daily plain-text briefing: security, markets, business, and pittsburgh
Suspected Iranian hackers held a British power plant offline for four days as Washington answered with sanctions on Iranian cyber actors.
Latest developments: Red Hat patched Keycloak's CVSS 9.1 CVE-2026-18963, which lets an unauthenticated attacker force a password reset to take over any account; CISA added the actively exploited Oracle HTTP Server and WebLogic proxy flaw CVE-2026-21962 to its Known Exploited Vulnerabilities catalog; researchers found hackers exploiting miniOrange SAML SSO auth-bypass bugs to forge administrator logins on WordPress; and an unpatched Calix GS7 XGS router flaw lets remote attackers expose home-network devices.
The flaws span identity servers, application servers, WordPress plugins, and US broadband routers, threatening enterprises and home-internet subscribers alike. Administrators should patch Keycloak and Oracle immediately and disable the miniOrange plugin until a fix ships.
Sources: The Hacker News · CISA Advisories · BleepingComputer · BleepingComputer · ↑ top
Latest developments: The US Treasury sanctioned several Iranian nationals for critical-infrastructure attacks days after reports revealed suspected Iranian hackers held a small UK power plant offline for four days in July 2026.
The intrusion caused real operational disruption at a distributed British energy site and raised doubts about the resilience of the UK grid; the shutdown lined up with a coordinated hit on more than 30 US community water utilities. Operators should harden internet-exposed operational technology.
Sources: The Record · SecurityWeek · Help Net Security · ↑ top
Latest developments: Gen Digital detailed WordlistLoader, which hides its payload as ordinary text to deliver Amatera Stealer through ClearFake and ClickFix fake-CAPTCHA lures, alongside SynkLoader, a multilingual tool that revives screen hijacking to steal Windows passwords and likely sells the access to ransomware crews.
Both loaders lean on social engineering and evasion to plant infostealers on enterprise Windows machines, an early stage that often precedes ransomware. Teams should block ClickFix-style CAPTCHA lures and hunt for credential theft.
Sources: The Hacker News · Dark Reading · Dark Reading · ↑ top
Latest developments: The Dutch Data Protection Authority fined Uber 825 million euros for violating the GDPR by automatically suspending driver accounts, New Zealand moved to ban social media for children under 16 using facial age estimation, and the US Justice Department finalized TikTok's $400 million COPPA settlement.
Regulators across the Netherlands, New Zealand, and the United States are pressing platforms on automated decisions and children's data, with penalties reaching nine figures. Companies handling driver, user, and minor data face stiffer accountability.
Sources: SecurityWeek · The Record · BleepingComputer · ↑ top
Latest developments: Black Kite reported that firms earning $10 million to $1 billion absorbed 73% of 13,336 disclosed ransomware and extortion incidents across North America and Europe from January 2023 through June 2026, and Fortra flagged the Gunra gang exploiting unpatched VPNs and firewalls to hit healthcare, finance, and manufacturing.
Mid-sized companies now carry the bulk of the ransomware load, drawing gangs like Gunra that breach exposed edge devices to steal data and encrypt systems. Mid-market operators should patch VPNs and firewalls and rehearse recovery.
Sources: Help Net Security · Graham Cluley · ↑ top
Latest developments: Seqrite Labs disclosed Operation QUICSILVER, a China-nexus espionage campaign using graduation-ceremony invitation lures to plant a Go backdoor called QUICAgent in Myanmar government and information-technology networks.
The campaign targets Myanmar's government and IT sectors with a QUIC-based implant designed to blend command traffic into normal cloud activity. Defenders in the region should watch for the lure documents and anomalous QUIC connections.
Sources: The Hacker News · ↑ top
Latest developments: Treasury Secretary Scott Bessent unveiled Operation Economic Outcast on August 24, a campaign to sanction any country or company that keeps trading with Iran.
Bessent billed the move as the largest financial offensive ever aimed at an adversary, targeting Tehran's enablers to choke the regime's oil revenue; crude futures fell as traders weighed the threat while Iran signaled defiance.
Sources: WSJ World News · FT World · WSJ Markets · ↑ top
Latest developments: The U.S. Supreme Court on August 24 lifted a lower-court block, freeing President Trump to advance his executive order restricting mail-in voting before November's midterms.
The justices called the lawsuit challenging the order premature, letting Trump tie mail-ballot eligibility to a new federal voter list; the court signaled further litigation lies ahead.
Sources: WSJ Politics · FT World · ↑ top
Tonight: Mostly Clear, low 58F.
Tuesday: Mostly Sunny, high 80F.
Tuesday Night: Mostly Cloudy then Areas Of Fog, low 58F.
Latest developments: Governor Josh Shapiro and PennDOT announced August 24 that a second daily Pennsylvanian train linking Pittsburgh, Harrisburg, and New York City starts in mid-November.
The added round trip doubles Amtrak's daily service on the line, giving Western Pennsylvania riders a second option each day between Pittsburgh and New York.
Sources: Pittsburgh Post-Gazette · WTAE · ↑ top
Latest developments: Carnegie Mellon University's College of Fine Arts will lead a two-year national study on integrating artificial intelligence into arts education, TribLive reported August 24.
The project examines how AI can fit into arts instruction, placing the Pittsburgh university at the center of a national debate over technology in creative classrooms.
Latest developments: Pittsburgh firefighters and police returned August 24 to their renovated station on North Euclid Avenue in East Liberty, first built in 1929.
The sandstone Bureau of Fire and police station reopened after renovations that Chip Gaul, an assistant director in the city's Department of Public Works, said were needed to meet the demands of sworn officers and firefighters.
Latest developments: The West Mifflin Area School District acknowledged August 24 that its bus service fell short as the school year opened, with parents reporting long delays.
Families said buses ran more than an hour late, including a wheelchair-accessible route for a kindergartener with special needs, as the district conceded its transportation service failed to meet expectations.
Latest developments: The National Weather Service says Western Pennsylvania will see a deep partial lunar eclipse Thursday night, August 27, with Earth's shadow covering about 93% of the moon.
Skywatchers across the region can catch the eclipse Thursday night, when roughly 93% of the moon slips into Earth's shadow.
Latest developments: Emsworth restaurant Cafe Notte makes its television debut this week on Fox's 'Kitchen Nightmares,' the Post-Gazette reported August 24.
Cafe Notte, the Emsworth eatery, appears on Fox's 'Kitchen Nightmares' this week, putting a Pittsburgh-area restaurant in front of a national audience.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Latest developments: Cam Heyward's 'Not Just Football' podcast released its third training-camp episode August 24, with receivers Roman Wilson, Germie Bernard, and Michael Pittman Jr. dissecting the position group.
Wilson, Bernard, and Pittman described life in the Steelers' receiver room on the episode, and Bernard talked about how much he is learning from quarterback Aaron Rodgers.
Sources: Not Just Football with Cam Heyward · Not Just Football with Cam Heyward · ↑ top
Latest developments: The Post-Gazette detailed August 24 catcher Rafael Flores Jr.'s push to prove the David Bednar trade was worth it as he eyes a postseason role.
Flores, whom the Pirates acquired in the David Bednar deal, told the Post-Gazette he wants to show the trade paid off, framing his development behind the plate as the proof.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1641 ▲ +0.8% GBP/USD 1.3597 ▲ +0.6% USD/JPY 158.99 ▼ -0.2%