================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, June 30, 2026 - 9:04 PM EDT ================================================================ Researchers turned six AI browsers and a wave of coding agents against their own users, as a Microsoft Defender zero-day and an Oracle payments flaw fell to active exploitation. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] AI assistants keep getting weaponized against their users, as LayerX's BioShocking tricked six browsers including ChatGPT Atlas and Comet into believing risky actions were fiction and leaking credentials. see: BioShocking and Agentjacking Turn AI Assistants on Their Users * [TREND] Enterprise defenders face a run of already-exploited bugs, from the BlueHammer zero-day ransomware crews now abuse in Microsoft Defender to unauthenticated attacks on Oracle E-Business Suite payments. see: BlueHammer Defender Flaw Fuels Ransomware; Oracle E-Business Suite Payments Under Active Attack * [TREND] Rogue browser extensions and poisoned code packages target cryptocurrency and stored secrets, led by McAfee's Silent Swap clipper that quietly rewrites wallet addresses mid-transaction. see: Rogue Browser Extensions and Poisoned Packages Proliferate * [UPDATE (new)] A China-linked crew compromised at least 10 Southeast Asian organizations, two of them state-owned, and deployed a previously unseen backdoor. see: China-Linked Crew Hits Southeast Asian Critical Systems * [TREND] Skepticism over AI's payoff runs through today's reading, as Zitron argues the industry is losing money, Newport warns of productivity paradoxes, and Figma's Dylan Field calls AI a tailwind. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI SECURITY ---------------------------------------------------------------- 1. CHINA-LINKED CREW HITS SOUTHEAST ASIAN CRITICAL SYSTEMS Nation-State Activity · [apt, espionage, backdoor] Latest developments: Dark Reading reported that a China-linked group compromised at least 10 organizations across Southeast Asia, two of them state-owned, and deployed a previously unseen backdoor. The campaign targets critical systems across the region, adding to a run of China-linked operations against governments and infrastructure. Defenders in the region should hunt for the new backdoor and review access on state-owned and critical-infrastructure networks. - Dark Reading: https://www.darkreading.com/threat-intelligence/china-linked-group-targets-southeast-asia-critical-systems 2. BIOSHOCKING AND AGENTJACKING TURN AI ASSISTANTS ON THEIR USERS AI Security · [ai, prompt-injection, vulnerability] Latest developments: LayerX disclosed BioShocking on June 30, a technique that convinced six AI browsers—including OpenAI's ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude browser extension—that risky actions were fiction, prompting them to copy a user's login details and send them to an attacker, while Dark Reading detailed Agentjacking, a fake bug report that hijacks AI coding agents at scale. Both attacks exploit an AI's inability to separate content from instructions: telling a model that 2 plus 2 equals 5, or planting instructions in a bug report, makes it ignore its guardrails. Organizations deploying AI browsers and coding agents should tightly limit what those agents can read, reach, and act on. - The Hacker News: https://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.html - Ars Technica Security: https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ - Dark Reading: https://www.darkreading.com/cyber-risk/fake-bug-report-hijacks-ai-coding-agents - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-bioshocking-attack-manipulates-ai-browser-into-data-theft/ 3. ORACLE E-BUSINESS SUITE PAYMENTS UNDER ACTIVE ATTACK Vulnerabilities and Exploits · [vulnerability, patch, exploit] Latest developments: Defused Cyber confirmed the first in-the-wild exploitation of CVE-2026-46817, recorded June 27 against its Oracle E-Business Suite decoys, roughly six weeks after Oracle's May 2026 patch. CVE-2026-46817, rated 9.8, is an improper-privilege-management and authentication flaw in Oracle Payments, the payment-processing module of Oracle's E-Business Suite, that lets unauthenticated attackers take over an instance. Organizations running the suite should apply the May 2026 fix at once. - Help Net Security: https://www.helpnetsecurity.com/2026/06/30/oracle-payments-cve-2026-46817-exploitation/ - SecurityWeek: https://www.securityweek.com/exploitation-of-recent-oracle-e-business-suite-vulnerability-begins/ - The Hacker News: https://thehackernews.com/2026/06/oracle-e-business-suite-flaw-cve-2026.html 4. ROGUE BROWSER EXTENSIONS AND POISONED PACKAGES PROLIFERATE Ransomware and Cybercrime · [malware, supply-chain, cryptocurrency] Latest developments: McAfee Labs named Silent Swap, a cryptocurrency clipper that ships as unsigned .NET and Golang installers and a fake Google Notes extension to swap wallet addresses mid-transaction; a counterfeit Perplexity extension on the Chrome Web Store intercepted users' search traffic; and trojanized Pyrogram forks on PyPI, active since November, handed attackers file-read access to Telegram bot servers. Attackers are seeding legitimate-looking browser stores and package registries with tools that steal cryptocurrency, browsing data, and server files. Users and developers should install extensions and packages only from verified publishers and audit what they already run. - The Hacker News: https://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/fake-perplexity-extension-on-chrome-web-store-tracked-searches/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-give-hackers-control-of-telegram-bot-servers/ 5. BLUEHAMMER DEFENDER FLAW FUELS RANSOMWARE Vulnerabilities and Exploits · [zero-day, ransomware, patch] Latest developments: CISA confirmed June 30 that ransomware gangs now exploit CVE-2026-33825, a Microsoft Defender privilege-escalation flaw dubbed BlueHammer that attackers had already used as a zero-day before Microsoft released a patch. BlueHammer lets an attacker escalate privileges through Microsoft Defender, and ransomware crews weaponized it before a fix existed. Windows administrators should apply Microsoft's patch immediately and treat affected systems as high priority. - SecurityWeek: https://www.securityweek.com/bluehammer-vulnerability-exploited-in-ransomware-attacks/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-windows-bluehammer-flaw-now-exploited-by-ransomware-gangs/ 6. MICROSOFT SPEEDS UP ITS QUANTUM-SAFE TIMELINE Policy and Regulation · [policy, cryptography, quantum] Latest developments: Microsoft announced June 30 that it is accelerating its quantum-safe roadmap, warning that advances in quantum computing move up the deadline to replace today's encryption standards sooner than the company previously expected. The shift follows President Trump's executive order 14409, which set firm federal post-quantum migration deadlines, and adds vendor pressure to a costly cross-industry cryptographic transition. Organizations should inventory their encryption now and plan migration to NIST's post-quantum algorithms. - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/06/30/microsoft-advances-quantum-safe-security-as-the-risk-timeline-shifts/ - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-accelerates-quantum-safe-roadmap-as-risks-grow/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Supreme Court Upholds Birthright Citizenship Latest developments: The Supreme Court ruled 6-3 on June 30 that President Trump's executive order ending birthright citizenship is unlawful, a fresh decision distinct from June 29's ruling on his agency-removal power. In Trump v. Barbara, Chief Justice John Roberts joined Justices Sonia Sotomayor and Elena Kagan among others to strike down Trump's day-one order denying citizenship to babies born to parents in the country illegally or temporarily, reaffirming the 14th Amendment's century-old guarantee and dealing a major blow to his immigration agenda. - FT World: https://www.ft.com/content/8ee00f84-762c-48a5-ac21-774e216977fa - WSJ US Business: https://www.wsj.com/business/justices-uphold-birthright-citizenship-in-blow-to-trump-e31ed979?mod=pls_whats_news_us_business_f * Trump Sticks With Iran Talks Latest developments: Aides say Trump reviewed all-out war options on June 30 but chose to keep negotiating, telling them he accepts talks running past an August 18 nuclear deadline as Steve Witkoff and Jared Kushner arrived in Doha. President Trump opted to pursue a long-term deal with Tehran rather than escalate, dispatching envoys Steve Witkoff and Jared Kushner to Qatar, which says it has no plans for the American delegation to meet Iranian officials directly. - WSJ World News: https://www.wsj.com/world/middle-east/trump-briefed-on-all-out-war-options-in-iran-but-opts-to-stick-with-talks-98304b5b - FT World: https://www.ft.com/content/f35be117-8a25-4a22-871d-0e29cafc8494 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Mostly Clear, low 76F. Wednesday: Sunny, high 98F. Wednesday Night: Mostly Clear, low 75F. Business: * Astrobotic Wins $298 Million in NASA Contracts Latest developments: NASA awarded Pittsburgh's Astrobotic two contracts worth roughly $298 million on June 30 for lunar lander and moon-base work. Astrobotic, the Pittsburgh robotics firm, secured about $298 million from NASA tied to lunar landers and moon-base infrastructure, work that intersects with SpaceX's push to the moon. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/06/30/astrobotic-spacex-nasa-moon-base-lunar-lander/stories/202606300044 * Baxter's Rcade Closes in Canonsburg Latest developments: Baxter's Rcade, a Canonsburg restaurant and arcade in Washington County, announced on social media June 30 that it has permanently closed. Baxter's Rcade, a combined restaurant and social arcade space in Canonsburg, Washington County, shut its doors for good, telling patrons through a social-media post. - WTAE: https://www.wtae.com/article/baxters-rcade-in-canonsburg-washington-county-permanently-closes/71788416 Around town: * Pennsylvania Misses Budget Deadline Again Latest developments: Pennsylvania blew its June 30 budget deadline once more, with no deal yet in sight, though education funding shows signs of smoother sailing than in past years. Pennsylvania lawmakers passed the June 30 constitutional deadline without a spending plan, leaving Governor Josh Shapiro and the divided legislature to keep negotiating, with the perennial school-funding fight looking less contentious this cycle. