================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 24, 2026 - 7:35 PM EDT ================================================================ Suspected Iranian hackers held a British power plant offline for four days as Washington answered with sanctions on Iranian cyber actors. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Suspected Iranian crews knocked a UK power plant offline for four days as Washington sanctioned Iranian actors and launched Operation Economic Outcast targeting anyone still trading with Iran. see: Iranian Attack Shuts UK Power Plant, US Sanctions Follow; U.S. Opens Iran Sanctions Offensive * [TREND] Fresh loaders WordlistLoader and SynkLoader disguise payloads to seed infostealers while ransomware crews like Gunra zero in on mid-market firms absorbing most disclosed extortion incidents. see: WordlistLoader and SynkLoader Seed Stealers; Ransomware Zeroes In on Mid-Market, Gunra Surges * [UPDATE (new)] Red Hat patched a CVSS 9.1 account-takeover bug in Keycloak while CISA flagged an actively exploited Oracle WebLogic proxy flaw as defenders race to close critical holes. see: Fresh Critical Flaws in Keycloak, Oracle, Calix, and WordPress * [TREND] Reading pieces reframe the AI hype, as Newport spotlights labs' shaky finances, Zitron games out an OpenAI collapse, and Thompson argues incentives favor offense in agentic security. see: Has AI Gone Rogue?; What Happens If OpenAI Dies?; Autonomy and Innovation * [UPDATE (new)] Locally, Amtrak adds a second daily Pittsburgh train in November, a deep partial lunar eclipse arrives Thursday night, and Emsworth's Cafe Notte debuts on 'Kitchen Nightmares.' see: Amtrak Adds Second Pittsburgh Train; Deep Partial Lunar Eclipse Thursday Night; Cafe Notte on Fox's 'Kitchen Nightmares' SECURITY ---------------------------------------------------------------- 1. FRESH CRITICAL FLAWS IN KEYCLOAK, ORACLE, CALIX, AND WORDPRESS Vulnerabilities and Exploits · [patch, zero-day, kev] Latest developments: Red Hat patched Keycloak's CVSS 9.1 CVE-2026-18963, which lets an unauthenticated attacker force a password reset to take over any account; CISA added the actively exploited Oracle HTTP Server and WebLogic proxy flaw CVE-2026-21962 to its Known Exploited Vulnerabilities catalog; researchers found hackers exploiting miniOrange SAML SSO auth-bypass bugs to forge administrator logins on WordPress; and an unpatched Calix GS7 XGS router flaw lets remote attackers expose home-network devices. The flaws span identity servers, application servers, WordPress plugins, and US broadband routers, threatening enterprises and home-internet subscribers alike. Administrators should patch Keycloak and Oracle immediately and disable the miniOrange plugin until a fix ships. - The Hacker News: https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html - CISA Advisories: https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/unpatched-calix-flaw-lets-hackers-bypass-nat-to-expose-internal-devices/ 2. IRANIAN ATTACK SHUTS UK POWER PLANT, US SANCTIONS FOLLOW Nation-State Activity · [apt, critical-infrastructure, policy] Latest developments: The US Treasury sanctioned several Iranian nationals for critical-infrastructure attacks days after reports revealed suspected Iranian hackers held a small UK power plant offline for four days in July 2026. The intrusion caused real operational disruption at a distributed British energy site and raised doubts about the resilience of the UK grid; the shutdown lined up with a coordinated hit on more than 30 US community water utilities. Operators should harden internet-exposed operational technology. - The Record: https://therecord.media/iran-cyberattacks-us-uk - SecurityWeek: https://www.securityweek.com/iran-linked-hackers-shut-down-uk-power-plant-for-four-days/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/uk-power-plant-cyberattack/ 3. WORDLISTLOADER AND SYNKLOADER SEED STEALERS Ransomware and Cybercrime · [malware, infostealer, phishing] Latest developments: Gen Digital detailed WordlistLoader, which hides its payload as ordinary text to deliver Amatera Stealer through ClearFake and ClickFix fake-CAPTCHA lures, alongside SynkLoader, a multilingual tool that revives screen hijacking to steal Windows passwords and likely sells the access to ransomware crews. Both loaders lean on social engineering and evasion to plant infostealers on enterprise Windows machines, an early stage that often precedes ransomware. Teams should block ClickFix-style CAPTCHA lures and hunt for credential theft. - The Hacker News: https://thehackernews.com/2026/08/wordlistloader-delivers-amatera-via.html - Dark Reading: https://www.darkreading.com/data-privacy/wordlistloader-disguises-malware-ordinary-text - Dark Reading: https://www.darkreading.com/threat-intelligence/tricky-synkloader-multitool-ransomware 4. REGULATORS FINE UBER AND MOVE ON CHILDREN'S PRIVACY Policy