daily plain-text briefing: security, markets, business, and pittsburgh
Attackers overran more than 270 Zimbra mail servers through an unpatched code-injection flaw as CISA handed federal agencies a three-day deadline to fix it.
Latest developments: The Shadowserver Foundation counted at least 274 internet-facing Zimbra Collaboration Suite instances compromised through the code-injection flaw CVE-2026-73570, and CISA gave federal agencies three days to patch a bug that grants full takeover of a user's communications.
CVE-2026-73570 is a code-injection vulnerability that Synacor patched in Zimbra Collaboration Suite, a self-hosted email and collaboration platform. Administrators running exposed Zimbra servers should apply the fix immediately, since unknown attackers are actively seizing unpatched instances.
Sources: BleepingComputer · Help Net Security · Dark Reading · ↑ top
Latest developments: Palo Alto's Unit 42 charted AI-enabled malware maturing from brand impersonation toward agentic execution, Cato Networks caught a sponsored search ad pushing a fake OpenAI Codex download that tricks macOS users into pasting a malicious Terminal command, and researchers found 24 npm packages abusing unpkg mirrors to host fake Cloudflare CAPTCHA pages that redirect to ClickFix lures.
ClickFix persuades victims to run the infection step themselves by pasting a command, and attackers increasingly wrap it in trusted AI brands and developer infrastructure to slip past detection. Users should download AI tools only from official vendor sites and treat copy-paste terminal instructions as hostile.
Sources: Unit 42 (Palo Alto) · Help Net Security · The Hacker News · ↑ top
Latest developments: ReliaQuest confirmed that one of its own employees fell for a social engineering attack after hackers impersonated a member of the security team, handing the extortion group ShinyHunters a password and a brief window into the company's identity system, though ReliaQuest says the attackers stole no data.
ShinyHunters, an extortion crew that posts stolen data on a leak site, targeted ReliaQuest days after the firm's threat researchers publicly discussed the group on X. The incident shows social engineering piercing even security vendors, and it underscores phishing-resistant authentication as the defense.
Sources: Help Net Security · SecurityWeek · BleepingComputer · ↑ top
Latest developments: Law enforcement agencies from 22 countries identified 263 suspects and arrested 58 people tied to cybercrime networks that African crime groups coordinate, while a separate case saw a Jersey City resident charged as a money mule who helped overseas scammers siphon $7.5 million from elderly New Yorkers.
The coordinated crackdown and the Jersey City arrest target the money-movement and fraud layers of the cybercrime supply chain. Both cases show investigators pressing the human intermediaries who launder proceeds and prey on the elderly.
Sources: BleepingComputer · The Record · ↑ top
Latest developments: The British government sought new powers to ban technology vendors from supplying companies in critical sectors, potentially in secret, while Taiwan charged nine people, including Nvidia and Super Micro staff, over illegally exporting AI servers built on advanced semiconductors to China.
Both actions treat the AI hardware and technology supply chain as a national-security front between the United States, China, and their partners. Companies in critical sectors and semiconductor supply chains face tightening export controls and vendor restrictions.
Sources: The Record · SecurityWeek · ↑ top
Latest developments: ANY.RUN detailed the Mirage2FA campaign, a commercial phishing-as-a-service toolkit that abused legitimate Microsoft 365 login flows to bypass two-factor authentication and hit roughly 4,500 mostly US-based companies from 2024 through 2026, potentially compromising 48% of targeted email addresses.
Mirage2FA sells adversary-in-the-middle phishing that intercepts session tokens to defeat standard 2FA on Microsoft 365 accounts. Organizations should move to phishing-resistant passkeys and hardware keys, which the kit cannot replay.
Sources: The Hacker News · ↑ top
Latest developments: China warned August 25 it would take "all necessary measures" if Washington widens its crackdown, an unknown projectile struck a tanker off Oman in the Strait of Hormuz, and oil fell more than 2.5% as Bessent's "D-Day" speech stopped short of sweeping action.
Treasury Secretary Scott Bessent billed his Operation Economic Outcast announcement as D-Day for Tehran but avoided directly penalizing China, Iran's largest oil buyer; Iran vowed retaliation while traders bet fresh U.S. sanctions carry less supply risk than military escalation.
Sources: Financial Times · Financial Times · Wall Street Journal · Wall Street Journal · ↑ top
Today: Partly Sunny, high 78F.
Tonight: Mostly Cloudy then Areas Of Fog, low 60F.
Wednesday: Areas Of Fog then Partly Sunny, high 83F.
Latest developments: PublicSource reported August 25 that high prices and thin supply are pushing southwestern Pennsylvania households into hybrid work, homeschooling, and nanny arrangements to cover care.
