daily plain-text briefing: security, markets, business, and pittsburgh
A phishing-as-a-service platform now industrializes Microsoft 365 account takeover while more than 900 Oracle E-Business Suite servers sit exposed to active exploitation.
Latest developments: The U.S. Commerce Department lifted its jailbreak-linked export controls on Anthropic's Claude Fable 5 and Mythos 5 on June 30, returning both worldwide July 1, as Anthropic shipped Sonnet 5 with safeguards against dangerous cyber use and Wired reported a researcher used Claude Opus 4.7 to breach Front Gate and issue any ticket he chose.
Front Gate's ticketing platform serves nearly every major U.S. music festival, from Lollapalooza to Bonnaroo, and the researcher could freely mint tickets. The export-control reversal, Sonnet 5's new guardrails, and the Front Gate break-in show frontier models arming attackers as fast as they help defenders.
Sources: The Hacker News · Wired Security · Help Net Security · ↑ top
Latest developments: Cisco Talos named ARToken on July 1, an EvilTokens affiliate panel that exposes more than 80 API endpoints for device-code phishing, Primary Refresh Token persistence, mailbox access, business email compromise, and SharePoint exfiltration.
ARToken sells ready-made attacks on Microsoft 365 accounts; operators send invoice emails impersonating vendors a target already pays, as one did to a Wisconsin contractor's billing contact at a life-sciences company in April 2026. Enforce phishing-resistant multi-factor authentication and block device-code sign-in flows.
Sources: Cisco Talos · Help Net Security · ↑ top
Latest developments: The Hacker News detailed July 1 research analyzing 3,000 live ClickFix payloads, showing the fake 'prove you're human' pages now pull their malicious commands from API-driven servers that hand each visitor the same malware in a different disguise, alongside a new delivery method built to slip past Windows script scanning.
ClickFix tricks people into pasting and running malware by hand through bogus verification prompts. Train staff to distrust copy-and-run instructions and restrict clipboard-to-terminal execution.
Sources: The Hacker News · ↑ top
Latest developments: BleepingComputer reported July 1 that more than 900 Oracle E-Business Suite instances sit exposed online as attackers actively exploit the critical payments flaw CVE-2026-46817.
Oracle E-Business Suite runs finance, procurement, and human resources for large enterprises, and the flaw lets attackers reach unpatched servers over the internet. Apply Oracle's May 2026 patch and pull exposed instances off the public internet.
Sources: BleepingComputer · ↑ top
Latest developments: The Hacker News reported June 30 that researchers tested 444 AI chatbot apps for iPhone and found 282, nearly two-thirds, exposing paid AI access in their network traffic through plaintext API keys, reusable tokens, or backends that accept requests with no key at all.
Whoever captures one of these keys can send model requests on the developer's account and run up the bill. Developers should proxy AI calls through an authenticated backend and rotate any exposed keys.
Sources: The Hacker News · ↑ top
Latest developments: The House passed the Kids Internet and Digital Safety Act on June 30 by a 267-117 margin, clearing the two-thirds majority its fast-track process required, though Senate approval looks unlikely.
The KIDS Act would impose new online-safety duties on platforms serving minors. Its momentum stalls once it reaches the Senate.
Sources: The Record · ↑ top
Today: Sunny, high 98F.
Tonight: Mostly Clear, low 75F.
Thursday: Sunny, high 100F.
Latest developments: Kroger announced a definitive agreement July 1 to acquire Pittsburgh-based Giant Eagle for $1.65 billion in cash and assumed liabilities.
The deal puts Giant Eagle, one of Western Pennsylvania's most recognizable food and pharmacy chains, under Cincinnati-based Kroger; Kroger Chief Executive Greg Foran praised Giant Eagle for its fresh products, pharmacy, private label, and customer loyalty.
Sources: Pittsburgh Post-Gazette · KDKA · ↑ top
Latest developments: PublicSource examined July 1 how the AI data-center boom sweeping the region could either scar the landscape or push the power sector toward cleaner generation.
The analysis frames data centers rising on former steel-mill brownfields across southwestern Pennsylvania, tracing the choice between straining the grid and greening it back to the 1875 opening of the Edgar Thomson Works in Braddock.
Sources: PublicSource · ↑ top
Latest developments: PennDOT laid out detour options July 1 for the coming 25-day Parkway East closure, routing the primary detour through Wilkinsburg, Point Breeze, and Oakland.
Senior Assistant Construction Manager John Myler said drivers will move through Wilkinsburg, Point Breeze, and Oakland during the shutdown, which follows Swissvale business owners' warnings that the closure will choke deliveries and supplier routes.
Latest developments: The Post-Gazette reported July 1 on a University of Pittsburgh study examining whether low dopamine levels are tied to substance use among teenagers.
Pitt researchers are probing a possible link between diminished dopamine and adolescent drug and alcohol use, work that could reshape how clinicians identify teens at risk.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Pittsburgh City Paper profiled July 1 the Allegheny County Vector Control program as the county's first line of defense against insect-borne illness.
The program screens and treats mosquitoes and ticks across Allegheny County for pathogens including West Nile virus and Lyme disease, a routine summer defense as heat and standing water raise the risk.
Sources: Pittsburgh City Paper · ↑ top
Latest developments: Pittsburgh City Paper's July guide detailed the DJ lineup for Inside Out, the Carnegie Museum of Art summer series that opens Thursday, July 2, in Oakland.
Inside Out kicks off Thursday, July 2, at the Carnegie Museum of Art in Oakland with a DJ dance party featuring Delta, Ricky Mawzlin, Madame Trio, Keebs, TIZA, and special guest Kelman Duran; later editions add a Hill Dance Academy Theatre performance.
Sources: Pittsburgh City Paper · ↑ top
Pirates (43-43)
Tue Jun 30 · Pirates 0 · Phillies 8 · Final
Sánchez fans 9 in 7 innings, becomes 1st starter to reach 10 wins in 8-0 victory over Pirates
Up Next · Pirates @ Phillies · Wed Jul 1, 6:40 PM
Latest developments: Notre Dame head coach Marcus Freeman joined Cam Heyward's Not Just Football podcast, released July 1, to trace his path from Ohio State linebacker to the Fighting Irish sideline.
Freeman, once a teammate of Heyward's, talked leadership, recruiting, handling pressure, and developing NFL talent, along with faith and family, on the Steelers captain's show.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: ESPN's July 1 scouting warned that Bosnia and Herzegovina's set-piece specialty will demand full focus as the United States plays its World Cup round-of-32 match on home soil Wednesday, July 1.
Mauricio Pochettino's side, with Christian Pulisic declaring himself fit to go the distance, meets Bosnia and Herzegovina in the knockout round; ESPN framed the tie as the moment a team with a world-class coach and players in their primes can make its mark.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
S&P 500 7,401.90 ▼ -0.7% Dow 52,029.51 ▲ +0.7% Nasdaq 25,633.34 ▼ -1.9% WTI crude 70.35 ▼ -6.8% EUR/USD 1.1381 ▼ -1.0% GBP/USD 1.3201 ▼ -0.6% USD/JPY 161.78 ▲ +0.4%