================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, June 28, 2026 - 12:04 PM EDT ================================================================ KDDI Corporation disclosed a breach of a shared email system that exposed up to 14.2 million logins across six Japanese internet providers. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Breaches keep surfacing through shared infrastructure, as KDDI's email platform serving five rival ISPs exposed millions of logins while schools fight ransomware funneled through their vendors. see: KDDI Email Breach Hits Six Japanese ISPs; Third-Party Breaches Strain the Education Sector * [TREND] Russian intelligence sharpened credential theft with fake technical-support texts hitting the messaging accounts of officials across Ukraine, Europe, and the United States. see: Russian Intelligence Steals Messaging Credentials * [TREND] Criminals bend legitimate tooling and authority toward fraud, turning the DCloud Uni-App framework into 200,000 investment-scam sites as a jury-duty phone scam threatens Allegheny County residents. see: DCloud Uni-App Framework Powers 200,000 Scam Sites; Sheriff Warns of Jury Duty Phone Scam * [TREND] AI-bubble anxiety mounted as the BIS warned of a prolonged investment bust, Zitron began chronicling overspending, and Newport called out vendors' doom-trolling hype. see: BIS Warns AI Boom Risks a Lengthy Bust; Premium: Notes From The Bubble, Volume 1; Dear AI Companies: Stop the "Doom Trolling" * [UPDATE (new)] Cisco moved to acquire Astrix and WideField, folding non-human identity controls into its stack as identity becomes the control plane for the agentic workforce. see: Cisco Buys Astrix and WideField for Non-Human Identity * [UPDATE (new)] Iran widened retaliation to Kuwait and Bahrain, threatened to halt peace talks, and claimed sole Iranian control of the Strait of Hormuz. see: Iran-U.S. Strikes Widen to Bahrain and Kuwait SECURITY ---------------------------------------------------------------- 1. KDDI EMAIL BREACH HITS SIX JAPANESE ISPS Data Breaches · [breach, credentials] Latest developments: KDDI Corporation disclosed on June 28 that intruders reached an email system it operates for five other Japanese internet service providers, exposing up to 14.2 million email logins. The compromised platform serves KDDI and five partner carriers across Japan; affected customers should reset their email passwords and watch for credential stuffing against reused logins. - BleepingComputer: https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/ 2. RUSSIAN INTELLIGENCE STEALS MESSAGING CREDENTIALS Nation-State Activity · [apt, phishing] Latest developments: Ukraine's Security Service said on June 27 that it and the FBI uncovered a long-running Russian intelligence campaign using fake technical-support texts to break into the messaging accounts of government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States. The operation phishes Signal and other messengers, lately coaxing victims into surrendering their Signal Backup Recovery Key to restore the backup and read private message history; targets should reject unsolicited support messages and guard backup keys. - The Hacker News: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/fbi-russian-hackers-now-target-signal-backup-recovery-keys/ - The Hacker News: https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html 3. THIRD-PARTY BREACHES STRAIN THE EDUCATION SECTOR Data Breaches · [breach, ransomware] Latest developments: Dark Reading reported on June 27 that rising third-party attacks force schools and universities to defend student data against ransomware funneled through their vendors. Attackers increasingly reach educational institutions through breached suppliers, putting student records at risk; schools and universities need tighter vendor vetting and continuous monitoring. - Dark Reading: https://www.darkreading.com/cyber-risk/third-party-breaches-teaches-education-lesson-vendor-risk 4. DCLOUD UNI-APP FRAMEWORK POWERS 200,000 SCAM SITES Ransomware and Cybercrime · [fraud, scam] Latest developments: SecurityWeek reported on June 27 that threat actors sell investment-scam templates built with the legitimate DCloud Uni-App toolkit, fueling roughly 200,000 fraudulent sites. DCloud's Uni-App is a legitimate cross-platform development toolkit; criminals repackage it into ready-made investment-scam templates and sell them, spawning around 200,000 fraudulent sites that bilk