================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, June 29, 2026 - 9:06 AM EDT ================================================================ Washington tightened its grip on frontier AI as OpenAI and Anthropic gated their newest models behind a government cybersecurity review, while Mozilla showed those same coding agents can be hijacked through a booby-trapped repository. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] AI security tightened on two fronts as Washington gated OpenAI and Anthropic's models behind a cybersecurity review while Mozilla showed prompt injection can weaponize Claude Code against developers. see: OpenAI and Anthropic Gate New Models Under U.S. Review; Prompt Injection Turns AI Coding Agents Against Developers * [TREND] Cybercrime professionalized even under law-enforcement pressure, as Kaspersky exposed The Gentlemen ransomware-as-a-service while the Justice Department seized nearly 400 World Cup streaming domains. see: The Gentlemen Ransomware-as-a-Service Surfaces; U.S. Seizes 400 World Cup Streaming Domains * [UPDATE (new)] ESET detailed how Russia's Gamaredon ran 35 spear-phishing campaigns against Ukraine through 2025, expanding its malware arsenal and abusing cloud services for delivery and control. see: Gamaredon Expands Its Ukraine Campaign * [UPDATE (new)] SecurityWeek disclosed DirtyClone, a DirtyFrag variant letting an unprivileged local user manipulate the Linux page cache to seize root privileges. see: DirtyClone Linux Kernel Root Escalation * [UPDATE (new)] Locally, Allegheny County's Code Red heat dome bakes Western Pennsylvania through July 4 as PennDOT shut Commercial Street for a five-week bridge slide. see: Heat Dome Bakes Western Pa. Through July 4; Commercial Street Closes Five Weeks for Bridge Slide * [TREND] Reading picks circle AI's promise and peril, from Zitron's bubble notes to Figma's Dylan Field calling AI a tailwind and Newport's productivity-paradox warning. see: Premium: Notes From The Bubble, Volume 1; An Interview with Figma CEO Dylan Field About Design and AI; Beware of Productivity Paradoxes SECURITY ---------------------------------------------------------------- 1. OPENAI AND ANTHROPIC GATE NEW MODELS UNDER U.S. REVIEW AI Security · [ai, policy] Latest developments: OpenAI and Anthropic both confirmed on June 29 that they are limiting their newest models to customers the Trump administration approves while the U.S. government runs a cybersecurity review, a restriction layered onto the GPT-5.6 Sol launch reported earlier the same day. OpenAI builds ChatGPT and Codex; Anthropic builds the Claude models. Both firms now coordinate releases with Washington, holding back full access for ChatGPT, Codex, and API customers until the review clears. - SecurityWeek: https://www.securityweek.com/openai-and-anthropic-limit-new-ai-models-to-trump-approved-customers-during-cybersecurity-review/ - Help Net Security: https://www.helpnetsecurity.com/2026/06/29/openai-gpt-5-6-models-preview/ 2. PROMPT INJECTION TURNS AI CODING AGENTS AGAINST DEVELOPERS AI Security · [ai, zero-day] Latest developments: Mozilla's Zero Day Investigative Network warned on June 29 that a GitHub repository carrying no malicious code can use indirect prompt injection to make AI coding agents such as Claude Code take harmful actions the developer never authorized. The proof-of-concept hides instructions in repository content that an AI assistant reads and obeys while cloning and setting up a project. Teams should treat cloned repositories as untrusted input and constrain what their agents may execute. - Help Net Security: https://www.helpnetsecurity.com/2026/06/29/mozilla-warns-of-indirect-prompt-injection-risk-in-ai-coding-agents/ 3. THE GENTLEMEN RANSOMWARE-AS-A-SERVICE SURFACES Ransomware and Cybercrime · [ransomware, raas] Latest developments: Kaspersky on June 29 detailed The Gentlemen, a ransomware-as-a-service group, disclosing its custom backdoors, its tactics, and a newly spotted ransomware variant. The Gentlemen run a rent-the-malware operation that hands affiliates ransomware and custom tooling. Kaspersky's incident analysis maps the crew's backdoors and tradecraft so defenders can spot the early stages. - Securelist (Kaspersky): https://securelist.com/the-gentlemen-raas/120447/ 4. U.S. SEIZES 400 WORLD CUP STREAMING DOMAINS Ransomware and Cybercrime · [takedown, piracy] Latest developments: The Justice Department's Criminal Division seized nearly 400 web domains that illegally streamed 2026 FIFA World Cup matches, the agency disclosed on June 29. The takedown extends a U.S. piracy crackdown that earlier hit the PirloTV sports-streaming network. Investigators pulled the domains offline as the tournament drew global audiences across the United States, Canada, and Mexico. - BleepingComputer: https://www.bleepingcomputer.com/news/security/us-seizes-hundreds-of-fifa-world-cup-illegal-streaming-domains/ 5. GAMAREDON EXPANDS ITS UKRAINE CAMPAIGN Nation-State Activity · [apt, nation-state] Latest developments: ESET reported on June 29 that Russia's Gamaredon ran 35 distinct spear-phishing campaigns against Ukraine through 2025, most in the second half, broadening its malware arsenal and abusing legitimate cloud services for delivery and control. Gamaredon is an FSB-linked Russian advanced persistent threat that has hammered Ukrainian government and military targets for years. ESET's count shows the crew accelerating its tooling and leaning on cloud platforms to evade detection. - The Hacker News: https://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.html 6. DIRTYCLONE LINUX KERNEL ROOT ESCALATION Vulnerabilities and Exploits · [vulnerability, patch] Latest developments: SecurityWeek disclosed on June 29 DirtyClone, a variant of the DirtyFrag flaw that lets an unprivileged local user manipulate the Linux page cache to seize root privileges. DirtyClone is a local privilege-escalation bug in the Linux kernel's page cache handling. Any standard account on an affected host can climb to root, so administrators should patch the kernel without delay. - SecurityWeek: https://www.securityweek.com/dirtyclone-linux-kernel-vulnerability-leads-to-root-access/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S.