daily plain-text briefing: security, markets, business, and pittsburgh
Aflac's Japan unit lost data on 4.38 million policyholders as active exploitation of Oracle's E-Business Suite began and decades-old Bash tricks turned open-source AI coding agents into supply-chain weapons.
Latest developments: Defused confirmed active exploitation of CVE-2026-46817, a 9.8-severity authentication and privilege flaw in Oracle Payments that hands unauthenticated attackers full takeover of E-Business Suite instances, as the parallel ShinyHunters PeopleSoft campaign confirmed Nissan employee data among roughly 100 targeted organizations.
The Oracle Payments flaw lets attackers seize E-Business Suite financial systems without credentials; Oracle has patched it. Administrators running EBS should apply the fix and hunt for web shells, while PeopleSoft customers track the ongoing ShinyHunters data theft.
Sources: SecurityWeek · The Hacker News · BleepingComputer · ↑ top
Latest developments: SecurityWeek reported June 30 that decades-old Bash shell tricks slip past safeguards in most open-source AI coding agents, letting a malicious repository turn an agent into a supply-chain attack vector, while Dark Reading warned of unreviewable AI-generated automation and Sophos X-Ops published a working taxonomy of AI threats.
Agentic coding tools that clone and run untrusted repositories execute hidden commands when old shell-escaping tricks defeat their guardrails. Teams adopting AI coding and automation should sandbox agent execution and review generated workflows before trusting them.
Sources: SecurityWeek · Dark Reading · Sophos News · ↑ top
Latest developments: Bitdefender detailed that USB drives carrying China-linked malware infected Japanese military networks for nearly a year, while Kaspersky's second ToddyCat report dissected the Umbrij tool stealing Gmail OAuth tokens to read corporate email and Acronis tracked Mustang Panda abusing Zoho WorkDrive as a command channel against the Indian government.
Chinese espionage crews favor low-tech footholds and legitimate cloud services to breach governments and militaries across Asia. Defenders should restrict removable media, monitor OAuth token grants, and watch traffic to sanctioned cloud platforms.
Sources: Graham Cluley · Securelist (Kaspersky) · The Hacker News · ↑ top
Latest developments: Aflac disclosed June 30 that attackers reached the policyholder portal of its Japan subsidiary repeatedly between June 15 and June 25, exposing personal and bank-account data on 4.38 million people.
Aflac, the Columbus, Georgia insurer, said hackers breached Aflac Japan systems and took policyholder names, addresses, and bank account information. Affected customers should monitor accounts and watch for notification.
Sources: SecurityWeek · BleepingComputer · ↑ top
Latest developments: The U.S. Supreme Court ruled June 29 that the Fourth Amendment protects cellphone location histories, forcing police to obtain a warrant before requesting geofence data, in the case of a bank robber whom investigators identified through a geofence warrant.
The decision hands privacy advocates a win and reshapes how law enforcement gathers location records from carriers and platforms. Police seeking geofence data tying individual phones to a place now need a warrant.
Sources: SecurityWeek · The Record · ↑ top
Latest developments: The Blackfield ransomware gang demanded $2 million from Nidec Corporation, the Japanese maker of automotive and computing electronic components, while The DFIR Report traced an intrusion that ran from a poisoned Bing search result through Bumblebee and the AdaptixC2 framework to Akira ransomware.
Ransomware crews keep pairing extortion of large manufacturers with malvertising-led access chains. Organizations should harden search-driven downloads, monitor for Bumblebee and AdaptixC2 loaders, and segment networks against Akira.
Sources: BleepingComputer · The DFIR Report · ↑ top
Latest developments: U.S. envoys arrived in Qatar on June 30 to negotiate terms of the interim deal, sending oil prices lower, though Washington and Tehran still disagree over next steps as the Strait of Hormuz ceasefire holds.
The United States and Iran each dispatched delegations to Doha this week after days of fighting around the Strait of Hormuz; Shell warned that continued disruption over the rest of the year could force a rare annual contraction in global liquefied-natural-gas supply.