victims. - SecurityWeek: https://www.securityweek.com/chinese-framework-powers-200000-scam-sites/ 5. CISCO BUYS ASTRIX AND WIDEFIELD FOR NON-HUMAN IDENTITY Identity and Access Management · [identity, m&a] Latest developments: Cisco moved on June 26 to acquire Astrix and WideField, folding non-human identity controls into its security stack and betting that identity becomes the primary control plane for the agentic workforce. Astrix and WideField secure non-human identities such as service accounts, API keys, and AI agents; Cisco's purchase makes identity the central control across its security platform. - Dark Reading: https://www.darkreading.com/identity-access-management-security/cisco-adds-nhi-security-stack-with-astrix-widefield BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran-U.S. Strikes Widen to Bahrain and Kuwait Latest developments: Iran extended its retaliation to Kuwait on June 28, threatened a complete halt to the peace talks if Washington keeps striking, and its foreign minister claimed sole Iranian control of the Strait of Hormuz, going beyond the second-day strikes and Bahrain drone assault reported June 27. Iran hit Bahrain and Kuwait in response to renewed U.S. airstrikes inside Iran, straining the preliminary ceasefire, while Tehran asserted command of the Strait of Hormuz—the chokepoint for roughly a fifth of the world's oil—and NYK chief executive Takaya Soga warned that sea mines will hold shipping there to half of prewar levels for months. - WSJ World News: https://www.wsj.com/world/middle-east/iran-asserts-sole-control-of-hormuz-warns-challenges-will-bring-more-violence-5abea3c7 - FT World: https://www.ft.com/content/5f4cd16c-fa4a-4806-94ce-84df6f51ecc0 - FT World: https://www.ft.com/content/a0739198-318c-4ae8-9953-ba88201edc45 * BIS Warns AI Boom Risks a Lengthy Bust Latest developments: The Bank for International Settlements warned June 28 that AI 'exuberance' could end in a prolonged investment bust threatening the global economy, the same week the S&P 500 and Nasdaq fell in every session. The Basel-based central bankers' bank cautioned that weak returns on AI spending could trigger a sharp pullback in funding for tech companies, a warning that landed alongside short-seller Carson Block's essay on a coming crash and analyses flagging globally stretched chipmaker valuations. - FT World: https://www.ft.com/content/e81ce414-e4bd-4e8c-bac7-94f7bf17def4 - WSJ Markets: https://www.wsj.com/finance/stocks/stock-rally-collides-with-a-new-slate-of-worries-5843a9e0?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Chance Showers And Thunderstorms, high 85F. Tonight: Chance Showers And Thunderstorms then Partly Cloudy, low 67F. Monday: Mostly Sunny, high 90F. Business: * First U.S. Chrome Plant in Decades Lands in New Castle Latest developments: AMG will open the first chrome production facility built in the United States in decades, in New Castle, the Post-Gazette reported June 28. The plant in New Castle, Lawrence County, will produce chrome used in airplanes, engines, and rockets, reviving domestic output of a metal long sourced abroad. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/06/28/chrome-maker-amg-new-castle/stories/202606250007 * Pennsylvania May Tap Rainy Day Fund to Close Budget Latest developments: The Post-Gazette reported June 28 that lawmakers may have to draw on Pennsylvania's rainy day reserves to balance this year's state budget. Harrisburg faces a shortfall large enough that legislators are weighing tapping the commonwealth's emergency savings, raising the prospect of a budget that leans on reserves rather than recurring revenue. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/06/28/pa-budget-2026-rainy-day-fund/stories/202606280069 * Caliente Pizza Wins 10th World Title in Naples Latest developments: Caliente Pizza & Drafthouse returned from the Caputo Cup in Naples, Italy, with its 10th world championship title, WPXI reported June 28. The Pittsburgh-area pizzeria competed against the world's top makers at the prestigious Caputo Cup in Naples, the birthplace of the pizza, adding another championship to a long run of wins. - WPXI: https://www.wpxi.com/news/local/caliente-wins-10th-world-championship-title-international-pizza-making-competition/O2KZJJVBERHMTAVWPL4HNMQXLI/ Around town: * North Irwin Route 993 Bridge Finally Breaks Ground Latest developments: TribLive reported June 28 that construction of the new Route 993 bridge will begin after more than a dozen