Across the Pittsburgh region, families struggle to find affordable childcare, with a hybrid worker, a homeschooler, a nanny, and a former daycare worker describing improvised paths through a market short on slots and high on price.
Sources: PublicSource · ↑ top
Latest developments: The Post-Gazette reviewed August 25 the new Okane, a sushi restaurant from the Opal Group offering a "secret" menu and a rooftop bar in Downtown Pittsburgh.
The Opal Group opened Okane Downtown, serving sushi and sweets alongside a swish rooftop bar, its latest wager on drawing diners to the city's center.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The U.S. Commerce Department's Office of Inspector General faulted Ohio for poor oversight of $20.9 million and recommended possibly ending its Manufacturing Extension Partnership, KDKA reported August 25.
The federally funded program provides job training and technology support to companies; the audit cited a decade of waste and misspending and could shut the program down for good.
Latest developments: The Pennsylvania Department of Health announced August 25 that two unvaccinated Lancaster County residents died from measles-associated causes, the state's first measles deaths in 35 years, with Governor Josh Shapiro and Health Secretary Debra Bogen addressing it at a news conference.
The deaths sharpen Pennsylvania's measles outbreak, coming days after UPMC confirmed Allegheny County's first case since 2019 and Pittsburgh doctors warned more local infections were likely.
Latest developments: Democrat Brandon Dukes won the special election for the vacant Pennsylvania House seat in Cranberry Township, upsetting Republican Scott Timko in a longtime GOP stronghold.
Pittsburgh City Paper and the Post-Gazette tied Dukes's upset to suburban growth around Cranberry, Butler County, and heightened Democratic enthusiasm, raising the question of whether the district turns competitive before November.
Sources: Pittsburgh City Paper · Pittsburgh Post-Gazette · ↑ top
Latest developments: Pittsburgh City Paper reported August 25 that unsanctioned white-striped crosswalks have appeared around Lawrenceville, including one behind the Aldi that the city mysteriously painted over.
The do-it-yourself crossings amount to a residents' call for safer streets in the neighborhood, testing how Pittsburgh answers unofficial traffic markings.
Sources: Pittsburgh City Paper · ↑ top
Latest developments: Pittsburgh Magazine's August 25 weekend guide spotlighted the 2026 World's Fair of Money as a thing to do.
The family-friendly 2026 World's Fair of Money runs Tuesday through Saturday, August 25 to 29, at the David L. Lawrence Convention Center Downtown, displaying more than $100 million in rare coins and currency, including a $3 million nickel and Colonial-era and early American money.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: The Post-Gazette reported August 25 that the Pittsburgh Symphony Orchestra is back on a European tour with a stop at the Salzburg Festival, drawing eager audiences.
The Pittsburgh Symphony Orchestra returned to European stages, including the Salzburg Festival, where crowds are keen to hear the ensemble.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: KDKA announced August 25 that tickets are on sale now for the one-day show.
KDKA's Pittsburgh Today Live holds its 45th annual Turkey Fund Kickoff Show Friday, September 18, 2026, at 9 a.m. at the Pittsburgh Playhouse, benefiting the Greater Pittsburgh Community Food Bank, with guests Joe Manganiello, Caitlin O'Connor, and their dog Bubbles plus a preview of CBS's "Eternally Yours."
Latest developments: Coach Mike McCarthy said contract talks with cornerback Joey Porter Jr. are at an "impasse," while cornerback Jalen Ramsey came off the physically-unable-to-perform list.
In Gerry Dulac's chat and a Tim Benz column, the Post-Gazette and TribLive framed the Steelers' defensive-back worries around Porter's stalled deal and Ramsey's return to practice.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette detailed August 24 safety DeShon Elliott's emotional return against the New York Jets after a painful end to his 2025 season.
Steelers safety DeShon Elliott took the field again versus the Jets, a comeback the Post-Gazette cast against how his previous season ended.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette's MiLB Monday reported August 24 that Pirates prospect Tony Blanco Jr. is showing huge power at High-A Greensboro.
In its weekly farm-system roundup, the Post-Gazette highlighted Pirates prospect Tony Blanco Jr.'s power display with the High-A Greensboro Grasshoppers.
Sources: Pittsburgh Post-Gazette · ↑ top
S&P 500 7,673.63 ▼ -1.1% Dow 53,251.97 ▼ -0.9% Nasdaq 26,169.72 ▼ -1.8% WTI crude 86.13 ▲ +3.9% EUR/USD 1.1641 ▲ +0.8% GBP/USD 1.3597 ▲ +0.6% USD/JPY 158.99 ▼ -0.2%