================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 31, 2026 - 7:35 PM EDT ================================================================ McKesson confirmed a breach potentially exposing 284 million patient records as criminals bent AI tools into weapons—hijacking Claude sessions and driving the Cursor coding assistant to break into networks. CONTENTS: Emerging Trends and Key Updates | Security | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Criminals turned AI into both target and weapon, lifting active Claude sessions with commodity infostealers while Aurora ransomware operators drove the Cursor coding assistant into at least ten victim networks. see: Infostealers Hijack Claude Account Sessions; Aurora Ransomware Wields Cursor AI Assistant * [UPDATE (new)] McKesson confirmed a breach of 284 million records in an SEC filing as the ShinyHunters extortion deadline approached and customers braced for service degradation. see: McKesson Confirms Breach of 284 Million Records * [TREND] Financially motivated crime spanned code and cash, as an attacker drained $74 million from Tectonic on Cronos while five Venezuelan nationals pleaded guilty in a Kansas ATM jackpotting case. see: Attackers Drain $74 Million From Tectonic on Cronos; Prosecutors Move on ATM Jackpotting and Sextortion Crews * [UPDATE (new)] Fresh critical flaws drew fire as the KindaRails2Shell file-read bug in Ruby on Rails saw active exploitation and Kaspersky patched the HardBreacher exploit hitting its Endpoint Security. see: Fresh Critical Flaws in Rails, Kaspersky, and ATM Software * [TREND] Public health strained the region as a Lancaster County measles outbreak claimed another child and Allegheny County issued a code red heat advisory running through September 3. see: Measles Outbreak Claims Another Child; Code Red Heat Advisory Hits the Region SECURITY ---------------------------------------------------------------- 1. MCKESSON CONFIRMS BREACH OF 284 MILLION RECORDS Data Breaches · [breach, extortion, healthcare] Latest developments: McKesson confirmed the intrusion in an SEC filing, dated its detection to August 25, 2026, and warned customers of service degradation as the ShinyHunters extortion deadline approaches. McKesson, the largest US distributor of pharmaceuticals and medical supplies, said attackers reached data through an unnamed third-party application; the ShinyHunters extortion group claims 284 million records and has set a payment deadline. - SecurityWeek: https://www.securityweek.com/mckesson-confirms-data-breach-as-attacker-deadline-looms/ - The Record: https://therecord.media/mckesson-cyberattack-ransomware-pharma - Help Net Security: https://www.helpnetsecurity.com/2026/08/31/healthcare-company-mckesson-data-breach/ 2. INFOSTEALERS HIJACK CLAUDE ACCOUNT SESSIONS AI Security · [ai, malware, session-hijacking] Latest developments: Anthropic named the infostealers involved—Vidar, Lumma, StealC, RedLine, and Acreed on Windows, plus Atomic Stealer on a few Macs—and began forcing logouts and stripping stored payment data to block unauthorized Claude usage. A threat actor used commodity infostealers, which arrive with pirated software and cracks, to lift active Claude login sessions and seize accounts belonging to an unknown number of users. - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/anthropic-users-infostealer-attacks-session-thefts - SecurityWeek: https://www.securityweek.com/anthropic-warns-claude-users-of-infostealer-malware-infections/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/31/claude-accounts-compromised-through-infostealer/ 3. FRESH CRITICAL FLAWS IN RAILS, KASPERSKY, AND ATM SOFTWARE Vulnerabilities and Exploits · [vulnerability, patch, rce] Latest developments: The KindaRails2Shell arbitrary-file-read flaw in Ruby on Rails drew active exploitation attempts, Kaspersky patched the HardBreacher exploit that the Nightmare Eclipse toolkit fires at its Endpoint Security product, and Wired detailed nine vulnerabilities in ATM encryption and authentication software. The flaws span web frameworks, endpoint security products, and cash machines, letting attackers read secrets and execute code remotely; Rails and Kaspersky have shipped patches while the ATM research exposes broader software supply-chain weakness. - SecurityWeek: https://www.securityweek.com/critical-ruby-on-rails-vulnerability-in-attackers-crosshairs/ - SecurityWeek: https://www.securityweek.com/nightmare-eclipse-drops-hardbreacher-kaspersky-product-exploit/ - Wired Security: https://www.wired.com/story/atm-flaws-reveal-key-weaknesses-in-the-software-supply-chain/ 4. PROSECUTORS MOVE ON ATM JACKPOTTING AND SEXTORTION CREWS Ransomware and Cybercrime · [law-enforcement, fraud] Latest developments: Five Venezuelan nationals pleaded guilty in