daily plain-text briefing: security, markets, business, and pittsburgh
Microsoft, Europol, and partners ran Operation Endgame to dismantle the StealC, Amadey, and SocGholish cybercrime services, recovering 27 million stolen credentials in a strike on the criminal supply chain.
Latest developments: Microsoft, Europol, Proofpoint, Bitdefender, Bitsight, and ESET widened the operation to three cybercrime-as-a-service families—adding SocGholish alongside StealC and Amadey—disrupted more than 300 command-and-control servers, and recovered 27 million stolen credentials, with Microsoft's Digital Crimes Unit framing the sweep as a strike on the full cybercrime supply chain.
StealC steals credentials and Amadey loads follow-on payloads; together the families compromise devices, harvest data, and stage ransomware and fraud. Organizations should rotate exposed credentials and hunt for the malware on their networks.
Sources: Ars Technica Security · The Record · The Hacker News · Microsoft Security Blog · ↑ top
Latest developments: Mandiant disclosed that attackers exploited CVE-2026-20245 in Cisco Catalyst SD-WAN as a zero-day two months before its disclosure, using rogue peering to reach devices and forge root-level accounts, while honeypots caught automated Tor sweeps dropping webshells through Unified Communications Manager flaw CVE-2026-20230 after a proof-of-concept exposed a file-write path to root.
Cisco Catalyst SD-WAN and Unified Communications Manager run enterprise networking and voice systems; both flaws hand unauthenticated attackers code execution and root. Administrators should patch and inspect for rogue accounts and webshells.
Sources: BleepingComputer · Dark Reading · Help Net Security · The Hacker News · ↑ top
Latest developments: A U.S. court sentenced Nathan Austad, alias Snoopy, to 18 months and roughly $1.8 million for the November 2022 DraftKings account takeovers; Spain extradited an Algerian national who ran phishing-kit and fraud-tool marketplaces to face bank fraud charges; and the Justice Department seized a HuiOne Group cloud account as the Treasury sanctioned nine individuals and 26 entities tied to Cambodia's Prince Group for laundering scam proceeds.
The actions span credential-stuffing theft, phishing-kit sales, and Cambodian scam laundering, applying sustained pressure on cybercrime operators and the networks that move their cash.
Sources: SecurityWeek · Help Net Security · The Hacker News · ↑ top
Latest developments: SecurityWeek and Dark Reading detailed a chain of macOS weaknesses that lets a standard non-admin account disable endpoint security and integrated browser tools by abusing legitimate operating-system behavior, sidestepping administrator privileges and kernel exploits entirely.
The technique blinds EDR and browser protections on Macs without elevated rights, leaving fleets that rely on those agents exposed. Defenders should monitor for security tooling that goes dark.
Sources: SecurityWeek · Dark Reading · ↑ top
Latest developments: Dark Reading flagged a surge in cybercrime, social engineering, and infrastructure threats targeting the tournament across the United States, Canada, and Mexico, while researcher Bob DaHacker revealed she had obtained the live broadcast controls that could have Rickrolled the entire event.
The 2026 World Cup, which the United States, Canada, and Mexico co-host, presents a sprawling attack surface across venues, broadcast systems, and fans. Organizers and sponsors face phishing, fraud, and infrastructure risk.
Sources: Dark Reading · Graham Cluley · ↑ top
Latest developments: Bajaj Auto, India's motorcycle giant, told regulators it discovered a ransomware incident Tuesday morning and moved to contain it, while separate hackers stole more than 45 gigabytes from Madison Square Garden, including data on the New York Knicks and the venue's talent.
Both incidents hit marquee organizations—an Indian manufacturer and a New York entertainment landmark—through ransomware and data theft, threatening operational disruption and the exposure of sensitive records.
Sources: The Record · 404 Media · ↑ top
Latest developments: The Federal Reserve released its 2026 stress-test results Wednesday, and several Wall Street lenders immediately raised dividends and buybacks.
The Fed's annual test found the largest U.S. banks would absorb roughly $700 billion in losses in a severe economic crash yet stay above capital minimums; JPMorgan and Bank of America passed comfortably under a methodology the Fed eased by publishing test details in advance, and lenders responded by boosting investor payouts.
Sources: FT Markets · WSJ Markets · ↑ top
Latest developments: A day after canceling the housing-bill signing, President Trump demanded 'loyalty' from NATO allies over the Iran war, and the White House formally asked Congress for $87.6 billion, mostly to replenish the Pentagon.
After meeting Secretary-General Mark Rutte, Trump publicly singled out alliance members including the United Kingdom for failing to back the U.S. campaign against Iran, while his administration sent Congress an $87.6 billion supplemental request covering war costs, aid to U.S. farmers, and an Ebola response, landing amid a shouting match with Republican lawmakers.
Sources: FT World · FT World · ↑ top
Tonight: Mostly Clear, low 60F.
Thursday: Partly Sunny then Scattered Showers And Thunderstorms, high 84F.
Thursday Night: Scattered Showers And Thunderstorms then Chance Showers And Thunderstorms, low 63F.
Latest developments: Pittsburgh budget officials told a Wednesday finance discussion the city could finish 2026 about $24 million in the red even after this year's tax increase and spending cuts.
