daily plain-text briefing: security, markets, business, and pittsburgh
McKesson confirms a third-party breach as ShinyHunters counts down its extortion clock, while attackers increasingly turn AI coding tools and commodity infostealers against their targets.
Latest developments: McKesson told the SEC it detected the intrusion on August 25, 2026, and now warns of service degradation as ShinyHunters' extortion deadline nears.
McKesson, the largest U.S. pharmaceutical distributor, supplies drugs and medical products to pharmacies, hospitals, and clinics; attackers reached data through an unnamed third-party application, and ShinyHunters claims it took 284 million records. Customers and partners should brace for downstream disruption and watch for phishing that leans on the stolen data.
Sources: SecurityWeek · The Record · Help Net Security · ↑ top
Latest developments: Anthropic began logging affected users out and stripping stored payment data, and named the culprits—Vidar, Lumma, StealC, RedLine, and Acreed on Windows plus Atomic Stealer on a handful of Macs.
Infostealer malware on customers' PCs lifted active Claude login sessions, letting attackers seize accounts and drain usage. The malware rides in on unofficial downloads; affected users should scan their machines, reset credentials, and re-authenticate.
Sources: SecurityWeek · Help Net Security · BleepingComputer · ↑ top
Latest developments: ServiceNow patched three critical code-injection flaws that let attackers run arbitrary code and tamper with data, and researchers flagged active targeting of a Ruby on Rails arbitrary-file-read bug dubbed KindaRails2Shell that leaks secrets and enables remote code execution.
Two heavily deployed enterprise platforms carry fresh critical bugs. ServiceNow administrators should apply the vendor fixes at once, and Rails operators should patch KindaRails2Shell before attackers pivot from reading files to executing code.
Sources: SecurityWeek · SecurityWeek · ↑ top
Latest developments: Kaspersky detailed the Silver Fox group distributing the ValleyRAT backdoor disguised as QN Wallpaper, a genuine signed Chinese desktop-wallpaper tool, and running it under a trusted process to slip past the antivirus exclusions users grant such software.
Silver Fox, a China-linked actor, targets Chinese-speaking victims by abusing the whitelist trust users extend to signed adware to plant a remote-access backdoor. Users should shun unofficial downloads and scrutinize signed adware before excluding it from scans.
Sources: The Hacker News · Securelist (Kaspersky) · ↑ top
Latest developments: The U.S. extradited two Nigerian men on Thursday to face sextortion charges tied to the deaths of two teenage victims in Mississippi and North Carolina, and investigators Erin West and Paul Raffile traveled to Nigeria and tracked a separate scammer to his doorstep.
The cases show rising cross-border accountability for West African financial-sextortion crews that target minors and extort victims online. Parents and platforms should treat sudden intimate-image demands as a hallmark of these schemes.
Sources: BleepingComputer · 404 Media · ↑ top
Latest developments: CloudSEK and Gambit Security found the Russian-speaking Aurora ransomware crew driving the Cursor AI coding assistant to break into at least 10 target networks, mapping the activity from exposed infrastructure the group left online.
Aurora, also written Aur0ra, marks a move toward attackers wielding AI coding assistants operationally rather than merely as bait. Defenders should watch developer tooling for anomalous automated network activity.
Sources: The Hacker News · ↑ top
Today: Scattered Rain Showers then Isolated Showers And Thunderstorms, high 87F.
Tonight: Mostly Cloudy, low 72F.
Tuesday: Mostly Sunny then Scattered Showers And Thunderstorms, high 92F.
Latest developments: WPXI reported today that Weiss Furniture will shut permanently after a final liquidation sale.
Weiss Furniture, the family-owned retailer that has sold furniture in Latrobe for 107 years, is closing for good, ending more than a century of business in the Westmoreland County town.
Latest developments: The Post-Gazette reported today that fear of the cyclosporiasis parasite has pushed Pittsburgh-area shoppers toward regional lettuce growers.
Worry over cyclosporiasis, an intestinal parasite tied to imported produce, has boosted sales for Pittsburgh-region lettuce growers as customers seek local supply, though growers question whether the bump will hold.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: KDKA's First Alert team said today it expects to issue First Alert Days for Tuesday through Thursday, September 1 to 3, as heat builds and wind storm chances rise across the Pittsburgh area.
After passing morning showers, the Pittsburgh region faces warming temperatures and a midweek threat of damaging wind storms, with KDKA meteorologists flagging possible First Alert Days from Tuesday through Friday.
Latest developments: TribLive marked today, August 31, as the 25th anniversary of the premiere of the final original episode of 'Mister Rogers' Neighborhood.'
The last original episode of 'Mister Rogers' Neighborhood,' filmed at WQED's Oakland studios, first aired August 31, 2001, a quarter-century ago today.
Latest developments: In today's Off The Bat, the Post-Gazette asked whether pitching coach Bill Murphy caused the rotation's regression, and starters said no.
The Pittsburgh Pirates' starting rotation has slipped this season, and the Post-Gazette's Off The Bat weighed whether pitching coach Bill Murphy deserves blame; pitchers Paul Skenes, Bubba Chandler, and Braxton Ashcraft defended him.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN reported that U.S. men's national team defender Chris Richards has refocused on Crystal Palace after the Americans' early exit from the World Cup they co-hosted.
Chris Richards, the U.S. men's national team center back who plays for Crystal Palace, told ESPN he had little time to grieve the United States' abrupt World Cup exit before returning to Premier League duty.
Sources: ESPN Soccer · ↑ top
S&P 500 7,689.72 = -0.0% Dow 53,517.57 ▲ +0.5% Nasdaq 26,241.09 ▼ -0.2% WTI crude 83.31 ▼ -3.2% EUR/USD 1.1667 ▲ +0.4% GBP/USD 1.3627 ▲ +0.4% USD/JPY 159.17 ▲ +0.1%