years of planning, design, and fundraising. The new span carrying Route 993 links North Huntingdon to North Irwin in Westmoreland County, replacing a crossing whose replacement stalled through 12 years of delay. - TribLive: https://triblive.com/local/westmoreland/north-irwin-route-993-bridge-construction-set-to-begin-after-12-year-delay/ * Sheriff Warns of Jury Duty Phone Scam Latest developments: Allegheny County Sheriff Kevin M. Kraus issued a warning June 28 about a phone scam threatening arrest over missed federal grand jury duty. Callers posing as authorities tell county residents they face arrest for skipping federal grand jury service, a ruse Sheriff Kraus says aims to frighten people into paying. - WPXI: https://www.wpxi.com/news/local/allegheny-county-sheriff-warns-jury-duty-phone-scam/PPV5ZGPFLZFBLODH4O5QIFSEXU/ * Route 910 Paving Hits Another Stretch Latest developments: WPXI reported June 28 that a paving project will affect another section of Route 910, Gibsonia Road, for months. Drivers on Route 910 in the northern Allegheny County suburbs face months of construction as crews pave a further stretch of the Gibsonia Road corridor. - WPXI: https://www.wpxi.com/news/local/paving-project-start-another-section-route-910/W264G6SGEFHSBOZPQBGPXBPS4Q/ Events: * Northside Music Festival Returns July 10-12 Latest developments: TribLive reported June 28 that the Northside Music Festival returns for a fourth year, running July 10 through 12, a Friday through Sunday. The Northside Music Festival fills the North Side's streets and businesses with a curated lineup of musical acts from Friday, July 10, through Sunday, July 12. - TribLive: https://triblive.com/aande/music/northside-music-festival-set-to-return-for-4th-year/ SPORTS ---------------------------------------------------------------- Pirates (41-42) Sat Jun 27 · Reds 9 · Pirates 7 · Final Eugenio Suárez hits 3-run homer in 9th as Reds rally for 9-7 win over Pirates https://plaintextsports.com/mlb/2026-06-27/cin-pit Up Next · Reds @ Pirates · Sun Jun 28, 1:35 PM https://plaintextsports.com/mlb/2026-06-28/cin-pit Team USA: * USMNT Carries Deep Leadership Into Knockouts Latest developments: ESPN wrote June 28 that the U.S. men's roster is full of leaders of varied temperaments, beyond captain Tim Ream, as the team enters the World Cup round of 32. ESPN argued the United States' knockout-round success traces to a locker room rich in leadership of different types, with the co-hosts set to face Bosnia and Herzegovina after winning Group D. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49196528/usmnt-squad-full-leaders-world-cup-knockouts-not-just-captain-ream * U.S. Run Makes Sportsbooks Nervous Latest developments: ESPN reported June 28 that the United States' momentum entering the knockout stage will have sportsbooks sweating more with each win. France and Argentina top the World Cup title odds as the round of 32 opens, but the host United States' positive form has bookmakers bracing, since heavy public backing leaves them exposed every time the Americans advance. - ESPN Soccer: https://www.espn.com/sports-betting/story/_/id/49207302/france-argentina-top-world-cup-odds-us-puts-sportsbooks-risk READING ---------------------------------------------------------------- * Ed Zitron -- Premium: Notes From The Bubble, Volume 1 Zitron launches a running series chronicling what he sees as the inflating and increasingly precarious AI investment bubble, gathering ongoing evidence of overspending and weak returns across the tech industry. https://www.wheresyoured.at/premium-notes-from-the-bubble-volume-1/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Field discusses building Figma and argues that AI works as a tailwind for the design company rather than a threat, expanding the market for the kind of work Figma's tools enable. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ * Cal Newport -- Dear AI Companies: Stop the "Doom Trolling" Newport criticizes AI firms for marketing their products through alarming claims about their own dangers, arguing the self-styled doom warnings function as hype rather than honest risk assessment. https://calnewport.com/dear-ai-companies-stop-the-doom-trolling/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1382 ▼ -1.3% GBP/USD 1.3200 ▼ -0.8% USD/JPY 161.63 ▲ +0.7% ================================================================ Generated 2026-06-28 12:04 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================