-botnet-china-hackers - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/android-malware-car-head-unit-badbox/ 4. CISA EMERGENCY ZIMBRA PATCH ORDER Vulnerabilities and Exploits · [patch, exploit] Latest developments: CISA ordered US federal agencies to patch an actively exploited Zimbra Collaboration Suite flaw within three days, tightening the clock on a bug already sitting in its Known Exploited Vulnerabilities catalog. The directive escalates pressure on the Zimbra command-injection vulnerability attackers now exploit in the wild, echoing a broader disclosure surge that pushed the Spring application framework past 200 patched flaws this year. Patch Zimbra immediately and audit Spring dependencies. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw/ - SecurityWeek: https://www.securityweek.com/91-vulnerabilities-patched-in-spring-application-framework/ 5. UAT-10147 AI-SCALED SERVER ATTACKS Ransomware and Cybercrime · [malware, apt] Latest developments: Researchers disclosed UAT-10147, a Chinese-speaking cybercrime crew that leans on AI to scale attacks against Windows and Linux web servers worldwide, dropping an implant called SPECTRE that carries EDR bypass and a Linux rootkit. UAT-10147 strikes servers across education, media, technology, and gaming, concentrating on Brazil, Bolivia, China, Canada, and Vietnam, and pairs AI-assisted tooling with EDR evasion and kernel-level persistence. Harden and patch internet-facing servers and hunt for the rootkit. - The Hacker News: https://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.html 6. CHAMELEON SEO POISONING FAKE BANK SITES Ransomware and Cybercrime · [phishing, breach] Latest developments: Fortra's threat intelligence unit, Fortra Intelligence and Research Experts, detailed Chameleon SEO Poisoning, a technique it tracked for three months that ranks cloaked fake banking pages for high-intent search terms and makes them play dead to dodge scanners, with cases up 40% in the second quarter of 2026. Attackers poison search results for terms like a bank's login page to funnel victims to credential-harvesting clones that hide from automated scanners. Banks and users should watch for lookalike domains and verify URLs before entering credentials. - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/chameleon-seo-poisoning-fake-banking-websites-phishing/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S.-Canada Trade Talks Collapse Latest developments: President Trump said August 24 the United States will raise tariffs on Canadian automobiles and parts to 50% starting in January, and formal U.S.-Canada negotiations broke down over the weekend without a deal. Trade talks between Washington and Ottawa fell apart, and Trump moved to lift the U.S. tariff on Canadian cars and auto parts to 50% effective January, escalating a trade war between the two neighbors and largest trading partners and threatening cross-border supply chains for automakers. - WSJ Politics: https://www.wsj.com/economy/trade/trump-threatens-50-tariff-on-automobiles-and-parts-from-canada-83c10448?mod=rss_socialpoliticsfeed - WSJ US Business: https://www.wsj.com/logistics-report/u-s-canada-trade-talks-fail-7c8cdc47?mod=pls_whats_news_us_business_f - FT World: https://www.ft.com/content/52978bad-2b91-41e3-be94-7fb6776fbb91?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Mostly Sunny, high 73F. Tonight: Partly Cloudy, low 58F. Tuesday: Mostly Sunny, high 78F. Business: * Highmark Health Earnings Rebound Latest developments: Highmark Health reported August 24 that first-half earnings soared on the strength of its insurance arm, a year after the company sank more than $175 million into the red. Highmark Health, the Pittsburgh-based Blue Cross insurer and parent of Allegheny Health Network, swung back to strong profit in the first half of 2026, with rising second-quarter operating income driven by its insurance business and reversing last year's steep loss. - TribLive: https://triblive.com/news/health-now/highmarks-1st-half-earnings-soar-driven-by-insurance-arm/ - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/healthcare-business/2026/08/24/highmark-health-q2-operating-income/stories/202608240035 * Scarmazzi Homes Names Canon Theatre Latest developments: The Canonsburg Educational and Cultural Institute announced August 24 that builder Scarmazzi Homes signed a 15-year deal to become founding naming sponsor of the new Canon Theatre in Canonsburg. Scarmazzi Homes, a Washington County homebuilder, will lend its name to the new Canon Theatre in downtown Canonsburg under a 15-year sponsorship with the Canonsburg Educational and Cultural Institute, backing the venue's opening. - WPXI: https://www.wpxi.com/news/local/builder-invests-15-year-naming-deal-new-canon-theatre/7L4HUYNS3JDG3GQWRXXK4IRJ4Y/ * Blank Rome Builds Out Construction Practice Latest developments: Blank Rome said August 24 it hired a Jones Day partner in Pittsburgh and tapped him to co-chair its firmwide construction and infrastructure practice. The law firm Blank Rome recruited a partner from rival Jones Day in Pittsburgh to co-lead its firmwide Construction and Infrastructure practice, deepening the firm's building-and-infrastructure bench. - WPXI: https://www.wpxi.com/news/local/blank-rome-hires-jones-day-partner-co-chair-firmwide-construction-practice/YVZQPQABRFAPNFQC42NYOR6EGA/ Around town: * Pittsburgh Public Schools Start the Year Latest developments: Pittsburgh Public Schools opened classes August 24 with updated policies and new curriculum, and Mayor Corey