daily plain-text briefing: security, markets, business, and pittsburgh
Ukraine's security service and the FBI jointly pin a long-running messaging-credential theft campaign on Russian intelligence, while criminals turn a legitimate Chinese app framework into 200,000 scam sites.
Latest developments: The SANS Internet Storm Center noted on June 28 that the YARA-X engine released versions 1.18.0 and 1.19.0, carrying three improvements and two bug fixes.
YARA-X is the Rust rewrite of YARA, the pattern-matching engine analysts use to write rules that identify and classify malware families. Rule authors and detection engineers should test the new builds and upgrade.
Sources: SANS Internet Storm Center · ↑ top
Latest developments: Ukraine's Security Service and the FBI jointly disclosed the campaign on June 27, naming fake tech-support text messages as the lure and widening the known victim pool to government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States.
Russian intelligence services send targets counterfeit account-support texts that harvest login codes and recovery details for Signal and similar apps, then read message history through stolen backups. Treat unsolicited support messages and any device-linking or backup-key request as hostile.
Sources: The Hacker News · ↑ top
Latest developments: SecurityWeek reported on June 27 that threat actors sell investment-scam templates built with DCloud's legitimate Uni-App toolkit, fueling roughly 200,000 fraudulent sites.
DCloud's Uni-App is a mainstream cross-platform app-development kit; sellers package ready-made trading and crypto scam templates on top of it, letting low-skill fraudsters spin up convincing investment sites at scale. Block the associated domains and warn users away from too-good-to-be-true platforms.
Sources: SecurityWeek · ↑ top
Latest developments: Dark Reading reported on June 27 that rising third-party attacks force schools, universities, and districts onto the defensive to shield student data from ransomware and theft.
Attackers breach the software and service vendors that educational institutions depend on, then steal or extort the student and staff records those institutions hold. Schools should inventory vendor access, demand breach-notification terms, and minimize data shared with third parties.
Sources: Dark Reading · ↑ top
Latest developments: After a day of fresh exchanges that saw Iran fire drones and missiles at Bahrain and Kuwait, Washington and Tehran agreed late June 28 to stop fighting over the Strait of Hormuz and resume talks toward a long-term deal.
The United States and Iran, whose strikes and counterstrikes had pushed a preliminary peace deal to the brink and choked tanker traffic through the Strait of Hormuz, agreed to a halt and to restart negotiations aimed at ending hostilities and restraining Tehran's nuclear program; oil rose on the renewed supply fears.
Sources: WSJ World News · FT World · WSJ Markets · ↑ top
Latest developments: The Bank for International Settlements warned June 28 that AI "exuberance" risks ending in a lengthy investment bust that could threaten the global economy, as gold and other risk assets sold off on souring AI sentiment.
The Basel-based BIS, the central bank for central banks, cautioned that weak returns on artificial-intelligence spending could trigger a sharp pullback in funding for tech companies, with spillover into the broader economy; short-seller Carson Block, writing in the Economist, argued the eventual reckoning would be harder to manage than the 2008 financial crisis.
Sources: FT World · The Economist · ↑ top
Tonight: Partly Cloudy then Widespread Fog, low 68F.
Monday: Widespread Fog then Partly Sunny, high 90F.
Monday Night: Partly Cloudy, low 72F.
Latest developments: U.S. Representative Scott Perry of York County joined a push to revoke the 17th Amendment, which would strip Pennsylvania voters of the power to elect their U.S. senators directly.
The 17th Amendment, ratified in 1913, lets voters choose U.S. senators; Perry's effort would return that choice to state legislatures, a change that would reshape how Pennsylvania fills its two Senate seats.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Castle Shannon police asked residents for information after a string of vehicle thefts and damage over the June 26-27 weekend, urging people to lock their cars.
The borough's police department in Allegheny County's South Hills said thieves struck multiple vehicles, taking items and causing damage, and is seeking tips from residents.
Pirates (42-42)
Sat Jun 27 · Reds 9 · Pirates 7 · Final
Eugenio Suárez hits 3-run homer in 9th as Reds rally for 9-7 win over Pirates
Sun Jun 28 · Reds 4 · Pirates 9 · Final
Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds
Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM
Latest developments: The Steelers' team channel posted a "No days off" clip showing defensive captain Cam Heyward, edge rusher Nick Herbig, and defensive tackle Keeanu Benton working out together this offseason.
With camp approaching, the team's social channels highlighted core defenders Cam Heyward, Nick Herbig, and Keeanu Benton training as a group, a glimpse of the front seven's conditioning before the 2026 season.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: American swimmer Gretchen Walsh broke the women's 50-meter freestyle world record on June 28, just nine days after her training partner Kate Douglass had set the previous mark.
Walsh, one of the United States' top sprint swimmers, lowered the global standard in the splash-and-dash event, the second American record in the distance within two weeks as she and Douglass trade the fastest time in the sport.
Sources: ESPN Olympics · ↑ top
Latest developments: Entering the World Cup round of 32, ESPN reported the U.S. men's roster is stocked with leaders of varied temperaments well beyond captain Tim Ream, a dynamic the team credits for its group-stage success as co-host.
The United States, which won Group D and faces Bosnia and Herzegovina in the round of 32, heads into the knockout stage of the World Cup it co-hosts with Canada and Mexico, with coaches and players pointing to a deep pool of veteran leadership.
Sources: ESPN Soccer · ↑ top
S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1397 ▼ -1.4% GBP/USD 1.3202 ▼ -1.2% USD/JPY 161.63 ▲ +0.7%