a Kansas federal ATM jackpotting case, and two Nigerian men extradited to the US faced charges over sextortion schemes tied to the deaths of two minors in Mississippi and North Carolina. US prosecutors pressed financially and sexually motivated cybercrime cases; separately, researchers Erin West and Paul Raffile traveled to Nigeria and tracked a scammer to his doorstep. - The Record: https://therecord.media/kansas-atm-jackpotting-guilty-pleas - BleepingComputer: https://www.bleepingcomputer.com/news/security/nigerians-charged-US-over-sextortion-deaths-of-us-teens/ - 404 Media: https://www.404media.co/how-cyber-sleuths-tracked-a-nigerian-scammer-to-his-doorstep/ 5. ATTACKERS DRAIN $74 MILLION FROM TECTONIC ON CRONOS Ransomware and Cybercrime · [cryptocurrency, theft, defi] Latest developments: An attacker manipulated the price of the Tonic token over the weekend to borrow $74 million from the Tectonic lending platform on the Cronos blockchain, making off with at least $6 million before Cronos halted and then restarted trading. Tectonic is a decentralized lending market on the Cronos network; the price-manipulation exploit drained funds and forced the chain to pause activity before resuming. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cronos-blockchain-restarts-after-74-million-tectonic-exploit/ - The Record: https://therecord.media/crypto-tectonic-hack-cronos 6. AURORA RANSOMWARE WIELDS CURSOR AI ASSISTANT AI Security · [ransomware, ai] Latest developments: CloudSEK and Gambit Security found operators of Aurora ransomware, a Russian-speaking crew, driving the Cursor AI coding assistant to break into at least 10 target networks. Aurora, also written Aur0ra, is an emerging ransomware operation; the two analyses grew from exposed attacker infrastructure and mark another case of criminals bending a mainstream AI coding tool to intrusion work. - The Hacker News: https://thehackernews.com/2026/08/aurora-ransomware-operators-use-cursor.html PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Mostly Cloudy, low 73F. Tuesday: Slight Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 92F. Tuesday Night: Chance Showers And Thunderstorms, low 73F. Business: * AGH Nurses Rally Over Staffing Latest developments: Pittsburgh nurses rallied Monday, August 31, ahead of contract negotiations with Allegheny General Hospital, arguing the hospital can afford to hire more nursing staff. Registered nurses at Allegheny General Hospital, the flagship of Allegheny Health Network on Pittsburgh's North Side, opened contract talks demanding staffing investments as patient counts and care needs climb. - TribLive: https://triblive.com/local/pittsburgh-nurses-rally-ahead-of-agh-negotiations-saying-hospital-can-afford-more-nursing-staff/ * Long John Silver's Reopens in Butler County Latest developments: The Long John Silver's at Moraine Pointe Plaza in Butler County will reopen in early September. The seafood chain's Moraine Pointe Plaza location in Butler County plans to serve customers again in early September after a closure. - WTAE: https://www.wtae.com/article/long-john-silvers-moraine-pointe-plaza-reopen-september/73572922 Around town: * Measles Outbreak Claims Another Child Latest developments: The Lancaster County coroner tied the death of another child to the measles outbreak on August 31 as cases keep rising across Pennsylvania. Pennsylvania's measles outbreak, centered in Lancaster County, has now killed additional residents this year, the state's first measles deaths since 1991, driven by low vaccination in the affected communities. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/health/2026/08/31/lancaster-county-coroner-child-death-linked-to-measles-outbreak/stories/202608310051 * Public Works Facility Proposed for Schenley Park Latest developments: A city plan to build a Pittsburgh public works facility on a section of Schenley Park off Prospect Drive drew pushback from park users on August 31. Pittsburgh wants to place a public works facility in Schenley Park near Prospect Drive, and neighbors who use the greenspace to teach children to bike and walk are objecting. - TribLive: https://triblive.com/local/proposal-to-put-pittsburgh-public-works-facility-in-schenley-park-prompts-pushback/ * Code Red Heat Advisory Hits the Region Latest developments: Allegheny County issued a code red heat advisory for Tuesday through Thursday, September 1 to 3, as Pittsburgh extended rec-center hours for students learning remotely during the heat. Forecast highs in the 90s prompted Allegheny County's code red heat advisory and warnings of severe thunderstorms, while the City of Pittsburgh opened several community rec centers longer to accommodate the 35 Pittsburgh Public Schools buildings shifting to remote learning. - TribLive: https://triblive.com/news/health-now/allegheny-county-issues-heat-advisory-beginning-tuesday/ - WPXI: https://www.wpxi.com/news/local/city-pittsburgh-extends-hours-several-rec-centers-students-prepare-remote-learning/FC2TOEOJFJFGHLQAY43ZL76RKA/ SPORTS ---------------------------------------------------------------- Around the Teams: * All 10 Draft Picks Make the 53 Latest developments: General manager Omar Khan explained to reporters August 31 why every one of the Steelers' 10 rookie draft picks made the initial 53-man roster. The Pittsburgh Steelers kept their entire 2026 draft class through cutdown, a rarity Khan attributed to the rookies' readiness and how the front office built its board. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/31/nfl-draft-picks-roster-cuts-omar-khan/stories/202608310025 - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=NyvEC8SUZQo * Pirates Weigh September Call-Ups Latest developments: The Post-Gazette's MiLB Monday laid out the Pirates' top candidates for September promotions on August 31, including Wilber Dotel and Antwone Kelly. With active rosters expanding, the Pittsburgh Pirates are evaluating minor-league arms such as Wilber Dotel and Antwone Kelly for September call-ups from their farm system. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/31/prospects-september-callup-wilber-dotel-antwone-kelly/stories/202608310019 * Pirates Starters Defend Bill Murphy Latest developments: In the Post-Gazette's Off The Bat column August 31, Pirates starters rejected the notion that pitching coach Bill Murphy caused the rotation's regression. Pittsburgh Pirates starters including Paul Skenes, Bubba Chandler, and Braxton Ashcraft told the Post-Gazette they place no blame on pitching coach Bill Murphy for the rotation's second-half decline. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/31/pirates-bill-murphy-paul-skenes-bubba-chandler-braxton-ashcraft/stories/202608310005 Team USA: * Wilson and Plum Out of FIBA World Cup Latest developments: USA Basketball said August 31 that A'ja Wilson and Kelsey Plum will miss the FIBA Women's World Cup for health reasons, with Kiki Iriafen and Sonia Citron replacing them. The Phoenix Mercury said Kelsey Plum will miss the rest of the 2026 WNBA season; she and A'ja Wilson both drop off the United States roster for the FIBA Women's World Cup, where Kiki Iriafen and Sonia Citron step in. - ESPN Olympics: https://www.espn.com/wnba/story/_/id/49782113/aja-wilson-kelsey-plum-miss-fiba-women-world-cup * Balogun Nears Everton Move Latest developments: Sources told ESPN August 31 that Everton's deal for USMNT forward Folarin Balogun could reach $54 million after a £35 million offer for the AS Monaco striker. Everton are closing in on Folarin Balogun, the United States men's national team forward at AS Monaco, in a move that with add-ons could hit $54 million ahead of the September 1 window close. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49783677/everton-deal-usmnt-forward-folarin-balogun-sources * Downs Loaned to St. Louis City Latest developments: A source told ESPN August 31 that St. Louis City SC is set to acquire USMNT forward Damion Downs on loan from Southampton. United States forward Damion Downs will join MLS side St. Louis City SC on loan from English Championship club Southampton. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49785118/southampton-loans-usmnt-downs-st-louis READING ---------------------------------------------------------------- * Cal Newport -- Are We at War with AI Agent "Civilizations"? Newport revisits OpenAI's fresh disclosures about the July hacking attack and questions the framing of autonomous AI agents as adversarial 'civilizations' at war with us. https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ * Stratechery -- Meta Settles, A Framework For Regulating Content, The Rest of Big Tech Thompson argues Meta's content settlement suits every party involved yet exposes why any framework for regulating technology content feels fundamentally off. https://stratechery.com/2026/meta-settles-a-framework-for-regulating-content-the-rest-of-big-tech/ * Ed Zitron -- Premium: The Hater's Guide To Circular Financing (Part One) Zitron opens a multi-part takedown of the circular financing propping up AI, satirizing how Nvidia's investments loop back through customers like OpenAI and Anthropic. https://www.wheresyoured.at/premium-the-haters-guide-to-circular-financing-part-one/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,689.72 = -0.0% Dow 53,517.57 ▲ +0.5% Nasdaq 26,241.09 ▼ -0.2% WTI crude 83.31 ▼ -3.2% EUR/USD 1.1667 ▲ +0.4% GBP/USD 1.3627 ▲ +0.4% USD/JPY 159.17 ▲ +0.1% ================================================================ Generated 2026-08-31 19:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================