daily plain-text briefing: security, markets, business, and pittsburgh
The U.S. State Department posted a $10 million bounty on the Russian hackers prying into officials' Signal and WhatsApp accounts as freshly exploited flaws in SimpleHelp, Oracle, and libssh2 widened the day's attack surface.
Latest developments: The U.S. State Department on June 29 posted a reward of up to $10 million for information identifying or locating members of UNC5792 and UNC4221, the Russia-linked groups that socially engineered their way into Signal and WhatsApp accounts of U.S. and allied officials.
UNC5792 and UNC4221, tied to Russia's intelligence and military services, phish messaging accounts of government officials, military leaders, and activists across Ukraine, Europe, and the United States; the State Department's Rewards for Justice program now seeks tips on both crews.
Sources: The Record · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Attackers on June 29 began exploiting CVE-2026-46817 in Oracle E-Business Suite and weaponized SimpleHelp flaw CVE-2026-48558 to drop Djinn Stealer, a previously undocumented cross-platform infostealer, while a public proof-of-concept surfaced for CVE-2026-55200, a critical libssh2 client-side bug.
SimpleHelp remote-support software now delivers Djinn Stealer and TaskWeaver malware to Windows, macOS, and Linux; Oracle's E-Business Suite financial application faces active attacks per Defused; libssh2 releases through 1.11.1 carry a CVSS 9.2 flaw that lets a malicious SSH server corrupt a connecting client's memory. Patch all three immediately.
Sources: BleepingComputer · BleepingComputer · The Hacker News · ↑ top
Latest developments: Microsoft on June 29 pulled 119 Edge add-ons tied to a single StegoAd actor active since 2021 that hid payloads inside image and font files, the same day JFrog flagged two hijacked npm packages and a cluster of Go packages abusing VS Code tasks to plant a Python infostealer.
The StegoAd extensions woke days after install to steal credentials and run ad fraud; the hijacked npm and Go packages dodge lifecycle scripts to drop a Python stealer on Windows, Linux, and macOS. Audit installed browser extensions and pin trusted package versions.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: SecurityWeek reported June 29 that the ShinyHunters extortion group claims it stole 3.1 terabytes of data from the National Association of Insurance Commissioners through a compromise of Oracle PeopleSoft.
The NAIC, the U.S. standard-setting body for state insurance regulators, suffered a breach ShinyHunters attributes to Oracle PeopleSoft; the gang says it holds 3.1 TB. Organizations running PeopleSoft should review access and monitor for extortion contact.
Sources: SecurityWeek · ↑ top
Latest developments: The DFIR Report on June 29 published a full analysis of two intrusions, worked with Swisscom B2B CSIRT, in which a poisoned Bing search result delivered the Bumblebee loader and the AdaptixC2 framework and ended in Akira ransomware.
The campaign lures victims through manipulated Bing results, chains Bumblebee and AdaptixC2 for access and command-and-control, and deploys Akira; the report ties both intrusions to one operation first flagged in mid-2025. Filter search-driven downloads and hunt for AdaptixC2 beacons.
Sources: The DFIR Report · ↑ top
Latest developments: Infoblox on June 29 raised the count of fraudulent sites built on DCloud's legitimate Uni-App framework to more than 236,000, up from roughly 200,000 reported June 27, and detailed bogus cryptocurrency exchanges, pig-butchering operations, WhatsApp phishing networks, and wallet drainers.
Threat actors sell investment-scam templates built with DCloud's Chinese open-source Uni-App toolkit, spinning up fake exchanges and gambling and brand-impersonation pages at scale. Block the associated domains and warn users about crypto-investment lures.
Sources: The Hacker News · ↑ top
Latest developments: The Supreme Court ruled June 29 that Lisa Cook keeps her Federal Reserve seat for now while upholding President Trump's power to remove other top agency officials.
The Supreme Court blocked President Trump from firing Federal Reserve governor Lisa Cook, letting her stay on the central bank's board even as it endorsed his authority to dismiss other regulators—a split decision that goes to the heart of the Fed's independence.