Pittsburgh raised taxes and trimmed spending heading into 2026, yet city finance officials now project a roughly $24 million year-end deficit, deepening the budget pressure facing City Council.
Latest developments: Precision Care Pharmacy in Greensburg has sat shuttered for a week, leaving former customers without their prescriptions or an explanation.
Precision Care Pharmacy, a Greensburg pharmacy in Westmoreland County, abruptly closed and has stayed dark for a week, frustrating customers who say the business never told them where to transfer their prescriptions.
Latest developments: Rockaway Pizzeria has temporarily closed, Mayfly Market is expanding into the Strip District, and Leon's Caribbean has left Allentown, TribLive reported Wednesday.
Pittsburgh's food scene shifted this week: Rockaway Pizzeria shut its doors temporarily, the grocer Mayfly Market announced an expansion to the Strip District, and the longtime Leon's Caribbean departed the Allentown neighborhood.
Latest developments: Pittsburgh real estate agent Kelsey Green said she has documented 35 cases of deed fraud across Allegheny County, most in the city and concentrated on the South Side.
Kelsey Green, a Pittsburgh real estate agent, says she uncovered 35 properties whose deeds were fraudulently transferred away from owners current on their mortgages, with the bulk of the cases in the South Side neighborhood.
Latest developments: Pennsylvania's measles count jumped and the outbreak reached Northumberland County, the Post-Gazette reported Wednesday.
Pennsylvania recorded a rise in measles cases that has now spread to Northumberland County, widening a public-health concern across the state.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Pennsylvania Turnpike released its America 250 traffic forecast Wednesday, warning of heavier-than-usual volume around the nation's 250th-anniversary celebrations.
The Pennsylvania Turnpike Commission projected unusually heavy traffic on the state's largest toll road as travelers move for the country's 250th-birthday events, and it laid out construction and travel updates for the holiday stretch.
Latest developments: NEXTpittsburgh's June 25-28 guide leads with the Andy Warhol Bridge 100th Birthday Bash and OpenStreetPGH.
Pittsburgh's weekend of Thursday through Sunday, June 25 to 28, features the Andy Warhol Bridge 100th Birthday Bash, marking a century of the downtown span, and OpenStreetPGH, which closes city streets to cars, among more than a dozen listed events.
Sources: NEXTpittsburgh Arts & Entertainment · ↑ top
Pirates (39-40)
Tue Jun 23 · Mariners 3 · Pirates 2 · Final
Cole Young hits a two-run home run in the seventh to lift Mariners to a 3-2 victory over Pirates
Wed Jun 24 · Mariners 1 · Pirates 10 · Bot 8th (in progress at last update)
Up Next · Mariners @ Pirates · Thu Jun 25, 12:35 PM
Latest developments: Steelers.com's SNR Drive broke down the addition of cornerback Jamel Dean to Pittsburgh's defense, with Matt Williamson and Wes Uhler weighing his fit.
Matt Williamson and Wes Uhler used the Steelers' SNR Drive to assess cornerback Jamel Dean's arrival, gauging how the veteran slots into the secondary for 2026.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: A Post-Gazette video asked whether the Steelers are getting enough production from the NFL's most expensive defense, anchored by T.J. Watt and Cam Heyward.
Post-Gazette analysts questioned the return on the Steelers' league-high defensive payroll, which carries T.J. Watt and Cam Heyward, as the team heads toward the 2026 season.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's MiLB Monday spotlighted Pirates prospect Connor Wietgrefe, who has strung together a scoreless streak at Double-A Altoona.
Pirates pitching prospect Connor Wietgrefe is drawing notice for a scoreless streak with the Double-A Altoona Curve, the Post-Gazette reported in its minor-league roundup.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Mauricio Pochettino said Wednesday he will not start his four yellow-carded players against Türkiye on Thursday, June 25, to keep them eligible for the round of 32 on July 1.
With the U.S. men already through to the knockouts as a World Cup co-host, manager Mauricio Pochettino will hold out the four players carrying yellow cards in Thursday's Group D finale against Türkiye, avoiding suspensions that would carry into the round-of-32 match July 1.
Sources: ESPN Soccer · ↑ top
Latest developments: AC Milan turned down a New York City FC approach for Christian Pulisic, telling sources the U.S. attacker is not for sale.
AC Milan rejected an inquiry from New York City FC for forward Christian Pulisic during the World Cup, with the Italian club insisting the United States attacker is not available for transfer.
Sources: ESPN Soccer · ↑ top
Latest developments: Folarin Balogun has scored twice in two World Cup matches, ranking him among the tournament's leading scorers and drawing interest from Europe's biggest clubs.
U.S. striker Folarin Balogun's two goals in two group games place him among the World Cup's top scorers and have prompted some of Europe's largest clubs to take notice.
Sources: ESPN Soccer · ↑ top
S&P 500 7,423.43 ▼ -0.1% Dow 51,657.14 ▲ +1.0% Nasdaq 25,953.97 ▼ -0.1% WTI crude 75.49 ▼ -12.5% EUR/USD 1.1447 ▼ -1.2% GBP/USD 1.3232 ▼ -1.4% USD/JPY 161.30 ▲ +0.7%