infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Washington tightened its grip on frontier AI as OpenAI and Anthropic gated their newest models behind a government cybersecurity review, while Mozilla showed those same coding agents can be hijacked through a booby-trapped repository.


Emerging Trends and Key Updates

Security

1. OpenAI and Anthropic Gate New Models Under U.S. Review

AI Security · [ai, policy]

Latest developments: OpenAI and Anthropic both confirmed on June 29 that they are limiting their newest models to customers the Trump administration approves while the U.S. government runs a cybersecurity review, a restriction layered onto the GPT-5.6 Sol launch reported earlier the same day.

read more

OpenAI builds ChatGPT and Codex; Anthropic builds the Claude models. Both firms now coordinate releases with Washington, holding back full access for ChatGPT, Codex, and API customers until the review clears.

Sources: SecurityWeek · Help Net Security · ↑ top

2. Prompt Injection Turns AI Coding Agents Against Developers

AI Security · [ai, zero-day]

Latest developments: Mozilla's Zero Day Investigative Network warned on June 29 that a GitHub repository carrying no malicious code can use indirect prompt injection to make AI coding agents such as Claude Code take harmful actions the developer never authorized.

read more

The proof-of-concept hides instructions in repository content that an AI assistant reads and obeys while cloning and setting up a project. Teams should treat cloned repositories as untrusted input and constrain what their agents may execute.

Sources: Help Net Security · ↑ top

3. The Gentlemen Ransomware-as-a-Service Surfaces

Ransomware and Cybercrime · [ransomware, raas]

Latest developments: Kaspersky on June 29 detailed The Gentlemen, a ransomware-as-a-service group, disclosing its custom backdoors, its tactics, and a newly spotted ransomware variant.

read more

The Gentlemen run a rent-the-malware operation that hands affiliates ransomware and custom tooling. Kaspersky's incident analysis maps the crew's backdoors and tradecraft so defenders can spot the early stages.

Sources: Securelist (Kaspersky) · ↑ top

4. U.S. Seizes 400 World Cup Streaming Domains

Ransomware and Cybercrime · [takedown, piracy]

Latest developments: The Justice Department's Criminal Division seized nearly 400 web domains that illegally streamed 2026 FIFA World Cup matches, the agency disclosed on June 29.

read more

The takedown extends a U.S. piracy crackdown that earlier hit the PirloTV sports-streaming network. Investigators pulled the domains offline as the tournament drew global audiences across the United States, Canada, and Mexico.

Sources: BleepingComputer · ↑ top

5. Gamaredon Expands Its Ukraine Campaign

Nation-State Activity · [apt, nation-state]

Latest developments: ESET reported on June 29 that Russia's Gamaredon ran 35 distinct spear-phishing campaigns against Ukraine through 2025, most in the second half, broadening its malware arsenal and abusing legitimate cloud services for delivery and control.

read more

Gamaredon is an FSB-linked Russian advanced persistent threat that has hammered Ukrainian government and military targets for years. ESET's count shows the crew accelerating its tooling and leaning on cloud platforms to evade detection.

Sources: The Hacker News · ↑ top

6. DirtyClone Linux Kernel Root Escalation

Vulnerabilities and Exploits · [vulnerability, patch]

Latest developments: SecurityWeek disclosed on June 29 DirtyClone, a variant of the DirtyFrag flaw that lets an unprivileged local user manipulate the Linux page cache to seize root privileges.

read more

DirtyClone is a local privilege-escalation bug in the Linux kernel's page cache handling. Any standard account on an affected host can climb to root, so administrators should patch the kernel without delay.

Sources: SecurityWeek · ↑ top

Business and Politics

U.S.-Iran Truce Wobbles as Talks Near

Latest developments: Trump said June 29 that Iran had requested a meeting, Iranian officials said nothing was scheduled, and both sides accused each other of weekend ceasefire violations ahead of negotiations set for Tuesday, June 30.

read more

The United States and Iran agreed to halt days of fighting over the Strait of Hormuz and to resume peace talks aimed at a long-term deal restraining Tehran's nuclear program; markets steadied as Treasury yields rose and gold fell on the prospect of easing tensions.

Sources: WSJ World News · FT World · ↑ top

Pittsburgh

Weather

Today: Mostly Sunny, high 90F.

Tonight: Partly Cloudy, low 71F.

Tuesday: Mostly Sunny, high 94F.

Business

Comcast to Split in Two

Latest developments: Comcast announced June 29 it will break into two public companies by spinning off NBCUniversal and Sky, sending shares up about 22 percent.

read more

Comcast, the Philadelphia cable and broadband giant whose Xfinity service reaches the Pittsburgh region, will separate its connectivity business from its film, theme-park, and streaming operations, a structural reshaping of one of the country's largest media companies.

Sources: Pittsburgh Post-Gazette · ↑ top

Around Town

Heat Dome Bakes Western Pa. Through July 4

Latest developments: Allegheny County issued a Code Red heat advisory for June 29 through July 1, with forecasters now showing highs of 93 to 94 degrees peaking Wednesday and Thursday and dangerous heat extending into the July 4 weekend.

read more

A heat dome covering some 200 million people across the United States will push Pittsburgh-area heat-index values near or above 100 degrees for several days, prompting the county to open cooling centers and warn residents of extreme conditions.

Sources: WTAE · Pittsburgh Post-Gazette · ↑ top

Commercial Street Closes Five Weeks for Bridge Slide

Latest developments: PennDOT closed Commercial Street for five weeks starting June 29, marking the start of the long-awaited Commercial Street bridge slide on the Parkway East in July.

read more

The closure of Commercial Street, along with parts of Forward Avenue and the Nine Mile Run Trail beneath the Parkway East near the Squirrel Hill Tunnel, lets crews slide a new span into place, escalating from last week's testing.

Sources: WTAE · ↑ top

Events

Turnstile's Never Enough Tour Comes to Pittsburgh

Latest developments: Pittsburgh City Paper reported June 29 that the band Turnstile will bring its Never Enough tour to Pittsburgh, sharing the stage with a genre-spanning lineup of opening acts.

read more

Turnstile, the Baltimore hardcore group, plans a Pittsburgh stop on its Never Enough tour with a slate of eclectic openers spanning multiple genres.

Sources: Pittsburgh City Paper · ↑ top

Sports

Pirates (42-42)

Sun Jun 28 · Reds 4 · Pirates 9 · Final

Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds

Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM

Around the Teams

Legacy Hall Opens at PNC Park

Latest developments: The Post-Gazette detailed the Pirates' new Legacy Hall at PNC Park, a fan space showcasing franchise history.

read more

The Pirates built Legacy Hall to let fans young and old walk through the team's baseball history at PNC Park, adding a permanent exhibit to the North Shore ballpark.

Sources: Post-Gazette Pirates · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,381.60  ▼ -1.4%
Dow        51,805.04  ▲ +0.4%
Nasdaq     25,577.30  ▼ -2.7%
WTI crude      71.90  ▼ -9.0%
EUR/USD       1.1397  ▼ -1.4%
GBP/USD       1.3202  ▼ -1.2%
USD/JPY       161.63  ▲ +0.7%