daily plain-text briefing: security, markets, business, and pittsburgh
CISA flagged six actively exploited vulnerabilities led by a Citrix NetScaler flaw as Meta agreed to an $18 billion settlement over teen social media harms.
Latest developments: CISA added six actively exploited flaws to its Known Exploited Vulnerabilities catalog on August 26, 2026, led by Citrix NetScaler ADC and Gateway memory-overflow bug CVE-2026-8452, and gave federal agencies until August 29 to patch it, as attackers separately began exploiting a critical Gitea code-injection flaw and a Microsoft SharePoint remote-code-execution chain through public proof-of-concept code.
The KEV additions also cover Microsoft SQL Server remote-code-execution flaw CVE-2019-1068 and Linux kernel privilege-escalation bugs; Citrix disclosed CVE-2026-8452 on June 30, 2026. Administrators running NetScaler, Gitea, or unpatched SharePoint should apply fixes immediately.
Sources: Help Net Security · BleepingComputer · The Hacker News · BleepingComputer · ↑ top
Latest developments: Arctic Wolf tied a previously undocumented Go-based malware framework, GoCaracal, with medium confidence to the Dark Caracal espionage group, which deployed it during a June 2026 intrusion at a Venezuelan communications organization.
GoCaracal hands operators remote shell access, payload execution, browser-data theft, keylogging, and remote desktop control, and pulls a replacement command-and-control address from an Ethereum smart contract to survive takedowns.
Sources: The Hacker News · Dark Reading · ↑ top
Latest developments: OpenAI disrupted a Cambodia-based network that ran romance, cryptocurrency, and spot-gold investment scams through ChatGPT, while Palo Alto Networks Unit 42 reported that of 405 AI-linked malware samples it analyzed, only 12 reached production endpoints.
The findings show generative AI speeds attacker research, scripting, and persona-building while rarely lifting the success rate of the resulting malware. Defenders should weigh AI's operational reality against the marketing.
Sources: Schneier on Security · SecurityWeek · ↑ top
Latest developments: The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed on August 27, 2026 that attackers compromised one of its systems, validating breach claims the Qilin ransomware gang posted days earlier.
The ATF, which enforces US firearms and explosives law, called the intrusion a major incident. The agency has not detailed what data Qilin accessed.
Sources: BleepingComputer · ↑ top
Latest developments: The pro-Russian hacker group Server Killers claimed responsibility for a major cyberattack that disrupted Norway's public digital services on August 27, 2026.
The incident hit government-run online services Norwegian citizens rely on. Pro-Russian crews have steadily targeted European public infrastructure over Ukraine-related grievances.
Sources: SecurityWeek · ↑ top
Latest developments: Meta agreed on August 26, 2026 to a settlement worth up to about $18 billion with a bipartisan coalition of 52 state and territory attorneys general, resolving claims that it engineered Facebook and Instagram to hook children and teenagers on compulsive use.
The deal, the largest of its kind, requires new privacy and safety protections across Meta's products for minors. Parents, regulators, and educators gain court-backed leverage over how the platforms treat young users.
Sources: The Record · BleepingComputer · ↑ top
Latest developments: France has overtaken Italy as European bond investors' biggest worry, with Paris's borrowing costs holding above Rome's through the summer ahead of a contested budget and 2027 elections.
Long-dated government debt in France, Italy, the United Kingdom, and Japan has drawn the heaviest selling pressure of the summer as investors reprice heavy debt loads, a strain that runs deeper abroad than in U.S. Treasurys and now tests finance ministries across the continent.
Sources: WSJ Markets · FT World · ↑ top
Today: Scattered Showers And Thunderstorms, high 83F.
Tonight: Isolated Showers And Thunderstorms then Areas Of Fog, low 63F.
Friday: Areas Of Fog then Mostly Sunny, high 83F.
Latest developments: In an August 27 Post-Gazette column, Brandon McGinley argued that the relative economic fortunes of Pittsburgh and its Ohio peers—Cleveland, Cincinnati, and Columbus—may now be reversing.
