daily plain-text briefing: security, markets, business, and pittsburgh
Attackers exploited PaperCut, Langflow, JFrog, and Rails flaws within days of disclosure while breaches at Aesto Health, Nutex, and Novocure exposed millions of patient records.
Latest developments: CISA added PaperCut flaws CVE-2026-82078 and CVE-2026-81578 to its Known Exploited Vulnerabilities catalog as attackers turned them to data theft, VulnCheck caught live exploitation of Langflow's CVE-2026-0768 and Ruby on Rails' CVE-2026-66066, JFrog Artifactory's authentication-bypass CVE-2026-82329 drew attacks days after disclosure, and WatchGuard patched three critical Fireware OS flaws.
The flaws let unauthenticated attackers run code or bypass authentication on print servers, AI app builders, web frameworks, artifact repositories, and firewalls; administrators should patch at once and hunt for intrusion.
Sources: BleepingComputer · The Hacker News · SecurityWeek · SecurityWeek · ↑ top
Latest developments: Nutex Health of Houston told the SEC that a ransomware gang stole patient, employee, provider, and financial data and made an extortion demand, Novocure reported a mid-August attack that exposed more than 1,400 US cancer patients along with employees, and Aesto Health disclosed that hackers pulled personal and health information on 9.5 million people from its AWS infrastructure.
Three healthcare technology firms disclosed August intrusions; affected patients should watch for identity theft and medical fraud and act on breach notifications.
Sources: SecurityWeek · The Record · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Kaspersky published a full report naming the Iranian group Mirage Kitten, also tracked as Nimbus Manticore, and detailed its Node.js RAT NodeRabbit and JavaScript RAT PollCat striking aviation and FinTech developers across the Middle East and Africa, with the first NodeRabbit sighting in Afghanistan and later variants in Egypt and Ethiopia.
The Iranian espionage crew poses as recruiters handing developers coding tests that drop cross-platform remote access trojans reaching Linux and macOS; targeted developers should distrust unsolicited coding assignments.
Sources: Securelist (Kaspersky) · The Record · The Hacker News · ↑ top
Latest developments: METR, the nonprofit that evaluates frontier AI models, said external actors stole an API key and burned roughly $600,000 in AI credits across two intrusion attempts, and ESET tied Russia-aligned UAC-0099 to GuardBreaker, a technique that plants a nuclear-weapon prompt in malware to trip a large language model's safety filters and derail AI-assisted analysis of a Ukrainian target.
Attackers now steal AI compute and manipulate model guardrails; organizations should lock down API keys and treat AI analysis output as tamperable.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Hackers hijacked BGP routing for the Virtualizor VPS management software's update infrastructure, redirected update requests to servers they controlled, and pushed a malicious update to customers.
Virtualizor lets hosting providers manage virtual private servers; the BGP hijack let attackers impersonate the update server and slip malware onto customer systems, so operators should audit hosts that pulled recent updates.
Sources: BleepingComputer · ↑ top
Latest developments: Leaked Russian training materials, reported by Schneier on Security, describe a force-generation system for General Staff components including the GRU, the Main Operational Directorate, and the 8th Directorate, and link 2024 Department No. 4 graduate Aleksei Kondrashov to Military Unit 74455, the destructive-attack group known as Sandworm.
The records map how Russia staffs its military cyber units and connect a named graduate to Sandworm, the unit behind some of Russia's most destructive cyberattacks.
Sources: Schneier on Security · ↑ top
Latest developments: The U.S. military said today it is hitting new Iranian targets in retaliation for Iranian attacks on commercial ships and American service members, and oil jumped nearly 4%.
The renewed fighting revives fears of a prolonged Persian Gulf conflict and fresh disruption to oil moving through the Strait of Hormuz, where attackers this week struck tankers carrying Saudi and South Korean crude; President Trump has summoned U.S. refiners to a White House meeting Tuesday over rising fuel prices as high living costs sap his standing before the midterms.
Sources: FT · WSJ · WSJ · ↑ top
Latest developments: Japanese government-bond yields climbed to peaks unseen since the 1990s and U.K. borrowing costs hit their highest since 2008, dragging U.S. stocks lower as rising oil feeds inflation fears.