O'Connor greeted students at several buildings, including Arlington PreK-8. Students across Pittsburgh Public Schools returned to classrooms Monday under revised policies and new course offerings, as the district also prepares for building closures set to take effect at the end of the school year. - WTAE: https://www.wtae.com/article/pittsburgh-public-schools-back-to-school/73510630 - WPXI: https://www.wpxi.com/news/local/pittsburgh-public-schools-students-head-back-class/GGWA7QYY6JHCHB4TUX7PX6GNB4/ * County to Spray Six Neighborhoods for West Nile Latest developments: The Allegheny County Health Department said it will spray for mosquitoes in six Pittsburgh neighborhoods on Wednesday, August 26, after recent positive West Nile Virus tests. The Allegheny County Health Department scheduled mosquito spraying across six Pittsburgh neighborhoods for Wednesday following positive West Nile Virus samples, a routine effort to knock down the virus-carrying population. - WPXI: https://www.wpxi.com/news/local/6-pittsburgh-neighborhoods-be-sprayed-after-positive-west-nile-virus-tests/AZAZGXIHI5A65A3OYG5UIS2BSA/ * Post-Gazette's Wischnowski to Step Down Latest developments: The Pittsburgh Post-Gazette said August 24 that executive editor Stan Wischnowski will step down in late September. Stan Wischnowski, executive editor of the Pittsburgh Post-Gazette, will leave the newsroom's top job in late September, a leadership change at the region's largest daily. - Pittsburgh Post-Gazette: https://www.post-gazette.com/local/city/2026/08/24/venetoulis-executive-editor-stan-wischnowski/stories/202609290001 Events: * Turkey Fund Kickoff Show at the Pittsburgh Playhouse Latest developments: KDKA opened ticket sales August 24 for the 45th annual Pittsburgh Today Live Turkey Fund Kickoff Show. KDKA's Pittsburgh Today Live holds its 45th annual Turkey Fund Kickoff Show on Friday, September 18, 2026, at 9 a.m. at the Pittsburgh Playhouse, benefiting the Greater Pittsburgh Community Food Bank, with guests Joe Manganiello and Kaitlin O'Connor; tickets are on sale now. - KDKA: https://www.cbsnews.com/pittsburgh/news/tickets-pittsburgh-today-live-kdka-turkey-fund-kickoff-show-pittsburgh-playhouse/ SPORTS ---------------------------------------------------------------- Around the Teams: * Ramsey Returns, Porter at an Impasse Latest developments: Coach Mike McCarthy said August 24 that cornerback Jalen Ramsey came off the physically-unable-to-perform list to practice and rookie first-round tackle Max Iheanachor returned after 2½ weeks out, while contract talks with cornerback Joey Porter Jr. hit an impasse and Porter stayed on PUP. The Steelers got their versatile veteran defensive back Jalen Ramsey back on the field and saw first-round pick Max Iheanachor practice again after a shoulder-and-neck injury, but McCarthy said the club and Joey Porter Jr. remain stuck on a contract extension as the fourth-year corner sits on the PUP list with a back issue. - Pittsburgh Post-Gazette: https://www.post-gazette.com/sports/steelers/2026/08/24/nfl-injury-news-jalen-ramsey-max-iheanachor-joey-porter/stories/202608240030 * Debate Over Keeping Four Quarterbacks Latest developments: Pittsburgh columnists argued August 22 through 24 over whether the Steelers should carry four quarterbacks into the season. With Mason Rudolph, Will Howard, and Drew Allar competing for backup jobs behind Aaron Rodgers, TribLive's Mark Madden said keeping all four would have zero impact on the season, TribLive's Tim Benz saw value in holding onto the group, and the Post-Gazette's Noah Hiles argued rostering four passers would be a mistake. - Post-Gazette Steelers: https://www.post-gazette.com/sports/columns/2026/08/22/nfl-steelers-quarterbacks-aaron-rodgers-mason-rudolph-will-howard-drew-allar/stories/202608220031 Team USA: * Rose Lavelle Leaves With Head Injury Latest developments: U.S. women's national team midfielder Rose Lavelle left in the first half of Gotham FC's scoreless NWSL draw with Angel City FC on Sunday, August 23, with a head injury. Gotham FC substituted playmaker Rose Lavelle, a mainstay of the U.S. women's national team, before halftime of a 0-0 draw against Angel City FC, a worrying exit for a key American midfielder as the NWSL season continues. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49709156/us-international-rose-lavelle-suffers-head-injury-gotham-fc-draw READING ---------------------------------------------------------------- * Cal Newport -- Has AI Gone Rogue? Newport argues the real AI story of the summer is the shaky financial footing of the labs chasing record IPOs, cutting against the breathless narrative of runaway machine autonomy. https://calnewport.com/has-ai-gone-rogue/ * Stratechery -- Autonomy and Innovation Ben Thompson contends that in agentic cybersecurity the incentives favor offense, the same dynamic that will hamstring incumbents and give startups room to grow over the long run. https://stratechery.com/2026/autonomy-and-innovation/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron games out the fallout if OpenAI collapses, arguing the company's precarious finances would ripple across the AI industry and the investors and vendors betting on it. https://www.wheresyoured.at/what-happens-if-openai-dies/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1620 ▲ +0.7% GBP/USD 1.3575 ▲ +0.6% USD/JPY 159.05 = +0.0% ================================================================ Generated 2026-08-24 13:36 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================