daily plain-text briefing: security, markets, business, and pittsburgh
Two new Linux kernel root exploits and the Miasma supply-chain worm pile fresh pressure on open source software, prompting the Linux Foundation to launch a coordinated defense.
Latest developments: Ukraine's Security Service, working with the FBI, disclosed a long-running Russian intelligence operation that used fake tech-support workers and support texts to trick officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States into surrendering messaging-app credentials.
The campaign, which recently added a step coaxing Signal users to hand over their Backup Recovery Key, lets Russian operators restore account backups and read private message history. CISA and the FBI urge messaging users to reject unsolicited support contacts and protect recovery keys.
Sources: The Hacker News · The Record · CISA Advisories · ↑ top
Latest developments: SecurityWeek reported that threat actors sell investment-scam templates built with the legitimate Chinese DCloud Uni-App development toolkit, fueling roughly 200,000 fraudulent sites.
The ready-made kits let low-skill criminals stand up convincing investment-fraud pages at scale by repurposing a mainstream cross-platform app framework. Defenders should watch for Uni-App fingerprints when triaging suspected scam infrastructure.
Sources: SecurityWeek · ↑ top
Latest developments: The Linux Foundation unveiled Akrites, an industry initiative joining technology companies, financial institutions, security vendors, AI companies, and open source projects to report, patch, and disclose vulnerabilities in widely used open source software.
Akrites responds to AI shrinking the gap between flaw discovery and exploitation, while a separate Open Source Sustainability Initiative tackles the risk of aging, end-of-life projects. Enterprises depending on open source should track both efforts to manage remediation and compliance.
Sources: Help Net Security · SecurityWeek · Dark Reading · ↑ top
Latest developments: Two separate local privilege-escalation flaws surfaced with public proof-of-concept code, pedit COW (CVE-2026-46331) in the traffic-control act_pedit action and DirtyClone (CVE-2026-43503, CVSS 8.8) in the DirtyFrag family.
Both flaws let a local unprivileged user corrupt shared file-backed page-cache memory and gain root on affected Linux systems, with pedit COW spawning a working exploit within a day of its June 16 CVE assignment and JFrog publishing a DirtyClone exploit walkthrough June 25. Administrators should apply the upstream kernel patches immediately.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Cisco acquired Astrix and WideField to add non-human identity security to its stack, and Proof launched x401, an open, issuer-neutral protocol that lets any website or API verify the identity and authorization behind an AI agent.
Vendors are racing to govern autonomous agents that inherit permissions and act at machine speed, treating identity as the primary control. Security teams deploying agentic tools should inventory non-human identities and demand verifiable agent credentials.
Sources: Dark Reading · Help Net Security · ↑ top
Latest developments: The Mini Shai-Hulud malware family evolved again as Miasma, poisoning new npm releases tied to LeoPlatform and RStreams, abusing GitHub Actions workflows, and propagating into the Go ecosystem.
Miasma, part of a lineage that also includes the Hades malware, compromises packages and continuous-integration pipelines to spread through open source dependencies. Developers pulling affected npm or Go packages should audit builds and rotate any exposed CI secrets.
Sources: The Hacker News · ↑ top
Latest developments: Iran retaliated on June 28 by hitting military installations in Bahrain and Kuwait and warning of a complete halt to the negotiations meant to end the war.
A preliminary ceasefire between the United States and Iran is unraveling as the two trade strikes; Iran's new attacks on the U.S. Navy's Mideast headquarters in Bahrain and on Kuwait followed American airstrikes inside Iran, pushing Strait of Hormuz shipping risk higher as the strait stays restricted to half its prewar traffic.
Sources: FT World · WSJ World News · ↑ top
Latest developments: The Bank for International Settlements warned June 28 that AI 'exuberance' could end in a drawn-out investment bust, capping a week in which the S&P 500 and Nasdaq composite fell in every session.
The Basel-based central bankers' bank cautioned that weak AI returns could trigger a sharp pullback in tech funding that threatens the global economy, a warning landing as chipmaker valuations sit at records worldwide and Google caps Meta's use of its Gemini models amid a computing-capacity crunch.
Sources: FT World · WSJ Markets · ↑ top
Today: Widespread Fog then Chance Showers And Thunderstorms, high 85F.
Tonight: Chance Showers And Thunderstorms then Partly Cloudy, low 67F.
Monday: Mostly Sunny, high 90F.
Latest developments: The Post-Gazette reported June 28 that specialty-metals maker AMG will build the first new chrome production facility in the United States in decades in New Castle.
AMG's New Castle plant in Lawrence County will produce chrome metal used in airplanes, jet engines, and rockets, the first such U.S. facility in decades.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: WTAE reported June 27 that the Outback Steakhouse in Washington, Pennsylvania, has permanently closed after two decades.
The Outback Steakhouse in Washington, Washington County, shut its doors for good after 20 years in business.
Latest developments: The Post-Gazette reported June 28 that Pennsylvania lawmakers may need to draw on the commonwealth's rainy day reserves to balance this year's budget.
With revenue falling short, Pennsylvania legislators are weighing a withdrawal from the state's rainy day fund to close this year's budget gap.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: U.S. Senators Dave McCormick and John Fetterman announced June 27 that Pennsylvania will be represented at President Trump's Great American State Fair after Governor Josh Shapiro declined to take part.
After Governor Josh Shapiro said Pennsylvania would skip President Trump's Great American State Fair, the state's two senators, Republican Dave McCormick and Democrat John Fetterman, arranged for the Keystone State to participate.
Latest developments: Allegheny County Sheriff Kevin Kraus warned June 27 of a phone scam threatening residents with arrest for allegedly missing federal grand jury duty.
Sheriff Kevin M. Kraus alerted Allegheny County residents to callers who threaten arrest over a supposedly missed federal grand jury summons to extract money or personal information.
Latest developments: The Post-Gazette reported June 27 that the Carnegie Museum of Natural History will close its Polar World exhibit after 43 years.
Polar World, the 43-year-old exhibit on Arctic and Antarctic life at the Carnegie Museum of Natural History in Oakland, is closing, ending more than four decades on display.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Pirates (41-42)
Sat Jun 27 · Reds 9 · Pirates 7 · Final
Eugenio Suárez hits 3-run homer in 9th as Reds rally for 9-7 win over Pirates
Up Next · Reds @ Pirates · Sun Jun 28, 1:35 PM
Latest developments: With the full bracket set and the round of 32 opening June 28, analysts mapped the United States' route to the title, projecting potential meetings with Spain, France, and England.
Mauricio Pochettino's United States, winners of Group D as co-hosts, open the knockout stage against Bosnia and Herzegovina; a run to the final would likely require beating Spain, France, and England.
Sources: Guardian World Cup 2026 · ESPN Soccer · ↑ top
Latest developments: An ESPN feature June 28 attributed the United States' run to a roster full of leaders as the team enters the knockout rounds.
ESPN argued the U.S. men's national team's World Cup success stems from a squad rich in leaders of varied temperaments, with captain Tim Ream among many setting the tone.
Sources: ESPN Soccer · ↑ top
S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1382 ▼ -1.3% GBP/USD 1.3200 ▼ -0.8% USD/JPY 161.63 ▲ +0.7%