daily plain-text briefing: security, markets, business, and pittsburgh
McKesson confirmed a breach potentially exposing 284 million patient records as criminals bent AI tools into weapons—hijacking Claude sessions and driving the Cursor coding assistant to break into networks.
Latest developments: McKesson confirmed the intrusion in an SEC filing, dated its detection to August 25, 2026, and warned customers of service degradation as the ShinyHunters extortion deadline approaches.
McKesson, the largest US distributor of pharmaceuticals and medical supplies, said attackers reached data through an unnamed third-party application; the ShinyHunters extortion group claims 284 million records and has set a payment deadline.
Sources: SecurityWeek · The Record · Help Net Security · ↑ top
Latest developments: Anthropic named the infostealers involved—Vidar, Lumma, StealC, RedLine, and Acreed on Windows, plus Atomic Stealer on a few Macs—and began forcing logouts and stripping stored payment data to block unauthorized Claude usage.
A threat actor used commodity infostealers, which arrive with pirated software and cracks, to lift active Claude login sessions and seize accounts belonging to an unknown number of users.
Sources: Dark Reading · SecurityWeek · Help Net Security · ↑ top
Latest developments: The KindaRails2Shell arbitrary-file-read flaw in Ruby on Rails drew active exploitation attempts, Kaspersky patched the HardBreacher exploit that the Nightmare Eclipse toolkit fires at its Endpoint Security product, and Wired detailed nine vulnerabilities in ATM encryption and authentication software.
The flaws span web frameworks, endpoint security products, and cash machines, letting attackers read secrets and execute code remotely; Rails and Kaspersky have shipped patches while the ATM research exposes broader software supply-chain weakness.
Sources: SecurityWeek · SecurityWeek · Wired Security · ↑ top
Latest developments: Five Venezuelan nationals pleaded guilty in a Kansas federal ATM jackpotting case, and two Nigerian men extradited to the US faced charges over sextortion schemes tied to the deaths of two minors in Mississippi and North Carolina.
US prosecutors pressed financially and sexually motivated cybercrime cases; separately, researchers Erin West and Paul Raffile traveled to Nigeria and tracked a scammer to his doorstep.
Sources: The Record · BleepingComputer · 404 Media · ↑ top
Latest developments: An attacker manipulated the price of the Tonic token over the weekend to borrow $74 million from the Tectonic lending platform on the Cronos blockchain, making off with at least $6 million before Cronos halted and then restarted trading.
Tectonic is a decentralized lending market on the Cronos network; the price-manipulation exploit drained funds and forced the chain to pause activity before resuming.
Sources: BleepingComputer · The Record · ↑ top
Latest developments: CloudSEK and Gambit Security found operators of Aurora ransomware, a Russian-speaking crew, driving the Cursor AI coding assistant to break into at least 10 target networks.
Aurora, also written Aur0ra, is an emerging ransomware operation; the two analyses grew from exposed attacker infrastructure and mark another case of criminals bending a mainstream AI coding tool to intrusion work.
Sources: The Hacker News · ↑ top
Tonight: Mostly Cloudy, low 73F.
Tuesday: Slight Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 92F.
Tuesday Night: Chance Showers And Thunderstorms, low 73F.
Latest developments: Pittsburgh nurses rallied Monday, August 31, ahead of contract negotiations with Allegheny General Hospital, arguing the hospital can afford to hire more nursing staff.
Registered nurses at Allegheny General Hospital, the flagship of Allegheny Health Network on Pittsburgh's North Side, opened contract talks demanding staffing investments as patient counts and care needs climb.
Latest developments: The Long John Silver's at Moraine Pointe Plaza in Butler County will reopen in early September.
The seafood chain's Moraine Pointe Plaza location in Butler County plans to serve customers again in early September after a closure.
Latest developments: The Lancaster County coroner tied the death of another child to the measles outbreak on August 31 as cases keep rising across Pennsylvania.
Pennsylvania's measles outbreak, centered in Lancaster County, has now killed additional residents this year, the state's first measles deaths since 1991, driven by low vaccination in the affected communities.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: A city plan to build a Pittsburgh public works facility on a section of Schenley Park off Prospect Drive drew pushback from park users on August 31.
Pittsburgh wants to place a public works facility in Schenley Park near Prospect Drive, and neighbors who use the greenspace to teach children to bike and walk are objecting.
Latest developments: Allegheny County issued a code red heat advisory for Tuesday through Thursday, September 1 to 3, as Pittsburgh extended rec-center hours for students learning remotely during the heat.
Forecast highs in the 90s prompted Allegheny County's code red heat advisory and warnings of severe thunderstorms, while the City of Pittsburgh opened several community rec centers longer to accommodate the 35 Pittsburgh Public Schools buildings shifting to remote learning.
Sources: TribLive · WPXI · ↑ top
Latest developments: General manager Omar Khan explained to reporters August 31 why every one of the Steelers' 10 rookie draft picks made the initial 53-man roster.
The Pittsburgh Steelers kept their entire 2026 draft class through cutdown, a rarity Khan attributed to the rookies' readiness and how the front office built its board.
Sources: Post-Gazette Steelers · Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: The Post-Gazette's MiLB Monday laid out the Pirates' top candidates for September promotions on August 31, including Wilber Dotel and Antwone Kelly.
With active rosters expanding, the Pittsburgh Pirates are evaluating minor-league arms such as Wilber Dotel and Antwone Kelly for September call-ups from their farm system.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: In the Post-Gazette's Off The Bat column August 31, Pirates starters rejected the notion that pitching coach Bill Murphy caused the rotation's regression.
Pittsburgh Pirates starters including Paul Skenes, Bubba Chandler, and Braxton Ashcraft told the Post-Gazette they place no blame on pitching coach Bill Murphy for the rotation's second-half decline.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: USA Basketball said August 31 that A'ja Wilson and Kelsey Plum will miss the FIBA Women's World Cup for health reasons, with Kiki Iriafen and Sonia Citron replacing them.
The Phoenix Mercury said Kelsey Plum will miss the rest of the 2026 WNBA season; she and A'ja Wilson both drop off the United States roster for the FIBA Women's World Cup, where Kiki Iriafen and Sonia Citron step in.
Sources: ESPN Olympics · ↑ top
Latest developments: Sources told ESPN August 31 that Everton's deal for USMNT forward Folarin Balogun could reach $54 million after a £35 million offer for the AS Monaco striker.
Everton are closing in on Folarin Balogun, the United States men's national team forward at AS Monaco, in a move that with add-ons could hit $54 million ahead of the September 1 window close.
Sources: ESPN Soccer · ↑ top
Latest developments: A source told ESPN August 31 that St. Louis City SC is set to acquire USMNT forward Damion Downs on loan from Southampton.
United States forward Damion Downs will join MLS side St. Louis City SC on loan from English Championship club Southampton.
Sources: ESPN Soccer · ↑ top
S&P 500 7,689.72 = -0.0% Dow 53,517.57 ▲ +0.5% Nasdaq 26,241.09 ▼ -0.2% WTI crude 83.31 ▼ -3.2% EUR/USD 1.1667 ▲ +0.4% GBP/USD 1.3627 ▲ +0.4% USD/JPY 159.17 ▲ +0.1%