Sources: Financial Times · ↑ top
Latest developments: The White House announced June 29 a formal deal to stop the strikes and resume talks, dispatching Steve Witkoff and Jared Kushner to Doha for high-level meetings, though Tehran disputed that any meeting is set.
After days of exchanging strikes over the Strait of Hormuz, the United States and Iran agreed to halt fighting and reopen negotiations toward a long-term deal restraining Tehran's nuclear program; oil futures and Treasury yields rose on the news.
Sources: WSJ · Financial Times · ↑ top
This Afternoon: Mostly Sunny, high 90F.
Tonight: Partly Cloudy, low 71F.
Tuesday: Mostly Sunny, high 94F.
Latest developments: Pittsburgh Magazine reported June 29 that owner Josh Sickels closed on his doctor's advice, revealing herniated discs in his spine as the reason behind the pause first noted last week.
Josh Sickels, owner of Rockaway Pizzeria in Regent Square, shut the shop temporarily on doctor's orders, citing herniated discs at multiple levels of his spine and a bid to stay out of surgery.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: Forecasters said June 29 the heat index could top 100 degrees across western Pennsylvania for several days into the Fourth of July weekend, extending the Code Red advisory issued earlier in the week.
A heat dome settling over the region will push heat-index values above 100 degrees in western Pennsylvania through the July 4 weekend, part of a system baking roughly 200 million people across the United States; Pittsburgh is opening cooling centers.
Sources: Pittsburgh Post-Gazette · WTAE · ↑ top
Latest developments: The Supreme Court ruled 5-4 on June 29 that states may count mail ballots cast by Election Day but arriving afterward, rejecting a Republican challenge.
In Watson v. Republican National Committee, the Supreme Court upheld Mississippi's law counting mail ballots that arrive after Election Day, finding 5-4 that the measure squares with the federal statute fixing Election Day and turning back an RNC-led challenge.
Sources: KDKA · Pittsburgh Post-Gazette · ↑ top
Latest developments: TribLive reported June 29 that benches built from recycled plastic grocery bags are popping up in Brackenridge and Harrison, each one consuming about 80,000 bags.
A recycling effort is placing benches made from recycled plastic grocery bags around Brackenridge and Harrison, where it takes roughly 80,000 collected bags to produce a single substantial bench.
Latest developments: TribLive reported June 29 that this year's Vandergrift ArtFest, set for late July, will carry an other-worldly theme.
The Vandergrift ArtFest, an outdoor festival of artisan vendors, art displays, food trucks, and live performances, returns to Vandergrift in late July built around an other-worldly theme.
Latest developments: The Post-Gazette reported June 27 that the Carnegie Museum of Natural History is retiring its Polar World exhibit after 43 years on view.
The Carnegie Museum of Natural History in Oakland is closing Polar World, a fixture of the galleries for 43 years, giving visitors a last window on the long-running exhibit of polar life and culture.
Sources: Pittsburgh Post-Gazette · ↑ top
Pirates (42-42)
Sun Jun 28 · Reds 4 · Pirates 9 · Final
Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds
Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM
Latest developments: A June 29 Post-Gazette video with Gerry Dulac broke down how complicated Pittsburgh's contract negotiations with cornerback Joey Porter Jr. could become.
Post-Gazette beat writer Gerry Dulac assessed the looming contract negotiations between the Steelers and cornerback Joey Porter Jr., weighing how complex an extension for the young corner could get.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: In his June 29 weekend column, Post-Gazette writer Noah Hiles pointed to internal arms as the Pirates' best path to a steadier bullpen.
Post-Gazette columnist Noah Hiles argued the Pirates' own relievers, Dennis Santana and Isaac Mattson among them, can do more to repair the bullpen than any trade-deadline addition.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN convened a panel of coaches and analysts June 29 to judge whether the United States can become the 2026 World Cup's surprise package after a strong group stage as co-host.
ESPN assembled coaches and analysts to assess the United States men's national team's chances of a deep World Cup run, with outside observers arguing the co-hosts have the makeup to advance well into the knockout rounds.
Sources: ESPN Soccer · ↑ top
S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1397 ▼ -1.4% GBP/USD 1.3202 ▼ -1.2% USD/JPY 161.63 ▲ +0.7%