================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, June 27, 2026 - 4:05 PM EDT ================================================================ Russian intelligence widened a years-long campaign to hijack the messaging accounts of officials and activists across Ukraine, Europe, and the United States, with Ukraine's SBU and the FBI laying the operation bare. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Russian intelligence keeps draining the messaging accounts of officials across three continents, with Ukraine's SBU and the FBI exposing a fake tech-support phishing campaign. see: Russian Intelligence Hijacks Messaging Accounts * [TREND] Local Linux root turned cheap as working public exploits landed within a day for the pedit COW and DirtyClone kernel privilege-escalation flaws. see: Linux Kernel Root Exploits: pedit COW and DirtyClone * [TREND] The software supply chain stays the favored on-ramp as Miasma malware burrows into fresh npm and Go packages even as the Linux Foundation stands up Akrites to speed patching. see: Miasma Malware Spreads Through npm and Go; Linux Foundation Launches Akrites for Open Source * [TREND] AI anxiety runs hot as OpenAI holds back broad GPT-5.6 access behind cyber safeguards, Newport urges firms to stop doom trolling, and Zitron chronicles an inflating bubble. see: OpenAI Restricts GPT-5.6 Sol With Cyber Safeguards; Dear AI Companies: Stop the "Doom Trolling"; Premium: Notes From The Bubble, Volume 1 * [UPDATE (new)] Iran answered American airstrikes with a drone assault on Bahrain near the 5th Fleet and a strike in the Strait of Hormuz, pushing oil above $70. see: Iran-U.S. Fighting Widens Across the Gulf * [UPDATE (new)] Pennsylvania politics and enrollment shift as Shapiro and Garrity agree to debate while Western Pa. districts keep losing kindergartners. see: Shapiro and Garrity Agree to Debate; Western Pa. Schools Keep Losing Students SECURITY ---------------------------------------------------------------- 1. RUSSIAN INTELLIGENCE HIJACKS MESSAGING ACCOUNTS Nation-State Activity · [apt, phishing] Latest developments: Ukraine's SBU, working with the FBI, disclosed on June 27 a long-running Russian operation that uses fake tech-support staff to coax government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States into surrendering messaging-app credentials. Russian intelligence services run phishing operations that impersonate tech support to harvest credentials for Signal, WhatsApp, and Telegram accounts belonging to officials, soldiers, and activists, and a newer step coaxes Signal users into handing over their Backup Recovery Key. Targets should enable phishing-resistant authentication and guard backup recovery keys. - The Hacker News: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html - The Record: https://therecord.media/russia-ukraine-social-engineering-messaging-accounts - BleepingComputer: https://www.bleepingcomputer.com/news/security/fbi-russian-hackers-now-target-signal-backup-recovery-keys/ 2. OPENAI RESTRICTS GPT-5.6 SOL WITH CYBER SAFEGUARDS AI Security · [ai, policy] Latest developments: OpenAI on June 27 released three versions of GPT-5.6—Sol, Terra, and Luna—as a limited preview to a small set of companies under an engagement with the U.S. government, holding back broad access and building its strongest cyber safeguards into the flagship Sol model. The restricted rollout reflects mounting concern that frontier models sharpen both attackers and defenders. Sol leads on capability, Terra balances cost and power, and Luna targets speed and affordability. - The Hacker News: https://thehackernews.com/2026/06/openai-limits-gpt-56-rollout-as-sol.html 3. CHINESE TOOLKIT POWERS 200,000 SCAM SITES Fraud and Scams · [fraud, scam] Latest developments: SecurityWeek reported on June 27 that threat actors are selling investment-scam templates built with DCloud's legitimate Uni-App development toolkit, a Chinese framework now powering roughly 200,000 fraudulent sites. The kits let low-skill operators spin up convincing investment-fraud pages at scale. Defenders should track the shared Uni-App fingerprints to detect and block the sites. - SecurityWeek: https://www.securityweek.com/chinese-framework-powers-200000-scam-sites/ 4. LINUX KERNEL ROOT EXPLOITS: PEDIT COW AND DIRTYCLONE Vulnerabilities and Exploits · [zero-day, patch, exploit] Latest developments: Researchers published working exploits within a day of disclosure for two kernel privilege-escalation bugs—CVE-2026-46331, called pedit COW, an out-of-bounds write in the act_pedit traffic-control action that surfaced June 16, and CVE-2026-43503, called DirtyClone, a CVSS 8.8 flaw in the DirtyFrag family that JFrog demonstrated June 25. Both flaws let a local unprivileged user corrupt shared page-cache memory through crafted