Sources: WSJ Markets · WSJ Markets · ↑ top
Latest developments: Quarter-end repricing toward a 2026 Federal Reserve rate increase drove gold toward a 12% monthly loss, its worst quarter in more than a decade, and pushed the dollar to ¥162, a 40-year high that left Tokyo poised to intervene as soon as Friday.
Traders now expect the Fed to raise rates this year, reversing the safe-haven trade: gold heads for its steepest quarterly drop in over a decade even amid the Iran war, while the yen's slide to a 40-year low put Japanese Finance Minister Satsuki Katayama on intervention watch.
Sources: WSJ Markets · WSJ Markets · ↑ top
Today: Mostly Sunny, high 94F.
Tonight: Partly Cloudy, low 76F.
Wednesday: Sunny, high 98F.
Latest developments: Jeni's will give away free ice cream and roll out three new flavors on Thursday, July 2, at its Pittsburgh-area shops.
Jeni's Splendid Ice Creams adds three flavors—Campfire S'mores and Strawberry Pretzel Pie among them—and hands out free scoops July 2 across its area locations; details run at jenis.com.
Sources: Pittsburgh City Paper · ↑ top
Latest developments: PETA unveiled a statewide 'Nice Cream Trail' on June 30 steering dessert-seekers to shops serving vegan frozen treats.
PETA rolled out a Pennsylvania 'Nice Cream Trail' that maps shops across the state offering dairy-free frozen desserts, part of the animal-rights group's push to promote vegan eating during the summer.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The National Weather Service heat advisory took hold at 11 a.m. June 30 and now forecasts the heat lasting into the July 4 holiday weekend, with feels-like readings near 100 degrees across Western Pennsylvania.
The hottest stretch of 2026 settles over the Pittsburgh region this week and into Independence Day weekend, pushing temperatures into the 90s with heat-index values near 100; Duquesne Light added crews against a demand surge, and several communities moved trash pickup earlier.
Latest developments: A dump truck dropped into a hole at the site of water-main-break repair work in Pittsburgh's Mt. Washington neighborhood on June 30.
Crews repairing a water main break in Mt. Washington watched a dump truck sink into the excavation, snarling the worksite in one of the city's hilltop neighborhoods.
Latest developments: WTAE published its roundup of Independence Day fireworks displays across Western Pennsylvania communities ahead of the July 4 holiday.
WTAE compiled a guide to where Western Pennsylvania towns will set off fireworks for the Fourth of July, gathering display schedules across the region as communities finalize their celebrations.
Pirates (43-42)
Mon Jun 29 · Pirates 11 · Phillies 7 · Final
Valdez, Triolo and Rodriguez homer for Pirates in 11-7 win over Phillies
Up Next · Pirates @ Phillies · Tue Jun 30, 6:40 PM
Latest developments: On the June 29 'Not Just Football' short, Cam Heyward and his co-host argued over which NFL draft class ranks as the greatest of all time.
Steelers defensive captain Cam Heyward used his 'Not Just Football' show to debate the greatest draft class ever, weighing groups that produced stars such as Odell Beckham Jr. and Aaron Donald.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Steelers' team channel noted June 29 that training camp opens in about a month, putting late July on the calendar for the start of camp.
Pittsburgh's official channel flagged the one-month countdown to training camp, the first on-field gathering of the 2026 season as the offseason winds down.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: Ahead of the round-of-32 match against the United States on Wednesday, July 1, the Guardian profiled Bosnia midfielder Esmir Bajraktarević, who came up entirely through the U.S. system before choosing his parents' homeland.
Esmir Bajraktarević, born in Appleton, Wisconsin and developed through the Chicago Fire academy, the New England Revolution, and U.S. youth national teams, now lines up for Bosnia and Herzegovina against the United States in the World Cup knockout round.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,375.12 ▼ -1.6% Dow 51,899.04 ▲ +0.4% Nasdaq 25,508.01 ▼ -3.2% WTI crude 71.09 ▼ -7.7% EUR/USD 1.1382 ▼ -1.3% GBP/USD 1.3200 ▼ -0.8% USD/JPY 161.70 ▲ +0.6%