daily plain-text briefing: security, markets, business, and pittsburgh
Russian, Chinese, and Iranian state crews press espionage and water-system sabotage as a counterfeit AI browser extension and prompt-injection attacks deepen the AI-era threat to software and infrastructure.
Latest developments: OpenAI began a limited preview June 29 of its GPT-5.6 series—Sol, Terra, and Luna—coordinating the rollout with the U.S. government and, at the Trump administration's request, restricting the new models to approved customers during a cybersecurity review, with Anthropic imposing the same limits.
OpenAI says the flagship Sol matches Anthropic's Mythos Preview on cyber tasks while spending a third of the output tokens; the government-gated release marks the first time Washington has throttled distribution of a frontier security model.
Sources: Help Net Security · SecurityWeek · SecurityWeek · ↑ top
Latest developments: Acronis Threat Research Unit reported June 29 that China-aligned Mustang Panda turned Zoho WorkDrive into a command channel against Indian government and hydropower networks, the same day ESET counted 35 spear-phishing campaigns Russia's FSB-run Gamaredon mounted against Ukraine across 2025 with fresh malware and cloud-service abuse.
Mustang Panda compromised machines used by senior Indian administrative staff, while Gamaredon concentrated its bursts in the second half of the year; defenders should watch legitimate cloud services repurposed as covert command channels.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Microsoft disclosed June 29 a Chromium extension impersonating the Perplexity AI answer engine that logged every search query and every character typed into the address bar, routing them through attacker infrastructure before redirecting users to real results; Google removed it after Microsoft's disclosure.
The extension abused Manifest V3 APIs and intermediary servers to spy on Chrome users who installed the AI-branded imposter; users should audit installed extensions and remove any unverified Perplexity clone.
Sources: The Hacker News · Microsoft Security Blog · ↑ top
Latest developments: Mozilla's Zero Day Investigative Network and a parallel SecurityWeek demonstration showed June 29 that a GitHub repository carrying no malicious code can use indirect prompt injection to make Claude Code spawn a reverse shell on a developer's machine.
The proof-of-concept hides instructions an agentic coding tool reads and obeys while cloning and setting up a project, granting attackers remote access; developers should treat AI agents' file and shell actions as privileged and sandbox untrusted repositories.
Sources: SecurityWeek · Help Net Security · ↑ top
Latest developments: Dark Reading reported June 29 that Iranian, Russian, and Chinese state crews breach drinking-water systems through weak passwords, internet-exposed programmable logic controllers, and flat, unsegmented networks.
The intrusions hit water utilities through basic hygiene gaps that demand no custom malware; operators should change default credentials, pull PLCs off the public internet, and segment operational technology from corporate networks.
Sources: Dark Reading · ↑ top
Latest developments: The U.S. Supreme Court ruled June 29 that police must obtain a warrant before requesting geofence data tying individual cellphones to a location, extending Fourth Amendment protection to cellphone location histories.
The decision hands privacy advocates a win by curbing warrantless dragnet requests for who was near a place at a given time; law enforcement and the data brokers that serve it must now meet the probable-cause standard.
Sources: The Record · ↑ top
This Afternoon: Mostly Sunny, high 91F.
Tonight: Mostly Clear, low 71F.
Tuesday: Mostly Sunny, high 94F.
Latest developments: U.S. Steel said June 29 it will spend $475 million expanding its tubular-steel plant in Fairfield, Alabama, to meet oil and gas demand.
Pittsburgh-based United States Steel Corp. plans a $475 million addition to its Fairfield, Alabama, tubular plant, one of several billion-dollar projects the company has announced in the year since Nippon Steel acquired it.
Latest developments: The Allegheny County Airport Authority board approved a six-month extension on June 26 to American Airlines' maintenance-base lease at Pittsburgh International Airport while the two sides negotiate a longer deal.
The Allegheny County Airport Authority Board of Directors granted American Airlines a six-month extension on its maintenance-base lease at Pittsburgh International Airport, buying time as the airline and the authority work toward longer terms.
Latest developments: WPXI reported June 29 that Vape Jet, a cannabis robotics company, is relocating its headquarters to Pittsburgh's Strip District.