or cloned network packets and escalate to root on affected Linux systems. Administrators should apply the kernel patches at once. - The Hacker News: https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html - The Hacker News: https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html 5. LINUX FOUNDATION LAUNCHES AKRITES FOR OPEN SOURCE Application Security · [open-source, policy] Latest developments: The Linux Foundation launched Akrites on June 26, an industry initiative uniting technology firms, banks, security vendors, AI companies, and open source projects to report, patch, and disclose vulnerabilities in widely used open source software as AI compresses the gap between flaw discovery and exploitation. Akrites gives critical open source projects shared tooling and coordinated channels for vulnerability handling. Enterprises that depend on open source components gain a faster, more compliant remediation path. - Help Net Security: https://www.helpnetsecurity.com/2026/06/26/akrites-open-source-security-framework/ - SecurityWeek: https://www.securityweek.com/linux-foundation-unveils-new-open-source-security-project-akrites/ 6. MIASMA MALWARE SPREADS THROUGH NPM AND GO Application Security · [supply-chain, malware] Latest developments: Researchers flagged a fresh evolution of the Mini Shai-Hulud, Miasma, and Hades supply-chain family that poisoned new npm releases tied to LeoPlatform and RStreams, abused GitHub Actions workflows, and propagated into the Go ecosystem. The self-propagating malware steals secrets from developer pipelines and published packages. Teams should pin dependency versions, audit GitHub Actions permissions, and rotate any exposed tokens. - The Hacker News: https://thehackernews.com/2026/06/miasma-malware-targets-npm-packages-and.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran-U.S. Fighting Widens Across the Gulf Latest developments: Iran answered the overnight American airstrikes on June 27 with a drone assault on Bahrain, home to the U.S. Navy's 5th Fleet, and another strike on a ship in the Strait of Hormuz, pushing oil back above $70 a barrel. The United States struck Iran overnight after Tehran's drone hit a container ship in the Strait of Hormuz, which Washington called a violation of the ceasefire the two sides signed earlier in June; a third straight day of tit-for-tat strikes now threatens to unravel that interim deal. - WSJ World News: https://www.wsj.com/world/middle-east/mideast-fighting-widens-with-attacks-on-bahrain-hormuz-tanker-30a313a8 - FT World: https://www.ft.com/content/f9a4ca8d-d29c-4a7d-8791-8999d84317ae - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-futures-fall-on-likely-technical-correction-93e57fe0?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Showers And Thunderstorms Likely, high 79F. Tonight: Showers And Thunderstorms Likely then Patchy Fog, low 66F. Sunday: Partly Sunny then Chance Showers And Thunderstorms, high 85F. Business: * Outback Steakhouse Closes in Washington Latest developments: Outback Steakhouse permanently shut its Washington, Pennsylvania, restaurant after 20 years, WTAE reported June 27. The Outback Steakhouse in Washington, Pennsylvania, closed for good after two decades, pulling another national sit-down chain out of the southwestern Pennsylvania market. - WTAE: https://www.wtae.com/article/outback-steakhouse-washington-pennsylvania-closes/71756573 Around town: * Western Pa. Schools Keep Losing Students Latest developments: TribLive reported June 27 that the Burrell School District has enrolled fewer than 100 kindergartners for three straight years, a 23% drop from a decade ago, mirroring a broader regional decline. Public districts across the region, Burrell among them, keep shedding students, and Burrell's kindergarten classes have fallen 23% over ten years, squeezing budgets that rise and fall with enrollment. - TribLive: https://triblive.com/local/regional/public-schools-continue-to-grapple-with-enrollment-declines/ * Shapiro and Garrity Agree to Debate Latest developments: Governor Josh Shapiro and Republican challenger Stacy Garrity each said June 27 they are willing to debate in this year's Pennsylvania governor's race. Democratic Governor Josh Shapiro and his GOP opponent, state Treasurer Stacy Garrity, both signaled they would share a debate stage ahead of Pennsylvania's November gubernatorial election. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/06/27/pa-governor-race-shapiro-garrity-debate/stories/202606240061 Events: * OpenStreetsPGH Closes Downtown-to-South Side Route Latest developments: OpenStreetsPGH returns Sunday, June 28, closing roads from Downtown to the South Side to cars for walking and biking, with streets reopening by 3 p.m., WPXI reported. OpenStreetsPGH opens a car-free route running from Downtown through the South Side on Sunday, June 28, for walking, biking, and rolling; the roads reopen by 3 p.m., so drivers nearby should expect delays. - WPXI: https://www.wpxi.com/news/local/openstreetspgh-close-roads-downtown-south-side-sunday/YKJJ3O75EJHEPLWZHOA2DJCUOU/ * Carnegie Museum Retires 'Polar World' Latest developments: The Carnegie Museum of Natural History will close its 'Polar World' exhibit after 43 years, the Post-Gazette reported June 27. After 43 years, the Carnegie Museum of Natural History in Oakland is closing 'Polar World,' the Arctic-and-Antarctic hall that generations of Pittsburgh schoolchildren walked through on field trips. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/ae/art-architecture/2026/06/27/polar-world-carnegie-museum-of-natural-history-closure/stories/202606280064 SPORTS ---------------------------------------------------------------- Pirates (41-41) Fri Jun 26 · Reds 6 · Pirates 4 · Final Marte's tiebreaking homer in 8th after 4-run inning against Skenes helps Reds beat Pirates 6-4 https://plaintextsports.com/mlb/2026-06-26/cin-pit Sat Jun 27 · Reds 0 · Pirates 0 · Rain Delay, Top 1st (in progress at last update) https://plaintextsports.com/mlb/2026-06-27/cin-pit Up Next · Reds @ Pirates · Sun Jun 28, 1:35 PM https://plaintextsports.com/mlb/2026-06-28/cin-pit Around the Teams: * Pirates Winless in Paul Skenes' Starts Latest developments: Pittsburgh lost its eighth straight game started by Paul Skenes on June 26, even after Konnor Griffin's leadoff homer, with his earned-run average up roughly a full run from this point last season. The Pirates have now dropped eight consecutive games their ace, Paul Skenes, has started, and his ERA has climbed about a full run over last year, leaving the beat puzzling over what has changed with the reigning standout. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/06/26/mlb-nl-central-pirates-reds-paul-skenes-konnor-griffin/stories/202606260047 * Don Kelly Reaches 100 Managerial Wins Latest developments: A Post-Gazette feature June 26 marked manager Don Kelly's 100th career win, with players saying 'he deserves it.' Pirates manager Don Kelly notched the 100th win of his managerial career, a milestone the clubhouse celebrated while hoping many more follow. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/06/26/kelly-100-wins-manager-mlb-postseason/stories/202606250057 * Dulac Fields Steelers Quarterback Questions Latest developments: In his June 24 reader chat, Post-Gazette Steelers writer Gerry Dulac took questions on Aaron Rodgers, Joey Porter, Will Howard, and rookie Drew Allar heading into 2026. Post-Gazette beat writer Gerry Dulac's chat ran through the Steelers' quarterback room—Aaron Rodgers, Will Howard, and rookie Drew Allar—plus cornerback Joey Porter, as Pittsburgh works through a quiet offseason. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/06/24/nfl-news-joey-porter-rodgers-mccarthy-will-howard-allar/stories/202606240035 Team USA: * USMNT Falls to Türkiye in Group Finale Latest developments: A second-string United States lost 3-2 to Türkiye in its dead-rubber Group D finale, and ESPN wrote June 27 that coach Mauricio Pochettino used the night to evaluate his backups before the knockout round. Already through as Group D winners and tournament co-hosts, the U.S. men rested starters and dropped a 3-2 result to Türkiye; Pochettino learned plenty about his second-stringers ahead of the World Cup round of 32, a match that means far more than the loss. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49183383/usmnt-heed-world-cup-lessons-learned-loss-turkiye READING ---------------------------------------------------------------- * Ed Zitron -- Premium: Notes From The Bubble, Volume 1 Zitron launches an ongoing series chronicling what he argues is an inflating AI and tech investment bubble, collecting the warning signs he sees building across the industry. https://www.wheresyoured.at/premium-notes-from-the-bubble-volume-1/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field about how he built the design company and why he believes AI works as a tailwind rather than a threat to its business. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ * Cal Newport -- Dear AI Companies: Stop the "Doom Trolling" Newport argues AI firms undercut their own credibility by publishing alarmist warnings about the dangers of their own products, a self-defeating marketing reflex he likens to a carmaker fretting publicly over its bestselling truck. https://calnewport.com/dear-ai-companies-stop-the-doom-trolling/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1382 ▼ -1.3% GBP/USD 1.3200 ▼ -0.8% USD/JPY 161.63 ▲ +0.7% ================================================================ Generated 2026-06-27 16:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================