daily plain-text briefing: security, markets, business, and pittsburgh
Russian intelligence widened a years-long campaign to hijack the messaging accounts of officials and activists across Ukraine, Europe, and the United States, with Ukraine's SBU and the FBI laying the operation bare.
Latest developments: Ukraine's SBU, working with the FBI, disclosed on June 27 a long-running Russian operation that uses fake tech-support staff to coax government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States into surrendering messaging-app credentials.
Russian intelligence services run phishing operations that impersonate tech support to harvest credentials for Signal, WhatsApp, and Telegram accounts belonging to officials, soldiers, and activists, and a newer step coaxes Signal users into handing over their Backup Recovery Key. Targets should enable phishing-resistant authentication and guard backup recovery keys.
Sources: The Hacker News · The Record · BleepingComputer · ↑ top
Latest developments: OpenAI on June 27 released three versions of GPT-5.6—Sol, Terra, and Luna—as a limited preview to a small set of companies under an engagement with the U.S. government, holding back broad access and building its strongest cyber safeguards into the flagship Sol model.
The restricted rollout reflects mounting concern that frontier models sharpen both attackers and defenders. Sol leads on capability, Terra balances cost and power, and Luna targets speed and affordability.
Sources: The Hacker News · ↑ top
Latest developments: SecurityWeek reported on June 27 that threat actors are selling investment-scam templates built with DCloud's legitimate Uni-App development toolkit, a Chinese framework now powering roughly 200,000 fraudulent sites.
The kits let low-skill operators spin up convincing investment-fraud pages at scale. Defenders should track the shared Uni-App fingerprints to detect and block the sites.
Sources: SecurityWeek · ↑ top
Latest developments: Researchers published working exploits within a day of disclosure for two kernel privilege-escalation bugs—CVE-2026-46331, called pedit COW, an out-of-bounds write in the act_pedit traffic-control action that surfaced June 16, and CVE-2026-43503, called DirtyClone, a CVSS 8.8 flaw in the DirtyFrag family that JFrog demonstrated June 25.
Both flaws let a local unprivileged user corrupt shared page-cache memory through crafted or cloned network packets and escalate to root on affected Linux systems. Administrators should apply the kernel patches at once.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: The Linux Foundation launched Akrites on June 26, an industry initiative uniting technology firms, banks, security vendors, AI companies, and open source projects to report, patch, and disclose vulnerabilities in widely used open source software as AI compresses the gap between flaw discovery and exploitation.
Akrites gives critical open source projects shared tooling and coordinated channels for vulnerability handling. Enterprises that depend on open source components gain a faster, more compliant remediation path.
Sources: Help Net Security · SecurityWeek · ↑ top
Latest developments: Researchers flagged a fresh evolution of the Mini Shai-Hulud, Miasma, and Hades supply-chain family that poisoned new npm releases tied to LeoPlatform and RStreams, abused GitHub Actions workflows, and propagated into the Go ecosystem.
The self-propagating malware steals secrets from developer pipelines and published packages. Teams should pin dependency versions, audit GitHub Actions permissions, and rotate any exposed tokens.
Sources: The Hacker News · ↑ top
Latest developments: Iran answered the overnight American airstrikes on June 27 with a drone assault on Bahrain, home to the U.S. Navy's 5th Fleet, and another strike on a ship in the Strait of Hormuz, pushing oil back above $70 a barrel.
The United States struck Iran overnight after Tehran's drone hit a container ship in the Strait of Hormuz, which Washington called a violation of the ceasefire the two sides signed earlier in June; a third straight day of tit-for-tat strikes now threatens to unravel that interim deal.
Sources: WSJ World News · FT World · WSJ Markets · ↑ top
This Afternoon: Showers And Thunderstorms Likely, high 79F.
Tonight: Showers And Thunderstorms Likely then Patchy Fog, low 66F.
Sunday: Partly Sunny then Chance Showers And Thunderstorms, high 85F.
Latest developments: Outback Steakhouse permanently shut its Washington, Pennsylvania, restaurant after 20 years, WTAE reported June 27.
The Outback Steakhouse in Washington, Pennsylvania, closed for good after two decades, pulling another national sit-down chain out of the southwestern Pennsylvania market.
Latest developments: TribLive reported June 27 that the Burrell School District has enrolled fewer than 100 kindergartners for three straight years, a 23% drop from a decade ago, mirroring a broader regional decline.
Public districts across the region, Burrell among them, keep shedding students, and Burrell's kindergarten classes have fallen 23% over ten years, squeezing budgets that rise and fall with enrollment.
Latest developments: Governor Josh Shapiro and Republican challenger Stacy Garrity each said June 27 they are willing to debate in this year's Pennsylvania governor's race.
Democratic Governor Josh Shapiro and his GOP opponent, state Treasurer Stacy Garrity, both signaled they would share a debate stage ahead of Pennsylvania's November gubernatorial election.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: OpenStreetsPGH returns Sunday, June 28, closing roads from Downtown to the South Side to cars for walking and biking, with streets reopening by 3 p.m., WPXI reported.
OpenStreetsPGH opens a car-free route running from Downtown through the South Side on Sunday, June 28, for walking, biking, and rolling; the roads reopen by 3 p.m., so drivers nearby should expect delays.
Latest developments: The Carnegie Museum of Natural History will close its 'Polar World' exhibit after 43 years, the Post-Gazette reported June 27.
After 43 years, the Carnegie Museum of Natural History in Oakland is closing 'Polar World,' the Arctic-and-Antarctic hall that generations of Pittsburgh schoolchildren walked through on field trips.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Pirates (41-41)
Fri Jun 26 · Reds 6 · Pirates 4 · Final
Marte's tiebreaking homer in 8th after 4-run inning against Skenes helps Reds beat Pirates 6-4
Sat Jun 27 · Reds 0 · Pirates 0 · Rain Delay, Top 1st (in progress at last update)
Up Next · Reds @ Pirates · Sun Jun 28, 1:35 PM
Latest developments: Pittsburgh lost its eighth straight game started by Paul Skenes on June 26, even after Konnor Griffin's leadoff homer, with his earned-run average up roughly a full run from this point last season.
The Pirates have now dropped eight consecutive games their ace, Paul Skenes, has started, and his ERA has climbed about a full run over last year, leaving the beat puzzling over what has changed with the reigning standout.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: A Post-Gazette feature June 26 marked manager Don Kelly's 100th career win, with players saying 'he deserves it.'
Pirates manager Don Kelly notched the 100th win of his managerial career, a milestone the clubhouse celebrated while hoping many more follow.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: In his June 24 reader chat, Post-Gazette Steelers writer Gerry Dulac took questions on Aaron Rodgers, Joey Porter, Will Howard, and rookie Drew Allar heading into 2026.
Post-Gazette beat writer Gerry Dulac's chat ran through the Steelers' quarterback room—Aaron Rodgers, Will Howard, and rookie Drew Allar—plus cornerback Joey Porter, as Pittsburgh works through a quiet offseason.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: A second-string United States lost 3-2 to Türkiye in its dead-rubber Group D finale, and ESPN wrote June 27 that coach Mauricio Pochettino used the night to evaluate his backups before the knockout round.
Already through as Group D winners and tournament co-hosts, the U.S. men rested starters and dropped a 3-2 result to Türkiye; Pochettino learned plenty about his second-stringers ahead of the World Cup round of 32, a match that means far more than the loss.
Sources: ESPN Soccer · ↑ top
S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1382 ▼ -1.3% GBP/USD 1.3200 ▼ -0.8% USD/JPY 161.63 ▲ +0.7%