================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, June 28, 2026 - 9:06 PM EDT ================================================================ Ukraine's security service and the FBI jointly pin a long-running messaging-credential theft campaign on Russian intelligence, while criminals turn a legitimate Chinese app framework into 200,000 scam sites. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] State and criminal threats converge as Russian intelligence phishes messaging accounts, DCloud's Uni-App framework powers 200,000 scam sites, and third-party breaches batter the education sector. see: Russian Intelligence Phishes Messaging Accounts; Chinese Uni-App Framework Powers 200,000 Scam Sites; Third-Party Breaches Hit Education Sector * [TREND] AI-bubble fear runs through the day as the BIS warns of a bust, Zitron catalogs warning signs, Newport blasts doom trolling, and Figma's Field counters it's a tailwind. see: BIS Warns AI 'Exuberance' Could End in Bust; Premium: Notes From The Bubble, Volume 1; Dear AI Companies: Stop the "Doom Trolling"; An Interview with Figma CEO Dylan Field About Design and AI * [UPDATE (new)] The U.S. and Iran agreed late June 28 to halt fighting over the Strait of Hormuz and resume talks after Iran struck Bahrain and Kuwait. see: U.S. and Iran Agree to Halt Hormuz Fight * [UPDATE (new)] The YARA-X engine shipped versions 1.18 and 1.19 with three improvements and two bug fixes, per the SANS Internet Storm Center. see: YARA-X Ships Versions 1.18 and 1.19 * [UPDATE (new)] Locally, Representative Scott Perry backs repealing the 17th Amendment while Castle Shannon police seek tips on weekend car break-ins. see: Scott Perry Backs Repeal of 17th Amendment; Castle Shannon Reports Weekend Car Break-Ins SECURITY ---------------------------------------------------------------- 1. YARA-X SHIPS VERSIONS 1.18 AND 1.19 Threat Detection and Response · [tools, malware] Latest developments: The SANS Internet Storm Center noted on June 28 that the YARA-X engine released versions 1.18.0 and 1.19.0, carrying three improvements and two bug fixes. YARA-X is the Rust rewrite of YARA, the pattern-matching engine analysts use to write rules that identify and classify malware families. Rule authors and detection engineers should test the new builds and upgrade. - SANS Internet Storm Center: https://isc.sans.edu/diary/rss/33106 2. RUSSIAN INTELLIGENCE PHISHES MESSAGING ACCOUNTS Nation-State Activity · [apt, phishing, nation-state] Latest developments: Ukraine's Security Service and the FBI jointly disclosed the campaign on June 27, naming fake tech-support text messages as the lure and widening the known victim pool to government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States. Russian intelligence services send targets counterfeit account-support texts that harvest login codes and recovery details for Signal and similar apps, then read message history through stolen backups. Treat unsolicited support messages and any device-linking or backup-key request as hostile. - The Hacker News: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html 3. CHINESE UNI-APP FRAMEWORK POWERS 200,000 SCAM SITES Fraud and Scams · [scams, fraud] Latest developments: SecurityWeek reported on June 27 that threat actors sell investment-scam templates built with DCloud's legitimate Uni-App toolkit, fueling roughly 200,000 fraudulent sites. DCloud's Uni-App is a mainstream cross-platform app-development kit; sellers package ready-made trading and crypto scam templates on top of it, letting low-skill fraudsters spin up convincing investment sites at scale. Block the associated domains and warn users away from too-good-to-be-true platforms. - SecurityWeek: https://www.securityweek.com/chinese-framework-powers-200000-scam-sites/ 4. THIRD-PARTY BREACHES HIT EDUCATION SECTOR Data Breaches · [breach, third-party, education] Latest developments: Dark Reading reported on June 27 that rising third-party attacks force schools, universities, and districts onto the defensive to shield student data from ransomware and theft. Attackers breach the software and service vendors that educational institutions depend on, then steal or extort the student and staff records those institutions hold. Schools should inventory vendor access, demand breach-notification terms, and minimize data shared with third parties. - Dark Reading: https://www.darkreading.com/cyber-risk/third-party-breaches-teaches-education-lesson-vendor-risk BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. and Iran Agree to Halt Hormuz Fight Latest developments: After a day of fresh exchanges that saw Iran fire drones and missiles at Bahrain and Kuwait, Washington and Tehran agreed late June 28 to stop fighting over the Strait of Hormuz and resume talks toward a long-term deal. The United States and Iran, whose strikes and counterstrikes had pushed a preliminary peace deal to the brink and choked tanker traffic through the Strait of Hormuz, agreed to a halt and to restart negotiations aimed at ending hostilities and restraining Tehran's nuclear program; oil rose on the renewed supply fears. - WSJ World News: https://www.wsj.com/world/middle-east/iran-asserts-sole-control-of-hormuz-warns-challenges-will-bring-more-violence-5abea3c7 - FT World: https://www.ft.com/content/5f4cd16c-fa4a-4806-94ce-84df6f51ecc0 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-renewed-supply-disruption-concerns-887b1808?mod=rss_markets_main * BIS Warns AI 'Exuberance' Could End in Bust Latest developments: The Bank for International Settlements warned