Vape Jet, a robotics-focused cannabis manufacturing company, is moving its headquarters into Pittsburgh's Strip District.
Latest developments: The Allegheny County Department of Public Works announced part of Universal Road near Hershey Road in Penn Hills will close at 9 a.m. July 13 for railroad-bridge work.
Allegheny County will shut a stretch of Universal Road near Hershey Road in Penn Hills starting the morning of July 13 to allow work on the railroad bridge there.
Latest developments: The Post-Gazette reported June 29 that Pennsylvania's public salary database understates compensation, even as more than 1,000 state workers earned at least $200,000.
Pennsylvania publishes a database of state-employee pay, but Post-Gazette reporting found it leaves out enough compensation to undercount earnings; over 1,000 workers still cleared $200,000.
Sources: Pittsburgh Post-Gazette · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Pittsburgh Technology Council asked Governor Josh Shapiro and Pennsylvania legislators on June 29 to hold off on new data-center regulations.
Pittsburgh's technology community, led by the Pittsburgh Technology Council, pressed Governor Josh Shapiro and state lawmakers to wait before writing rules on data centers, pushing back against legislative efforts to cap the projects and their tax breaks.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: NEXTpittsburgh's July guide, posted June 29, previews the month's signature outdoor festivals across the region.
Pittsburgh's July calendar features Picklesburgh, the downtown pickle festival pouring some 800 quarts of pickle juice, the Anthrocon furry convention and parade drawing roughly 18,000 attendees, and Goat Fest; NEXTpittsburgh lays out dates and details for all twelve.
Sources: NEXTpittsburgh Events · ↑ top
Latest developments: Pittsburgh Magazine reported June 29 that the National Aviary's 21-and-over fundraiser returns Friday, July 17, with a Sunset Riviera theme.
The National Aviary on Pittsburgh's North Side holds its signature 21-and-over fundraiser, Night in the Tropics presented by UPMC Health Plan, on Friday, July 17, 2026, a Mediterranean-inspired Sunset Riviera evening with live music from No Bad JuJu and unlimited small plates.
Sources: Pittsburgh Magazine · ↑ top
Pirates (42-42)
Sun Jun 28 · Reds 4 · Pirates 9 · Final
Ryan O'Hearn homers twice, helps Pirates avoid sweep with 9-4 win over Reds
Up Next · Pirates @ Phillies · Mon Jun 29, 6:40 PM
Latest developments: The Post-Gazette's MiLB Monday reported June 29 that Pirates top prospect Seth Hernandez became the first pitcher in the minor leagues to reach 100 strikeouts this season.
Pittsburgh Pirates top pitching prospect Seth Hernandez leads all of the minor leagues with 100 strikeouts, a milestone the Post-Gazette's MiLB Monday flagged alongside updates on other farmhands.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Steelers' channel posted the June 26 SNR Drive on June 29, with hosts assembling an all-time franchise fantasy roster.
On the Steelers' SNR Drive show, hosts Matt Williamson and Wes Uhler drafted their all-time Pittsburgh Steelers fantasy-football team, a lighter offseason segment from the team channel.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: A Post-Gazette feature June 29 dug into the physics behind why only seven home runs at PNC Park have ever landed in the Allegheny River on the fly.
Since PNC Park opened, just seven home runs have cleared the right-field stands and reached the Allegheny River without a bounce; the Post-Gazette, spotlighting O'Neil Cruz's power, broke down why the feat is so rare.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Captain Tim Ream said June 29 the United States must 'expect the unexpected' against Bosnia and Herzegovina in its World Cup round-of-32 match Wednesday, July 1.
The United States men's national team, Group D winners as co-host, face Bosnia and Herzegovina on Wednesday, July 1, in the World Cup round of 32; captain Tim Ream waved off added knockout pressure and warned his side to brace for surprises.
Sources: ESPN Soccer · Guardian World Cup 2026 · ↑ top
S&P 500 7,381.60 ▼ -1.4% Dow 51,805.04 ▲ +0.4% Nasdaq 25,577.30 ▼ -2.7% WTI crude 71.90 ▼ -9.0% EUR/USD 1.1397 ▼ -1.4% GBP/USD 1.3202 ▼ -1.2% USD/JPY 161.63 ▲ +0.7%