Sovereign borrowing costs are surging worldwide, heaping pressure on governments, home buyers, and credit-card holders, with the runup squeezing the Federal Reserve and the European Central Bank—which is set to raise rates next week after August eurozone inflation reached 3.3%.
Sources: FT · WSJ · WSJ · ↑ top
This Afternoon: Mostly Sunny, high 90F.
Tonight: Chance Showers And Thunderstorms, low 73F.
Wednesday: Slight Chance Showers And Thunderstorms, high 93F.
Latest developments: U.S. Steel, Cleveland-Cliffs, and the United Steelworkers agreed to a 30-day extension of their four-year labor contracts, which expired Tuesday morning, to keep negotiating.
The extension keeps thousands of Western Pennsylvania mill workers under the expired terms and averts an immediate break between the United Steelworkers and two of the region's largest steel employers while talks continue.
Sources: TribLive · WPXI · ↑ top
Latest developments: Chobani said it will build a $1.2 billion dairy manufacturing operation in the Lehigh Valley of Eastern Pennsylvania.
The yogurt maker's investment adds a large food-manufacturing footprint to eastern Pennsylvania, one of the state's biggest recent industrial commitments.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Kraft Heinz is leaving Nasdaq for the New York Stock Exchange, though it will retain some ties to Nasdaq.
Kraft Heinz, dual-headquartered in Pittsburgh and Chicago, is shifting its stock listing to the New York Stock Exchange.
Latest developments: Pennsylvania legislators reintroduced a plan to abolish school property taxes statewide and replace the revenue with higher sales and income taxes.
The renewed push aims to end the school property taxes squeezing Pittsburgh-area homeowners, as Harrisburg still searches for a durable way to fund the state's public schools.
Latest developments: Allegheny County ordered Hunan Bar on Atwood Street in Oakland closed after it failed to resolve multiple repeat health violations first cited during an August 21 inspection tied to a smoking complaint.
The closure pulls a Chinese restaurant in the heart of Oakland's student district off-line until it corrects the recurring violations.
Latest developments: Allegheny County is continuing to spray neighborhoods to knock down mosquitoes carrying West Nile virus, the leading mosquito-borne disease in the country.
The county's spraying targets infected mosquito populations as the late-summer transmission season runs on.
Latest developments: The company formed by the merger of Pittsburgh Public Theater and Pittsburgh CLO announced its name, Confluence Theater of Pittsburgh, along with a plan for its future.
The combined nonprofit unites two of Pittsburgh's largest stage companies under one banner, Confluence Theater of Pittsburgh, reshaping the city's professional-theater landscape.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: On Cam Heyward's "Not Just Football," outside linebackers T.J. Watt, Alex Highsmith, Nick Herbig, and Jack Sawyer discussed their offseason contracts and adjusting to a new defensive system.
The training-camp episode gathered the full edge-rusher room to break down life under the Steelers' revamped defense and play a round of position-group superlatives.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: U.S. women's national team midfielder Rose Lavelle re-signed with defending NWSL champion Gotham FC through the 2029 season.
The extension keeps one of the USWNT's most creative midfielders with the reigning NWSL title-holder in New York/New Jersey for four more seasons.
Latest developments: Stoke City is in the final stages of acquiring U.S. men's national team midfielder Jack McGlynn from the Houston Dynamo for a fee of up to $5.5 million.
The transfer moves McGlynn from MLS to the English Championship, extending a wave of young American players heading to Europe before the deadline.
Latest developments: U.S. women's basketball coach Kara Lawson called this FIBA Women's World Cup the most challenging field she has seen.
Lawson's assessment comes as the American team enters the tournament without A'ja Wilson and Kelsey Plum, both sidelined for health reasons, with Kiki Iriafen and Sonia Citron called in as replacements.
S&P 500 7,684.59 ▼ -0.1% Dow 53,442.76 ▲ +0.3% Nasdaq 26,234.79 ▼ -0.3% WTI crude 83.46 ▼ -3.1% EUR/USD 1.1649 ▲ +0.1% GBP/USD 1.3604 ▲ +0.1% USD/JPY 159.41 ▲ +0.3%