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/06/30/pennsylvania-budget-deadline-june-30/stories/202606300048 - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/06/30/pennsylvania-budget-education-spending/stories/202606300046 * Mars Area Teachers Push for Raises Latest developments: The Mars Area Education Association said June 30 that pay remains the main obstacle as its six-year contract expires that day. Mars Area Education Association president Hollie Meckler said the union has bargained with the Mars Area School Board for a year and a half and rejects the district's proposed 3.5% raise over three years, with the current contract lapsing June 30. - WPXI: https://www.wpxi.com/news/local/contract-negotiations-ongoing-mars-teachers-with-increased-pay-main-sticking-point/O6LMBGQDJFGCNK3RH5ZGK7EOEU/ * Pennsylvania Minimum Wage Bill Stalls Latest developments: Backers of House Bill 2189 called June 30 on the Republican-controlled state Senate to vote on the minimum-wage increase it has held since the House passed it 104-95. House Bill 2189, which would raise Pennsylvania's minimum wage toward $15 an hour, sits stalled in the state Senate; supporters say it would stimulate the economy while opponents warn it would hurt employers. - KDKA: https://www.cbsnews.com/pittsburgh/news/pennsylvania-minimum-wage-increase-house-bill-2189/ Events: * Picklesburgh, Goat Fest, and Anthrocon Fill July Latest developments: NEXTpittsburgh's July guide, published June 29, rounds up the month's festivals across the region. NEXTpittsburgh highlights twelve July events, among them Picklesburgh with its 800 quarts of pickle juice, Goat Fest, and Anthrocon's Furry Parade, which draws some 18,000 furries downtown. - NEXTpittsburgh Events: https://nextpittsburgh.com/events/12-iconic-pittsburgh-things-to-do-in-july-2026/ * 'French Moderns' Opens at the Frick Latest developments: The Post-Gazette detailed June 30 the Frick Pittsburgh's 'French Moderns' exhibition exploring an era of artistic freedom. The Frick Pittsburgh, in Point Breeze, mounts 'French Moderns,' an exhibition of works probing what it meant to be modern during a period of expanding artistic freedom. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/ae/art-architecture/2026/06/30/french-moderns-frick-pittsburgh/stories/202606290023 SPORTS ---------------------------------------------------------------- Pirates (43-42) Mon Jun 29 · Pirates 11 · Phillies 7 · Final Valdez, Triolo and Rodriguez homer for Pirates in 11-7 win over Phillies https://plaintextsports.com/mlb/2026-06-29/pit-phi Tue Jun 30 · Pirates 0 · Phillies 5 · Bot 8th (in progress at last update) https://plaintextsports.com/mlb/2026-06-30/pit-phi Up Next · Pirates @ Phillies · Wed Jul 1, 6:40 PM https://plaintextsports.com/mlb/2026-07-01/pit-phi Around the Teams: * Seth Hernandez Reaches 100 Strikeouts Latest developments: The Post-Gazette's MiLB Monday June 29 noted Pirates top prospect Seth Hernandez became the first pitcher in the minors this season to reach 100 strikeouts. Seth Hernandez, the Pirates' top prospect, led all of the minor leagues to 100 strikeouts, the Post-Gazette reported in its weekly farm-system roundup. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/06/29/milb-prospects-hernandez-reinold-navarro-estuar-suero/stories/202606280113 Team USA: * Pulisic Fit for Bosnia Knockout Latest developments: Christian Pulisic said he is fit to go the full distance in the United States' World Cup round-of-32 match against Bosnia and Herzegovina on Wednesday, July 1. USMNT attacker Christian Pulisic, recovered from a calf injury, declared himself ready for however long the knockout clash against Bosnia and Herzegovina lasts as the co-hosts open the round of 32. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49229606/christian-pulisic-says-fit-ready-go-distance-usmnt * Malik Tillman Shines for USMNT Latest developments: ESPN profiled June 30 how Malik Tillman has flourished in an unfamiliar U.S. midfield role at the World Cup after a rough club season. Malik Tillman, coming off a disappointing campaign with Bayer Leverkusen, has thrived in an unfamiliar midfield position for the United States, emerging as one of the team's standouts this tournament. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49214102/tillman-having-great-world-cup-usmnt-never-tell-himself * USMNT Preps for Penalty Drama Latest developments: The Guardian reported June 30 that the United States has hired outside firms, one measuring players' brainwaves, to decide its shootout takers. Heading into the World Cup knockouts, Mauricio Pochettino's United States has leaned on consultants, including a company gauging players' brainwaves, to determine who shoots in a penalty shootout. - Guardian World Cup 2026: https://www.theguardian.com/football/2026/jun/30/usmnt-penalty-kicks-mauricio-pochettino-world-cup READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI industry is failing to generate returns anywhere near its enormous spending, contending the boom is drifting toward a reckoning. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport notes that technologies seemingly destined to boost productivity, like the personal computer, often fail to deliver the expected gains, and cautions against assuming AI will prove different. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Thompson interviews Figma CEO Dylan Field about building the design company and why Field believes AI serves as a tailwind rather than a threat to its business. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,401.90 ▼ -0.7% Dow 52,029.51 ▲ +0.7% Nasdaq 25,633.34 ▼ -1.9% WTI crude 71.09 ▼ -7.7% EUR/USD 1.1381 ▼ -1.0% GBP/USD 1.3201 ▼ -0.6% USD/JPY 161.78 ▲ +0.4% ================================================================ Generated 2026-06-30 21:04 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================