daily plain-text briefing: security, markets, business, and pittsburgh
Anthropic warns infostealer malware is draining hijacked Claude sessions as ClickFix crews and crypto-stealing browser extensions keep working the browser.
Latest developments: Microsoft Threat Intelligence published a full analysis of TerminalFix with detections and hunting guidance, and The Hacker News detailed how the campaign steers victims into Windows Terminal or PowerShell before chaining fake Cloudflare CAPTCHA prompts, DLL sideloading, and a reverse tunnel.
TerminalFix, a ClickFix variant, tricks users into pasting a malicious command into Windows Terminal or PowerShell, then sideloads a DLL and opens a reverse tunnel for hands-on intrusion; defenders should hunt for the reverse-tunnel indicators Microsoft published.
Sources: Microsoft Security Blog · The Hacker News · ↑ top
Latest developments: Anthropic began warning some Claude users that infostealer malware on their PCs lifted active Claude login sessions, letting attackers seize the accounts and burn through their usage.
Infostealers now grab authenticated Claude session tokens straight off infected Windows machines, and attackers ride those tokens into the accounts to consume paid usage; affected users should clear the stealer infection, sign out everywhere, and rotate credentials.
Sources: BleepingComputer · ↑ top
Latest developments: BleepingComputer detailed extensions for Google Chrome and Microsoft Edge that deliver a modular malware framework, pulling in components to steal cryptocurrency, sensitive data, and browsing history while injecting ClickFix lures.
Malicious add-ons that clear the Chrome Web Store and Edge listings ship a framework that loads modules on demand to drain crypto wallets, harvest browser data, and push ClickFix social-engineering prompts; users should audit installed extensions and remove any they do not recognize.
Sources: BleepingComputer · ↑ top
Latest developments: FulcrumSec claimed the Manchester Airports Group hack and said it took 86 GB of data, and BleepingComputer verified one traveler's record while samples showed customer, booking, and travel details beyond what MAG first disclosed.
Manchester Airports Group, operator of Manchester, Stansted, and East Midlands airports, earlier said hackers stole data on 8.7 million customers; the extortion crew FulcrumSec now claims responsibility for an 86 GB haul that reaches deeper into booking and travel records than the airport group acknowledged, so affected travelers should watch for targeted phishing.
Sources: BleepingComputer · ↑ top
Latest developments: Brave shipped version 1.94 with Email Aliases, a feature that mints disposable email addresses when users sign up for new services.
Brave's 1.94 release lets users generate throwaway email addresses at signup so trackers and data brokers struggle to stitch activity across sites to a single inbox; privacy-minded users can turn it on to compartmentalize accounts.
Sources: BleepingComputer · ↑ top
Latest developments: U.S. forces struck Iranian rocket launchers on an island in the Strait of Hormuz on August 30, the first American military action in a month, then defended against missiles fired at Jordan, and oil prices climbed.
American forces hit Iranian rocket launchers along the Strait of Hormuz on August 30, breaking a month-long lull in an intermittent war now past six months; U.S. troops then intercepted missiles aimed at Jordan, which hosts nearly 4,000 American service members, as crude prices rose.
Sources: WSJ World News · FT Home · ↑ top
Tonight: Slight Chance Rain Showers then Mostly Cloudy, low 69F.
Monday: Slight Chance Rain Showers then Partly Sunny, high 89F.
Monday Night: Mostly Cloudy, low 72F.
Latest developments: Pittsburgh Public Schools announced August 30 it will shift 35 buildings to synchronous remote learning September 1 through 3 as the region heads into the 90s.
Pittsburgh Public Schools will move 35 buildings to remote learning September 1 through 3 under its extreme-heat protocol, targeting the schools least able to handle forecast temperatures in the 90s.
Sources: WTAE · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Ligonier Valley School District will shut every building Monday, August 31, for air-quality testing, widening its mold response beyond R.K. Mellon Elementary.
The Ligonier Valley School District in Westmoreland County will close all its schools Monday, August 31, for air-quality testing while it continues mold remediation at R.K. Mellon Elementary School.
Sources: WPXI · Pittsburgh Post-Gazette · ↑ top
Latest developments: Twin Rivers Elementary in McKeesport will hold classes remotely Monday, August 31, while crews make water-service repairs inside the building.
Twin Rivers Elementary School in McKeesport will switch to online learning Monday, August 31, after officials said water-service repairs are needed within the building.
Latest developments: In Sunday's cuts to 53 players, the Steelers kept all four quarterbacks and placed safety DeShon Elliott on injured reserve.
The Steelers set their 53-man roster August 30, holding all four quarterbacks and moving safety DeShon Elliott to injured reserve, the Post-Gazette reported.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Sources told the Post-Gazette the Steelers held onto Eli Heidenreich, Gabriel Rubio, and Kevin Jobity Jr. on the final 53-man roster.
Roster longshots Eli Heidenreich, Gabriel Rubio, and Kevin Jobity Jr. survived the Steelers' cutdown day and made the 53-man roster, sources told the Post-Gazette.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Everton are weighing a move for U.S. men's national team forward Folarin Balogun ahead of the Tuesday, September 1, transfer deadline, contingent on Iliman Ndiaye leaving.
Everton are considering signing USMNT forward Folarin Balogun before the September 1 transfer deadline should Iliman Ndiaye depart, sources told ESPN.
Sources: ESPN Soccer · ↑ top
S&P 500 7,689.72 = -0.0% Dow 53,517.57 ▲ +0.5% Nasdaq 26,241.09 ▼ -0.2% WTI crude 83.31 ▼ -3.2% EUR/USD 1.1667 ▲ +0.4% GBP/USD 1.3627 ▲ +0.4% USD/JPY 159.17 ▲ +0.1%