================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, September 1, 2026 - 1:35 PM EDT ================================================================ Attackers exploited PaperCut, Langflow, JFrog, and Rails flaws within days of disclosure while breaches at Aesto Health, Nutex, and Novocure exposed millions of patient records. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers exploited freshly disclosed flaws in PaperCut, Langflow, and Ruby on Rails within days, while others hijacked BGP routing to poison Virtualizor's software update channel. see: Enterprise and Developer Tools Under Active Exploitation; Virtualizor Supply Chain Hit via BGP Hijack * [TREND] Healthcare providers kept hemorrhaging records as Houston's Nutex Health disclosed a ransomware theft and Novocure exposed more than 1,400 U.S. cancer patients. see: Healthcare Data Breaches Multiply * [TREND] AI became both target and weapon as thieves burned $600,000 in METR's credits and UAC-0099 hid malware behind a nuclear-weapon prompt, themes Newport probes on trusting autonomous agents. see: Attackers Target and Subvert AI Systems; Are We at War with AI Agent "Civilizations"? * [TREND] State-linked operations surfaced as Kaspersky exposed Iran's Mirage Kitten striking aviation and fintech while leaked files detailed Russia's GRU cyber force generation. see: Mirage Kitten Strikes Aviation and Fintech; Leaked Files Expose Russian Cyber Force Generation * [UPDATE (new)] The U.S. launched fresh strikes on Iranian targets, sending oil up nearly 4% as a global bond sell-off drove Japanese and U.K. yields to multi-decade highs. see: U.S. Launches Fresh Strikes on Iran; Global Bond Sell-Off Deepens * [TREND] Analysts scrutinized the AI boom's finances, with Ben Thompson parsing Nvidia's quarter and Zitron dissecting the circular money flows binding it to the labs it supplies. see: Nvidia Earnings, Dollars Per Gigawatt, Open and Hugging Face; Premium: The Hater's Guide To Circular Financing (Part One) SECURITY ---------------------------------------------------------------- 1. ENTERPRISE AND DEVELOPER TOOLS UNDER ACTIVE EXPLOITATION Vulnerabilities and Exploits · [patch, exploit, zero-day] Latest developments: CISA added PaperCut flaws CVE-2026-82078 and CVE-2026-81578 to its Known Exploited Vulnerabilities catalog as attackers turned them to data theft, VulnCheck caught live exploitation of Langflow's CVE-2026-0768 and Ruby on Rails' CVE-2026-66066, JFrog Artifactory's authentication-bypass CVE-2026-82329 drew attacks days after disclosure, and WatchGuard patched three critical Fireware OS flaws. The flaws let unauthenticated attackers run code or bypass authentication on print servers, AI app builders, web frameworks, artifact repositories, and firewalls; administrators should patch at once and hunt for intrusion. - BleepingComputer: https://www.bleepingcomputer.com/news/security/recently-patched-papercut-zero-days-used-in-data-theft-attacks/ - The Hacker News: https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html - SecurityWeek: https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/ - SecurityWeek: https://www.securityweek.com/watchguard-patches-critical-vulnerabilities/ 2. HEALTHCARE DATA BREACHES MULTIPLY Data Breaches · [breach, healthcare, ransomware] Latest developments: Nutex Health of Houston told the SEC that a ransomware gang stole patient, employee, provider, and financial data and made an extortion demand, Novocure reported a mid-August attack that exposed more than 1,400 US cancer patients along with employees, and Aesto Health disclosed that hackers pulled personal and health information on 9.5 million people from its AWS infrastructure. Three healthcare technology firms disclosed August intrusions; affected patients should watch for identity theft and medical fraud and act on breach notifications. - SecurityWeek: https://www.securityweek.com/9-5-million-impacted-by-aesto-health-data-breach/ - The Record: https://therecord.media/nutex-health-data-breach - BleepingComputer: https://www.bleepingcomputer.com/news/security/novocure-data-breach-affects-more-than-1-400-cancer-patients/ - SecurityWeek: https://www.securityweek.com/ransomware-gang-claims-nutex-health-data-breach/ 3. MIRAGE KITTEN STRIKES AVIATION AND FINTECH Nation-State Activity · [apt, malware, nation-state] Latest developments: Kaspersky published a full report naming the Iranian group Mirage Kitten, also tracked as Nimbus Manticore, and detailed its Node.js RAT NodeRabbit and JavaScript RAT PollCat striking aviation and FinTech developers across the Middle East and Africa, with the first NodeRabbit sighting in Afghanistan and later variants in Egypt and Ethiopia. The Iranian espionage crew poses as recruiters handing developers coding tests that drop cross-platform remote access trojans reaching Linux and macOS; targeted developers should distrust unsolicited coding assignments. - Securelist (Kaspersky): https://securelist.com/mirage-kitten-new-backdoors-noderabbit-pollcat/121244/ - The Record: https://therecord.media/iranian-cyber-spies-target-aviation-fintech-new-malware - The Hacker News: https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html 4. ATTACKERS TARGET AND SUBVERT AI SYSTEMS AI Security · [ai, apt] Latest developments: METR, the nonprofit that evaluates frontier AI models, said external actors stole an API key and burned roughly $600,000 in AI credits across two intrusion attempts, and ESET tied Russia-aligned UAC-0099 to GuardBreaker, a technique that plants a nuclear-weapon prompt in malware to trip a large language model's safety filters and derail AI-assisted analysis of a Ukrainian target. Attackers now steal AI compute and manipulate model guardrails; organizations should lock down API keys and treat AI analysis output as tamperable. - The Hacker News: https://thehackernews.com/2026/09/attackers-steal-metr-api-key-and.html - The Hacker News: https://thehackernews.com/2026/09/russia-aligned-uac-0099-plants-nuclear.html 5. VIRTUALIZOR SUPPLY CHAIN HIT VIA BGP HIJACK Supply Chain Attacks · [supply-chain, bgp, malware] Latest developments: Hackers hijacked BGP routing for the Virtualizor VPS management software's update infrastructure, redirected update requests to servers they controlled, and pushed a malicious update to customers. Virtualizor lets hosting providers manage virtual private servers; the BGP hijack let attackers impersonate the update server and slip malware onto customer systems, so operators should audit hosts that pulled recent updates. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-push-malicious-virtualizor-update-in-bgp-hijacking-attack/ 6. LEAKED FILES EXPOSE RUSSIAN CYBER FORCE GENERATION Nation-State Activity · [nation-state, apt] Latest developments: Leaked Russian training materials, reported by Schneier on Security, describe a force-generation system for General Staff components including the GRU, the Main Operational Directorate, and the 8th Directorate, and link 2024 Department No. 4 graduate Aleksei Kondrashov to Military Unit 74455, the destructive-attack group known as Sandworm. The records map how Russia staffs its military cyber units and connect a named graduate to Sandworm, the unit behind some of Russia's most destructive cyberattacks. - Schneier on Security: https://www.schneier.com/blog/archives/2026/09/leaked-russian-cyber-operations-training-materials.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Launches Fresh Strikes on Iran Latest developments: The U.S. military said today it is hitting new Iranian targets in retaliation for Iranian attacks on commercial ships and American service members, and oil jumped nearly 4%. The renewed fighting revives fears of a prolonged Persian Gulf conflict and fresh disruption to oil moving through the Strait of Hormuz, where attackers this week struck tankers carrying Saudi and South Korean crude; President Trump has summoned U.S. refiners to a White House meeting Tuesday over rising fuel prices as high living costs sap his standing before the midterms. - FT: https://www.ft.com/content/c557ccc2-9fe7-4725-8a1c-c40a0948e8d3?syn-25a6b1a6=1 - WSJ: https://www.wsj.com/world/middle-east/iran-strikes-us-1d263f3f?mod=rss_worldnews - WSJ: https://www.wsj.com/finance/commodities-futures/oil-rises-on-prospect-for-prolonged-supply-disruptions-in-middle-east-2b9b6919?mod=rss_markets_main * Global Bond Sell-Off Deepens Latest developments: Japanese government-bond yields climbed to peaks unseen since the 1990s and U.K. borrowing costs hit their highest since 2008, dragging U.S. stocks lower as rising oil feeds inflation fears. Sovereign borrowing costs are surging worldwide, heaping pressure on governments, home buyers, and credit-card holders, with the runup squeezing the Federal Reserve and the European Central Bank—which is set to raise rates next week after August eurozone inflation reached 3.3%. - FT: https://www.ft.com/content/e6f5f97a-b199-444e-aaec-b8199359b08e?syn-25a6b1a6=1 - WSJ: https://www.wsj.com/finance/investing/bond-yields-around-the-world-soar-in-challenge-to-government-borrowing-c519c53f?mod=rss_markets_main - WSJ: https://www.wsj.com/finance/investing/u-s-stock-futures-slip-amid-bond-selloff-410a147c?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Mostly Sunny, high 90F. Tonight: Chance Showers And Thunderstorms, low 73F. Wednesday: Slight Chance Showers And Thunderstorms, high 93F. Business: * U.S. Steel, Steelworkers Extend Talks Latest developments: U.S. Steel, Cleveland-Cliffs, and the United Steelworkers agreed to a 30-day extension of their four-year labor contracts, which expired Tuesday morning, to keep negotiating. The extension keeps thousands of Western Pennsylvania mill workers under the expired terms and averts an immediate break between the United Steelworkers and two of the region's largest steel employers while talks continue. - TribLive: https://triblive.com/business/u-s-steel-united-steelworkers-extend-contract-negotiations-as-labor-pact-expires/ - WPXI: https://www.wpxi.com/news/local/united-steelworkers-us-steel-cleveland-cliffs-extend-contracts-30-days/REKWPANHKZHJFFP5HOCBBER2JY/ * Chobani Plans $1.2B Pennsylvania Plant Latest developments: Chobani said it will build a $1.2 billion dairy manufacturing operation in the Lehigh Valley of Eastern Pennsylvania. The yogurt maker's investment adds a large food-manufacturing footprint to eastern Pennsylvania, one of the state's biggest recent industrial commitments. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/career-workplace/2026/09/01/chobani-dairy-facility-invest-lehigh-valley/stories/202609010037 * Kraft Heinz Moves to NYSE Latest developments: Kraft Heinz is leaving Nasdaq for the New York Stock Exchange, though it will retain some ties to Nasdaq. Kraft Heinz, dual-headquartered in Pittsburgh and Chicago, is shifting its stock listing to the New York Stock Exchange. - WPXI: https://www.wpxi.com/news/local/exchange-transition-kraft-heinz-departs-nasdaq-new-home-nyse/EWBVZ6WSHJFAVGXZ7K2LIQZLNE/ Around town: * Lawmakers Revive Property-Tax Elimination Latest developments: Pennsylvania legislators reintroduced a plan to abolish school property taxes statewide and replace the revenue with higher sales and income taxes. The renewed push aims to end the school property taxes squeezing Pittsburgh-area homeowners, as Harrisburg still searches for a durable way to fund the state's public schools. - TribLive: https://triblive.com/news/pennsylvania/goodbye-property-taxes-legislators-resurrect-plan-for-shift-to-higher-sales-and-income-taxes/ * Oakland Restaurant Ordered Closed Latest developments: Allegheny County ordered Hunan Bar on Atwood Street in Oakland closed after it failed to resolve multiple repeat health violations first cited during an August 21 inspection tied to a smoking complaint. The closure pulls a Chinese restaurant in the heart of Oakland's student district off-line until it corrects the recurring violations. - WPXI: https://www.wpxi.com/news/local/pittsburgh-chinese-restaurant-ordered-closed-after-failing-resolve-multiple-repeat-violations/B6BPLMR5TBH2VC6GXKF4UIDHPY/ * Allegheny County Sprays for West Nile Latest developments: Allegheny County is continuing to spray neighborhoods to knock down mosquitoes carrying West Nile virus, the leading mosquito-borne disease in the country. The county's spraying targets infected mosquito populations as the late-summer transmission season runs on. - WPXI: https://www.wpxi.com/news/local/allegheny-county-continues-spray-neighborhoods-reduce-west-nile-virus/BROKQLSRIRG2XHC2S4HYNXTMME/ Events: * Merged Theaters Named Confluence Theater Latest developments: The company formed by the merger of Pittsburgh Public Theater and Pittsburgh CLO announced its name, Confluence Theater of Pittsburgh, along with a plan for its future. The combined nonprofit unites two of Pittsburgh's largest stage companies under one banner, Confluence Theater of Pittsburgh, reshaping the city's professional-theater landscape. - Pittsburgh Post-Gazette: https://www.post-gazette.com/ae/theater-dance/2026/08/31/confluence-theater-pittsburgh-name-merge-public-clo/stories/202608310026 SPORTS ---------------------------------------------------------------- Around the Teams: * Linebackers Talk Camp on 'Not Just Football' Latest developments: On Cam Heyward's "Not Just Football," outside linebackers T.J. Watt, Alex Highsmith, Nick Herbig, and Jack Sawyer discussed their offseason contracts and adjusting to a new defensive system. The training-camp episode gathered the full edge-rusher room to break down life under the Steelers' revamped defense and play a round of position-group superlatives. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=ANB7ezXcv3w Team USA: * Lavelle Re-Signs With Gotham FC Latest developments: U.S. women's national team midfielder Rose Lavelle re-signed with defending NWSL champion Gotham FC through the 2029 season. The extension keeps one of the USWNT's most creative midfielders with the reigning NWSL title-holder in New York/New Jersey for four more seasons. - ESPN: https://www.espn.com/soccer/story/_/id/49794484/united-states-women-national-team-rose-lavelle-extends-contract-gotham-fc-2029 * McGlynn Nears Stoke City Move Latest developments: Stoke City is in the final stages of acquiring U.S. men's national team midfielder Jack McGlynn from the Houston Dynamo for a fee of up to $5.5 million. The transfer moves McGlynn from MLS to the English Championship, extending a wave of young American players heading to Europe before the deadline. - ESPN: https://www.espn.com/soccer/story/_/id/49784197/stoke-city-deal-usmnt-mcglynn-houston-dynamo-sources * Lawson Calls World Cup Toughest Yet Latest developments: U.S. women's basketball coach Kara Lawson called this FIBA Women's World Cup the most challenging field she has seen. Lawson's assessment comes as the American team enters the tournament without A'ja Wilson and Kelsey Plum, both sidelined for health reasons, with Kiki Iriafen and Sonia Citron called in as replacements. - ESPN: https://www.espn.com/wnba/story/_/id/49794975/us-coach-kara-lawson-calls-world-cup-most-challenging READING ---------------------------------------------------------------- * Stratechery -- Nvidia Earnings, Dollars Per Gigawatt, Open and Hugging Face Ben Thompson reads Nvidia's blockbuster-yet-predictable quarter as of a piece with the company's larger project: engineering the AI market so it never consolidates into a few buyers who could squeeze its pricing. https://stratechery.com/2026/nvidia-earnings-dollars-per-gigawatt-open-and-hugging-face/ * Cal Newport -- Are We at War with AI Agent "Civilizations"? Newport revisits OpenAI's July hacking incident and the company's newly released details, weighing how far autonomous AI agents can be trusted and what their misuse implies for security. https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ * Ed Zitron -- Premium: The Hater's Guide To Circular Financing (Part One) Zitron dissects the circular money flows binding Nvidia to the AI labs it supplies, arguing the arrangements inflate the boom's apparent health and mask how the buildout is really financed. https://www.wheresyoured.at/premium-the-haters-guide-to-circular-financing-part-one/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,684.59 ▼ -0.1% Dow 53,442.76 ▲ +0.3% Nasdaq 26,234.79 ▼ -0.3% WTI crude 83.46 ▼ -3.1% EUR/USD 1.1649 ▲ +0.1% GBP/USD 1.3604 ▲ +0.1% USD/JPY 159.41 ▲ +0.3% ================================================================ Generated 2026-09-01 13:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================