McGinley weighed job growth and economic development across the region, contending that Pittsburgh could be gaining ground on the three larger Ohio metros of Cleveland, Cincinnati, and Columbus.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Westmoreland County Housing Authority began construction August 27 on a low-income senior housing complex in Rostraver Township, targeting completion by next summer.
The Westmoreland County Housing Authority's new low-income senior housing project in Rostraver Township, its next major construction undertaking, expects to open as soon as summer 2027 and adds another affordable-housing option for older residents.
Latest developments: Pennsylvania health officials said August 26 that a newborn from Lancaster County was one of the state's two measles-related deaths, as U.S. Health Secretary Robert F. Kennedy Jr. questioned whether those deaths were 'fabricated.'
The two unvaccinated Lancaster County residents whose deaths the state tied to measles—its first such deaths since 1991—included a newborn baby, Pennsylvania health officials disclosed, drawing a public challenge from Health and Human Services Secretary Robert F. Kennedy Jr., who questioned whether the deaths were real.
Latest developments: PublicSource reported August 27 that Troy Hill's Cowley recreation center remains mothballed five years after a $6 million pledge, with the federal ARPA relief money meant to fund it now dwindled.
Pittsburgh's Troy Hill neighborhood is still waiting for a promised recreation center at the shuttered Cowley building, five years after officials committed $6 million; the federal American Rescue Plan Act money intended to pay for it has run down, leaving the project unbuilt.
Sources: PublicSource · ↑ top
Latest developments: TribLive reported August 27 that Western Pennsylvania Head Start providers and parents are sounding the alarm over the Trump administration's proposed regulatory overhaul of the federal early-childhood program.
Pittsburgh parent Lauren Stuparitz, who credits Head Start with transforming her neurodivergent son's development, joined Western Pennsylvania providers warning that the Trump administration's sweeping proposed rule changes threaten the future of the federal preschool program.
Latest developments: The Post-Gazette's August 27 weekend guide spotlights concerts by Bruno Mars and Clarks frontman Scott Blasey and the PedalPGH cycling ride among things to do around Pittsburgh this weekend.
The Post-Gazette's roundup of the weekend of August 28-30 features a Bruno Mars concert, a show by Clarks frontman Scott Blasey, the PedalPGH community bike ride, and miniature golf among Pittsburgh-area outings.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: On episode 136 of 'Footbahlin with Ben Roethlisberger,' released August 25, Ben Roethlisberger worked through the Steelers' second preseason game against the New York Jets and what actually matters afterward.
Ben Roethlisberger used his 'Footbahlin' podcast to caution that a bad preseason box score, such as the Steelers' showing against the New York Jets, says little about the regular season, sorting the good from the bad while plugging Mel Blount's youth-home golf tournament.
Sources: Footbahlin with Ben Roethlisberger · ↑ top
Latest developments: Cam Heyward's 'Not Just Football' released a training-camp episode August 26 with long snapper Christian Kuntz guest-hosting alongside kicker Chris Boswell and Heyward.
In the latest 'Not Just Football' training-camp episode, Steelers long snapper Christian Kuntz took over hosting duties and drew in kicker Chris Boswell and host Cam Heyward for what the show billed its wildest installment yet.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: Olympic champion Alysa Liu announced August 25 that she will skip the 2026-27 figure skating season to 'recalibrate,' planning to return in 2027-28.
American figure skater Alysa Liu, an Olympic gold medalist, said she will take the coming 2026-27 season off to recalibrate and intends to compete again in the 2027-28 season.
Sources: ESPN Olympics · ↑ top
S&P 500 7,664.27 ▼ -1.1% Dow 53,298.93 ▼ -0.5% Nasdaq 26,101.86 ▼ -1.7% WTI crude 84.90 ▲ +1.3% EUR/USD 1.1677 ▲ +1.0% GBP/USD 1.3636 ▲ +0.8% USD/JPY 158.89 ▼ -0.3%