June 28 that AI "exuberance" risks ending in a lengthy investment bust that could threaten the global economy, as gold and other risk assets sold off on souring AI sentiment. The Basel-based BIS, the central bank for central banks, cautioned that weak returns on artificial-intelligence spending could trigger a sharp pullback in funding for tech companies, with spillover into the broader economy; short-seller Carson Block, writing in the Economist, argued the eventual reckoning would be harder to manage than the 2008 financial crisis. - FT World: https://www.ft.com/content/e81ce414-e4bd-4e8c-bac7-94f7bf17def4 - The Economist: https://www.economist.com/by-invitation/2026/06/28/if-you-thought-the-global-financial-crisis-was-bad PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Partly Cloudy then Widespread Fog, low 68F. Monday: Widespread Fog then Partly Sunny, high 90F. Monday Night: Partly Cloudy, low 72F. Around town: * Scott Perry Backs Repeal of 17th Amendment Latest developments: U.S. Representative Scott Perry of York County joined a push to revoke the 17th Amendment, which would strip Pennsylvania voters of the power to elect their U.S. senators directly. The 17th Amendment, ratified in 1913, lets voters choose U.S. senators; Perry's effort would return that choice to state legislatures, a change that would reshape how Pennsylvania fills its two Senate seats. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-nation/2026/06/28/rep-scott-perry-pennsylvania-17th-amendment-election-us-senators-repeal/stories/202606280105 * Castle Shannon Reports Weekend Car Break-Ins Latest developments: Castle Shannon police asked residents for information after a string of vehicle thefts and damage over the June 26-27 weekend, urging people to lock their cars. The borough's police department in Allegheny County's South Hills said thieves struck multiple vehicles, taking items and causing damage, and is seeking tips from residents. - WTAE: https://www.wtae.com/article/castle-shannon-police-vehicle-thefts-june-26-27/71762695 SPORTS ---------------------------------------------------------------- Pirates (42-42) Sat Jun 27 · Reds 9 · Pirates 7 · Final Eugenio Suárez hits 3-run homer in 9th as Reds rally for 9-7 win over Pirates https://plaintextsports.com/mlb/2026-06-27/cin-pit Sun Jun 28 · Reds 4 · Pirates 9 · Final Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds https://plaintextsports.com/mlb/2026-06-28/cin-pit Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM https://plaintextsports.com/mlb/2026-06-29/pit-phi Around the Teams: * Veteran Steelers Train Together in Offseason Latest developments: The Steelers' team channel posted a "No days off" clip showing defensive captain Cam Heyward, edge rusher Nick Herbig, and defensive tackle Keeanu Benton working out together this offseason. With camp approaching, the team's social channels highlighted core defenders Cam Heyward, Nick Herbig, and Keeanu Benton training as a group, a glimpse of the front seven's conditioning before the 2026 season. - Pittsburgh Steelers (YouTube): https://www.youtube.com/shorts/bvb5yijM_z0 Team USA: * Gretchen Walsh Sets 50m Freestyle World Record Latest developments: American swimmer Gretchen Walsh broke the women's 50-meter freestyle world record on June 28, just nine days after her training partner Kate Douglass had set the previous mark. Walsh, one of the United States' top sprint swimmers, lowered the global standard in the splash-and-dash event, the second American record in the distance within two weeks as she and Douglass trade the fastest time in the sport. - ESPN Olympics: https://www.espn.com/olympics/swimming/story/_/id/49209684/gretchen-walsh-breaks-kate-douglass-50m-freestyle-world-record * USMNT Leans on Leadership for Knockouts Latest developments: Entering the World Cup round of 32, ESPN reported the U.S. men's roster is stocked with leaders of varied temperaments well beyond captain Tim Ream, a dynamic the team credits for its group-stage success as co-host. The United States, which won Group D and faces Bosnia and Herzegovina in the round of 32, heads into the knockout stage of the World Cup it co-hosts with Canada and Mexico, with coaches and players pointing to a deep pool of veteran leadership. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49196528/usmnt-squad-full-leaders-world-cup-knockouts-not-just-captain-ream READING ---------------------------------------------------------------- * Ed Zitron -- Premium: Notes From The Bubble, Volume 1 Zitron launches a recurring series cataloging the warning signs he sees of an AI investment bubble, assembling evidence that the boom's spending outpaces any plausible return. https://www.wheresyoured.at/premium-notes-from-the-bubble-volume-1/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field on building the design platform and why Field believes AI works as a tailwind rather than a threat to the company. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ * Cal Newport -- Dear AI Companies: Stop the "Doom Trolling" Newport argues AI firms hype the existential danger of their own products as a marketing tactic, likening it to Ford publishing alarms about its own F-150, and calls the practice corrosive to honest debate. https://calnewport.com/dear-ai-companies-stop-the-doom-trolling/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1397 ▼ -1.4% GBP/USD 1.3202 ▼ -1.2% USD/JPY 161.63 ▲ +0.7% ================================================================ Generated 2026-06-28 21:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================