================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 31, 2026 - 7:06 AM EDT ================================================================ China's Fire Ant tunnels into Cisco routers while Russia's UAC-0099 poisons AI-assisted malware triage, as state crews turn both network gear and machine-learning defenses into attack surface. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] China-nexus Fire Ant burrowed into Cisco IOS routers and TACACS servers while Spring Ring abused Microsoft Teams and voice phishing to reach enterprise domain controllers. see: Fire Ant Hijacks Cisco Routers; Spring Ring Teams Voice Phishing * [TREND] A federal judge cleared Anthropic in its suit against the Pentagon as Meta settled and Zitron mocked the circular financing among Nvidia and OpenAI propping up AI valuations. see: Court Rebukes Pentagon Over Anthropic; Meta Settles, A Framework For Regulating Content, The Rest of Big Tech; Premium: The Hater's Guide To Circular Financing (Part One) * [TREND] Pittsburgh's housing squeeze deepens as Black neighborhoods pay higher insurance premiums, landlords filed over 100,000 eviction cases, and Allegheny County readies its first property reassessment in a decade. see: Black Neighborhoods Pay More for Home Insurance; Eviction Filings Run High Across the Region; Allegheny County Readies First Reassessment in a Decade * [UPDATE (new)] ESET disclosed GuardBreaker, a trick Russia-aligned UAC-0099 hid in a VBS script to plant a fake nuclear-weapon prompt that derails AI-assisted malware analysis in Ukraine. see: GuardBreaker Poisons AI Malware Analysis * [UPDATE (new)] Berlin's government said it will not pay after the Rhysida ransomware crew claimed it stole more than five terabytes of data, including personal information and credentials. see: Berlin Refuses Rhysida Extortion * [UPDATE (new)] PaperCut shipped a second emergency patch for the actively exploited CVE-2026-82078 and CVE-2026-81578 as fresh details emerged on how attackers chain the two flaws. see: PaperCut Vulnerabilities Draw Second Patch SECURITY ---------------------------------------------------------------- 1. FIRE ANT HIJACKS CISCO ROUTERS Nation-State Activity · [apt, espionage] Latest developments: Sygnia reported that the China-nexus actor Fire Ant expanded its long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System servers, and Linux management hosts. Fire Ant, a Chinese espionage crew, seizes the routers, authentication servers, and management hosts that route and authenticate high-value networks, stealing credentials and blinding security logs to cover its movement; network operators should audit router authentication paths and verify logging integrity. - The Hacker News: https://thehackernews.com/2026/08/china-linked-fire-ant-hijacks-cisco.html 2. GUARDBREAKER POISONS AI MALWARE ANALYSIS AI Security · [apt, ai] Latest developments: ESET disclosed GuardBreaker, a technique the Russia-aligned group UAC-0099 embedded as comments in a malicious VBS script to plant a fake nuclear-weapon prompt that trips AI safety filters and derails AI-assisted malware analysis in Ukraine. UAC-0099, an initial-access group that hands validated targets to GRU-linked Sandworm, salts its VBS malware with text designed to trigger chatbot guardrails so analysts leaning on AI get blocked mid-review; defenders should treat AI triage output as fallible against adversarial prompts. - Help Net Security: https://www.helpnetsecurity.com/2026/08/31/russian-hackers-ai-safety-filters-manipulation/ 3. PAPERCUT VULNERABILITIES DRAW SECOND PATCH Vulnerabilities and Exploits · [vulnerability, patch, zero-day] Latest developments: PaperCut released a second emergency patch and assigned the exploited flaws the identifiers CVE-2026-82078 and CVE-2026-81578, as fresh details emerged on how attackers chain them. The two actively exploited bugs let attackers run arbitrary Java code on unauthenticated PaperCut NG and MF print-management servers; administrators should apply the second patch at once. - SecurityWeek: https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/ 4. SPRING RING TEAMS VOICE PHISHING Ransomware and Cybercrime · [phishing, malware] Latest developments: Unit 42 published an inside look at Spring Ring, a campaign that abuses Microsoft Teams and voice phishing to deploy malware and drive toward enterprise domain controllers. Spring Ring operators reach employees through Microsoft Teams, talk them into running malware over the phone, and pivot toward domain controllers to seize the network; enterprises should restrict external Teams contact and drill staff against voice-phishing lures. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/spring-ring-voice-phishing-campaigns/ 5. BERLIN REFUSES RHYSIDA EXTORTION Ransomware and Cybercrime · [ransomware, breach] Latest developments: The Rhysida ransomware group claimed it exfiltrated over 5 TB of data, including personal information and credentials, from Berlin's administration, and the city government said it will not pay. Rhysida says it took more than five terabytes from Berlin's state government after the August network compromise; Berlin declines the demand and continues its recovery. - SecurityWeek: https://www.securityweek.com/berlin-wont-pay-extortion-group-claiming-data-theft/ 6. COURT REBUKES PENTAGON OVER ANTHROPIC Policy and Regulation · [policy, ai] Latest developments: A federal judge ruled the Pentagon's measures against Anthropic illegal and baseless, handing the AI company a win in the suit it filed after the government branded it a supply chain risk earlier in 2026. The Defense Department labeled Anthropic a supply chain risk this year; the court now calls that action illegal and baseless, advancing Anthropic's legal fight against the government. - SecurityWeek: https://www.securityweek.com/judge-says-pentagons-measures-against-anthropic-were-illegal-and-baseless/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Yen Breaks Past 160 After Warsh's Hawkish Turn Latest developments: The yen weakened past ¥160 to the dollar today and Japanese government-bond yields hit their highest in three decades, days after Tokyo and Washington spent a record $98.7 billion defending the currency. Federal Reserve Chair Kevin Warsh's Jackson Hole warning that inflation stays too high has driven investors to bet on U.S. tightening, pressuring Japan's bonds and currency as the Bank of Japan's ultra-loose stance leaves the yen exposed. A disorderly yen slide would ripple through global funding and carry-trade markets. - FT Markets: https://www.ft.com/content/1c4f488f-32bc-4b49-a0c8-c55d95f5422b?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/investing/u-s-stock-futures-little-changed-as-markets-weigh-warshs-hawkish-remarks-5a036994?mod=rss_markets_main * Oil Returns to $90 as U.S.-Iran Fighting Spooks Markets Latest developments: Brent crude climbed back to $90 a barrel today and the 10-year German Bund yield hit a 15-year high as markets absorbed the renewed U.S.-Iran exchange of fire over the Strait of Hormuz. A day after U.S. forces struck Iranian rocket launchers on a Hormuz island and Tehran retaliated against Jordan, traders are again pricing in risk to crude flows through the strait that carries a fifth of the world's oil. Higher energy prices feed inflation fears already stoked by the Fed. - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-renewed-fighting-in-middle-east-add7b187?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/investing/u-s-treasury-yields-fall-but-10-year-german-bund-yield-hits-15-year-high-d70c09a5?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Today: Scattered Rain Showers then Isolated Showers And Thunderstorms, high 87F. Tonight: Mostly Cloudy, low 72F. Tuesday: Mostly Sunny then Scattered Showers And Thunderstorms, high 92F. Business: * Black Neighborhoods Pay More for Home Insurance Latest developments: A Post-Gazette investigation published today found homeowners in Pittsburgh's Black neighborhoods pay higher property-insurance premiums than owners of comparable homes elsewhere in the region. The analysis uses Pittsburgh as a case study of a national pattern in which insurers charge more to insure similar houses in majority-Black neighborhoods, raising the cost of ownership in those communities. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/money/2026/08/31/pittsburgh-black-homeowners-insurance-premiums/stories/202608300050 * Eviction Filings Run High Across the Region Latest developments: PublicSource reported today that Pennsylvania landlords filed more than 100,000 eviction cases last year, including nearly 13,600 in and around Pittsburgh. The nonprofit's guide lays out how tenants can head off eviction by asking the right questions, getting accurate answers, and tapping legal-aid resources before a filing becomes a judgment. - PublicSource: https://www.publicsource.org/eviction-in-pennsylvania-what-you-need-to-know/ Around town: * Allegheny County Readies First Reassessment in a Decade Latest developments: TribLive reported today that Allegheny County is preparing to reassess the value of every property in the county for the first time in more than a decade. The countywide reassessment will reset the property values that determine tax bills, a change that could raise or lower what many Allegheny County homeowners owe. - TribLive: https://triblive.com/local/what-homeowners-need-to-know-about-allegheny-county-property-reassessments/ * Shapiro and Garrity Split on Medicaid and Fraud Latest developments: The Post-Gazette laid out today where the 2026 Pennsylvania governor candidates stand, contrasting Democratic Governor Josh Shapiro with Republican challenger Stacy Garrity, the state treasurer. The guide compares Shapiro and Garrity on Medicaid, government fraud, and other issues ahead of the November election that will decide control of the governor's office. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/08/31/pa-governor-race-shapiro-garrity/stories/202608290033 * Laurel Hill State Park Opens to Goose Hunting Latest developments: TribLive reported today that Laurel Hill State Park in Somerset County will open to Canada goose hunting this season to thin an overgrown flock. Officials say a surge of Canada geese has fouled the park with E. coli-laden droppings and produced aggressive encounters, prompting the hunting season as a control measure. - TribLive: https://triblive.com/local/regional/laurel-hill-state-park-opens-season-to-canada-goose-hunting-amid-e-coli-aggression-issues/ Events: * Alle-Kiski Inclusion Games Return to Kotecki Park Latest developments: TribLive reported today that the Alle-Kiski Inclusion Games return this week for a fifth year, adding a foam element to the festivities. The Alle-Kiski Inclusion Games, an annual event for people of all abilities, take place this week at Kotecki Park in the Alle-Kiski Valley. - TribLive: https://triblive.com/local/valley-news-dispatch/inclusion-games-to-return-for-5th-run-at-kotecki-park/ SPORTS ---------------------------------------------------------------- Around the Teams: * Watt and Fellow Edge Rushers Talk New Defense Latest developments: Cam Heyward's 'Not Just Football' released a training-camp episode today featuring outside linebackers T.J. Watt, Alex Highsmith, Nick Herbig, and Jack Sawyer. The Steelers' edge-rush group broke down their offseason contracts, adjusting to a new defensive system, and joked through a round of edge-room superlatives on Heyward's podcast. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=ANB7ezXcv3w * Noah Hiles Calls to Fire Cherington Latest developments: Post-Gazette writer Noah Hiles argued the Pirates should clean house, starting by firing general manager Ben Cherington and team president Travis Williams. With the Pirates' season sunk, Hiles contends the front office under Cherington and Williams has failed to build a winner around ace Paul Skenes and deserves to be replaced. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/30/fire-ben-cherington-travis-williams/stories/202608300073 Team USA: * Beto Exit Clears Everton's Path to Balogun Latest developments: ESPN reported today that Everton are set to sell striker Beto to Fiorentina for about £15 million, freeing room to chase U.S. men's forward Folarin Balogun before the Tuesday, September 1, deadline. Everton have eyed Balogun, the USMNT striker, and Beto's departure to the Italian club opens space in the squad and budget to complete a move as the summer transfer window closes. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49781432/everton-beto-set-fiorentina-amid-folarin-balogun-interest-sources * Tottenham Weigh Late Move for Pulisic Latest developments: ESPN reported today that Tottenham Hotspur are interested in AC Milan winger Christian Pulisic with Europe's summer window closing September 1 at 6 p.m. ET. Pulisic, the USMNT captain, could be the subject of a deadline-day bid from Spurs, though any deal must close before the Premier League window shuts Tuesday evening. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49780513/transfer-rumors-news-spurs-make-late-move-usmnt-star-christian-pulisic * Trinity Rodman Says She Has Injuries Behind Her Latest developments: U.S. women's forward Trinity Rodman told ESPN she has come back as a 'new and improved' player after the injuries that dogged her last season. Rodman, a Washington Spirit and USWNT attacker, said she tweaked her playing style to stay available after fitness problems limited her the previous year. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49780473/new-improved-trinity-rodman-tweaks-style-ensure-availability-washington-spirit READING ---------------------------------------------------------------- * Stratechery -- Meta Settles, A Framework For Regulating Content, The Rest of Big Tech Ben Thompson argues Meta's settlement makes sense for everyone involved yet shows why every attempt to regulate technology and online content feels fundamentally off. https://stratechery.com/2026/meta-settles-a-framework-for-regulating-content-the-rest-of-big-tech/ * Ed Zitron -- Premium: The Hater's Guide To Circular Financing (Part One) Zitron skewers the circular financing among Nvidia, OpenAI, and other AI players, arguing the money flowing between these firms props up inflated valuations rather than real demand. https://www.wheresyoured.at/premium-the-haters-guide-to-circular-financing-part-one/ * Cal Newport -- Has AI Gone Rogue? Newport contends the real AI story is the shaky financial footing of the labs chasing record IPOs, more than the sensational headlines about models behaving unpredictably. https://calnewport.com/has-ai-gone-rogue/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,689.72 = -0.0% Dow 53,517.57 ▲ +0.5% Nasdaq 26,241.09 ▼ -0.2% WTI crude 83.31 ▼ -3.2% EUR/USD 1.1667 ▲ +0.4% GBP/USD 1.3627 ▲ +0.4% USD/JPY 159.17 ▲ +0.1% ================================================================ Generated 2026-08-31 07:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================