and Regulation · [policy, privacy, gdpr] Latest developments: The Dutch Data Protection Authority fined Uber 825 million euros for violating the GDPR by automatically suspending driver accounts, New Zealand moved to ban social media for children under 16 using facial age estimation, and the US Justice Department finalized TikTok's $400 million COPPA settlement. Regulators across the Netherlands, New Zealand, and the United States are pressing platforms on automated decisions and children's data, with penalties reaching nine figures. Companies handling driver, user, and minor data face stiffer accountability. - SecurityWeek: https://www.securityweek.com/uber-fined-nearly-1-billion-by-dutch-regulators-over-automated-suspensions-of-driver-accounts/ - The Record: https://therecord.media/new-zealand-to-pursue-social-media-ban-for-children - BleepingComputer: https://www.bleepingcomputer.com/news/legal/tiktok-reaches-400m-settlement-with-us-over-coppa-violations/ 5. RANSOMWARE ZEROES IN ON MID-MARKET, GUNRA SURGES Ransomware and Cybercrime · [ransomware, extortion] Latest developments: Black Kite reported that firms earning $10 million to $1 billion absorbed 73% of 13,336 disclosed ransomware and extortion incidents across North America and Europe from January 2023 through June 2026, and Fortra flagged the Gunra gang exploiting unpatched VPNs and firewalls to hit healthcare, finance, and manufacturing. Mid-sized companies now carry the bulk of the ransomware load, drawing gangs like Gunra that breach exposed edge devices to steal data and encrypt systems. Mid-market operators should patch VPNs and firewalls and rehearse recovery. - Help Net Security: https://www.helpnetsecurity.com/2026/08/24/black-kite-mid-market-ransomware-risk-report/ - Graham Cluley: https://www.fortra.com/blog/gunra-ransomware-what-you-need-know 6. OPERATION QUICSILVER HITS MYANMAR Nation-State Activity · [apt, espionage, backdoor] Latest developments: Seqrite Labs disclosed Operation QUICSILVER, a China-nexus espionage campaign using graduation-ceremony invitation lures to plant a Go backdoor called QUICAgent in Myanmar government and information-technology networks. The campaign targets Myanmar's government and IT sectors with a QUIC-based implant designed to blend command traffic into normal cloud activity. Defenders in the region should watch for the lure documents and anomalous QUIC connections. - The Hacker News: https://thehackernews.com/2026/08/operation-quicsilver-targets-myanmar.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Opens Iran Sanctions Offensive Latest developments: Treasury Secretary Scott Bessent unveiled Operation Economic Outcast on August 24, a campaign to sanction any country or company that keeps trading with Iran. Bessent billed the move as the largest financial offensive ever aimed at an adversary, targeting Tehran's enablers to choke the regime's oil revenue; crude futures fell as traders weighed the threat while Iran signaled defiance. - WSJ World News: https://www.wsj.com/world/middle-east/bessent-launches-operation-economic-outcast-to-isolate-iran-0e4db091?mod=rss_worldnews - FT World: https://www.ft.com/content/67c74e64-5c37-4a5d-ae6c-d3c002f99628?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-falls-on-possible-position-adjustments-before-potential-u-s-sanctions-on-iran-6d0d22c3?mod=rss_markets_main * Supreme Court Clears Trump Mail-Voting Order Latest developments: The U.S. Supreme Court on August 24 lifted a lower-court block, freeing President Trump to advance his executive order restricting mail-in voting before November's midterms. The justices called the lawsuit challenging the order premature, letting Trump tie mail-ballot eligibility to a new federal voter list; the court signaled further litigation lies ahead. - WSJ Politics: https://www.wsj.com/politics/elections/supreme-court-removes-hurdle-to-trump-directive-on-mail-voting-f2a1437a?mod=rss_socialpoliticsfeed - FT World: https://www.ft.com/content/b89d51c9-2206-4213-b0d3-8a826262c9d8?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Mostly Clear, low 58F. Tuesday: Mostly Sunny, high 80F. Tuesday Night: Mostly Cloudy then Areas Of Fog, low 58F. Business: * Amtrak Adds Second Pittsburgh Train Latest developments: Governor Josh Shapiro and PennDOT announced August 24 that a second daily Pennsylvanian train linking Pittsburgh, Harrisburg, and New York City starts in mid-November. The added round trip doubles Amtrak's daily service on the line, giving Western Pennsylvania riders a second option each day between Pittsburgh and New York. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/08/24/amtrak-pennsylvanian-pittsburgh-harrisburg-1/stories/202608240046 - WTAE: https://www.wtae.com/article/pittsburgh-nyc-second-amtrak-train-mid-november/73513677 * Carnegie Mellon Leads AI Arts-Education Study Latest developments: Carnegie Mellon University's College of Fine Arts will lead a two-year national study on integrating artificial intelligence into arts education, TribLive reported August 24. The project examines how AI can fit into arts instruction, placing the Pittsburgh university at the center of a national debate over technology in creative classrooms. - TribLive: https://triblive.com/news/education-classroom/carnegie-mellon-to-lead-national-study-on-ai-arts-education/ Around town: * East Liberty Reopens Historic Zone 5 Station Latest developments: Pittsburgh firefighters and police returned August 24 to their renovated station on North Euclid Avenue in East Liberty, first built in 1929. The sandstone Bureau of Fire and police station reopened after renovations that Chip Gaul, an assistant director in the city's Department of Public Works, said were needed to meet the demands of sworn officers and firefighters. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-police-fire-zone-5-station-east-liberty/ * West Mifflin Busing Falters at Year's Start Latest developments: The West Mifflin Area School District acknowledged August 24 that its bus service fell short as the school year opened, with parents reporting long delays. Families said buses ran more than an hour late, including a wheelchair-accessible route for a kindergartener with special needs, as the district conceded its transportation service failed to meet expectations. - KDKA: https://www.cbsnews.com/pittsburgh/news/west-mifflin-area-school-district-busing-problems/ - WTAE: https://www.wtae.com/article/west-mifflin-bus-delay-concerns-student-special-needs/73515141 * Deep Partial Lunar Eclipse Thursday Night Latest developments: The National Weather Service says Western Pennsylvania will see a deep partial lunar eclipse Thursday night, August 27, with Earth's shadow covering about 93% of the moon. Skywatchers across the region can catch the eclipse Thursday night, when roughly 93% of the moon slips into Earth's shadow. - WTAE: https://www.wtae.com/article/western-pennsylvania-partial-lunar-eclipse-thursday-night/73513250 Events: * Cafe Notte on Fox's 'Kitchen Nightmares' Latest developments: Emsworth restaurant Cafe Notte makes its television debut this week on Fox's 'Kitchen Nightmares,' the Post-Gazette reported August 24. Cafe Notte, the Emsworth eatery, appears on Fox's 'Kitchen Nightmares' this week, putting a Pittsburgh-area restaurant in front of a national audience. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/dining/2026/08/24/cafe-notte-emsworth-kichen-nightmares/stories/202608240033 SPORTS ---------------------------------------------------------------- Around the Teams: * Heyward Podcast Breaks Down Receiver Room Latest developments: Cam Heyward's 'Not Just Football' podcast released its third training-camp episode August 24, with receivers Roman Wilson, Germie Bernard, and Michael Pittman Jr. dissecting the position group. Wilson, Bernard, and Pittman described life in the Steelers' receiver room on the episode, and Bernard talked about how much he is learning from quarterback Aaron Rodgers. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=OUo1oDhbUqs - Not Just Football with Cam Heyward: https://www.youtube.com/shorts/DSX7zFkj3KA * Pirates' Flores Aims to Justify Bednar Trade Latest developments: The Post-Gazette detailed August 24 catcher Rafael Flores Jr.'s push to prove the David Bednar trade was worth it as he eyes a postseason role. Flores, whom the Pirates acquired in the David Bednar deal, told the Post-Gazette he wants to show the trade paid off, framing his development behind the plate as the proof. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/24/pirates-rafael-flores-david-bednar-catching-postseason/stories/202608240006 READING ---------------------------------------------------------------- * Cal Newport -- Has AI Gone Rogue? Newport argues the real AI story of the summer is the shaky financial position of the labs racing toward record IPOs, reframing breathless talk that the models have 'gone rogue.' https://calnewport.com/has-ai-gone-rogue/ * Stratechery -- Autonomy and Innovation Thompson argues incentives favor offense in agentic cybersecurity, the same dynamic he expects to constrain incumbents and fuel startups over the long run. https://stratechery.com/2026/autonomy-and-innovation/ * Ed Zitron -- What Happens If OpenAI Dies? Zitron games out the fallout of an OpenAI collapse, tracing how the company's failure would ripple across the AI industry and its investors. https://www.wheresyoured.at/what-happens-if-openai-dies/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,692.07 ▼ -0.9% Dow 53,260.49 ▼ -1.0% Nasdaq 26,302.67 ▼ -1.2% WTI crude 86.03 ▲ +4.3% EUR/USD 1.1641 ▲ +0.8% GBP/USD 1.3597 ▲ +0.6% USD/JPY 158.99 ▼ -0.2% ================================================================ Generated 2026-08-24 19:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================