-Iran Truce Wobbles as Talks Near Latest developments: Trump said June 29 that Iran had requested a meeting, Iranian officials said nothing was scheduled, and both sides accused each other of weekend ceasefire violations ahead of negotiations set for Tuesday, June 30. The United States and Iran agreed to halt days of fighting over the Strait of Hormuz and to resume peace talks aimed at a long-term deal restraining Tehran's nuclear program; markets steadied as Treasury yields rose and gold fell on the prospect of easing tensions. - WSJ World News: https://www.wsj.com/world/middle-east/iran-asserts-sole-control-of-hormuz-warns-challenges-will-bring-more-violence-5abea3c7 - FT World: https://www.ft.com/content/a1dc9209-ec77-415c-baae-e3ddab5c0eb1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Mostly Sunny, high 90F. Tonight: Partly Cloudy, low 71F. Tuesday: Mostly Sunny, high 94F. Business: * Comcast to Split in Two Latest developments: Comcast announced June 29 it will break into two public companies by spinning off NBCUniversal and Sky, sending shares up about 22 percent. Comcast, the Philadelphia cable and broadband giant whose Xfinity service reaches the Pittsburgh region, will separate its connectivity business from its film, theme-park, and streaming operations, a structural reshaping of one of the country's largest media companies. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/06/29/comcast-split-nbcuniversal-sky/stories/202606290021 Around town: * Heat Dome Bakes Western Pa. Through July 4 Latest developments: Allegheny County issued a Code Red heat advisory for June 29 through July 1, with forecasters now showing highs of 93 to 94 degrees peaking Wednesday and Thursday and dangerous heat extending into the July 4 weekend. A heat dome covering some 200 million people across the United States will push Pittsburgh-area heat-index values near or above 100 degrees for several days, prompting the county to open cooling centers and warn residents of extreme conditions. - WTAE: https://www.wtae.com/article/pennsylvania-4th-of-july-heat-wave-forecast/71768943 - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/06/29/pittsburgh-weather-heat-wave-high-temperatures/stories/202606290022 * Commercial Street Closes Five Weeks for Bridge Slide Latest developments: PennDOT closed Commercial Street for five weeks starting June 29, marking the start of the long-awaited Commercial Street bridge slide on the Parkway East in July. The closure of Commercial Street, along with parts of Forward Avenue and the Nine Mile Run Trail beneath the Parkway East near the Squirrel Hill Tunnel, lets crews slide a new span into place, escalating from last week's testing. - WTAE: https://www.wtae.com/article/commercial-street-closed-376-bridge-closure/71764095 Events: * Turnstile's Never Enough Tour Comes to Pittsburgh Latest developments: Pittsburgh City Paper reported June 29 that the band Turnstile will bring its Never Enough tour to Pittsburgh, sharing the stage with a genre-spanning lineup of opening acts. Turnstile, the Baltimore hardcore group, plans a Pittsburgh stop on its Never Enough tour with a slate of eclectic openers spanning multiple genres. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/music/turnstiles-never-enough-tour-is-coming-pittsburgh-and-theyre-bringing-friends/ SPORTS ---------------------------------------------------------------- Pirates (42-42) Sun Jun 28 · Reds 4 · Pirates 9 · Final Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds https://plaintextsports.com/mlb/2026-06-28/cin-pit Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM https://plaintextsports.com/mlb/2026-06-29/pit-phi Around the Teams: * Legacy Hall Opens at PNC Park Latest developments: The Post-Gazette detailed the Pirates' new Legacy Hall at PNC Park, a fan space showcasing franchise history. The Pirates built Legacy Hall to let fans young and old walk through the team's baseball history at PNC Park, adding a permanent exhibit to the North Shore ballpark. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/06/25/legacy-hall-pnc-park-pittsburgh-baseball-history/stories/202606240069 READING ---------------------------------------------------------------- * Cal Newport -- Beware of Productivity Paradoxes Newport argues that powerful new tools like the personal computer promise obvious productivity gains yet often fail to deliver them, cautioning that technology rarely improves output on its own. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Field discusses how he built Figma and why he sees AI as a tailwind that strengthens the company's design tools rather than a threat to them. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ * Ed Zitron -- Premium: Notes From The Bubble, Volume 1 Zitron launches an ongoing series chronicling what he views as an inflating AI and tech bubble, with skeptical analysis of the spending and valuations driving it. https://www.wheresyoured.at/premium-notes-from-the-bubble-volume-1/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1397 ▼ -1.4% GBP/USD 1.3202 ▼ -1.2% USD/JPY 161.63 ▲ +0.7% ================================================================ Generated 2026-06-29 09:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================