================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, July 1, 2026 - 4:05 PM EDT ================================================================ Hackers breached a US Homeland Security information-sharing network the same day researchers showed frontier AI models can hack a national ticketing backend and impersonate politicians convincingly. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Anthropic's Claude broke into Front Gate's ticketing backend even as Washington lifted export controls on its models, underscoring frontier AI's dual-use edge. see: Frontier AI Weaponized for Hacking and Impersonation; US Lifts Export Controls on Anthropic Models * [UPDATE (new)] Cisco Talos exposed ARToken, an EvilTokens phishing-as-a-service panel with 80-plus API endpoints for device-code phishing and token persistence against Microsoft 365. see: Microsoft 365 Phishing Kits and RAT Campaigns Scale Up * [UPDATE (new)] DHS confirmed a breach of its Homeland Security Information Network as Synacktiv disclosed an unpatched Argo CD repo-server flaw that can seize a Kubernetes cluster. see: DHS HSIN Platform Breach; Unpatched Argo CD Repo-Server Flaw * [UPDATE (new)] The Justice Department extradited alleged Scattered Spider member Peter Stokes from Finland to a Chicago federal court on intrusion and fraud charges. see: Cybercrime Arrests and Penalties * [TREND] In Reading, Zitron argues the AI boom is losing, Newport warns of productivity paradoxes, and Figma's Dylan Field still frames AI as a tailwind for design. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI SECURITY ---------------------------------------------------------------- 1. FRONTIER AI WEAPONIZED FOR HACKING AND IMPERSONATION AI Security · [ai, llm] Latest developments: A researcher used Anthropic's Claude Opus 4.7 to break into Front Gate, the ticketing backend behind Lollapalooza and Bonnaroo, and issue any ticket he chose, while Dark Reading documented attackers hijacking exposed AI endpoints to power offensive operations and a study found AI impersonators of 112 public figures struck audiences as more authentic than the real politicians. Commercial AI models now serve as ready attack tools: they forge tickets through vulnerable web apps, run offensive tasks from company AI endpoints left open online, and produce synthetic public figures that outperform originals on perceived authenticity. Organizations should lock down AI endpoints and treat model access as a live attack surface. - Wired Security: https://www.wired.com/story/claude-helped-a-hacker-find-a-way-to-issue-tickets-to-almost-every-us-music-festival/ - Dark Reading: https://www.darkreading.com/cloud-security/attackers-hijack-exposed-ai-endpoints-power-offensive-ops - 404 Media: https://www.404media.co/untitled-28/ 2. MICROSOFT 365 PHISHING KITS AND RAT CAMPAIGNS SCALE UP Ransomware and Cybercrime · [phishing, malware] Latest developments: Cisco Talos exposed ARToken, an EvilTokens phishing-as-a-service panel with more than 80 API endpoints for device-code phishing, Primary Refresh Token persistence, business email compromise, and SharePoint exfiltration against Microsoft 365, while Kaspersky detailed a massive multi-language campaign dropping AsyncRAT through ScreenConnect installers that spoof OBS Studio, Bandicam, and DS4Windows, and separate research cataloged 3,000 live ClickFix payloads served by API-driven servers. Attackers are industrializing credential theft and remote-access malware, packaging Microsoft 365 account takeover, token persistence, and per-victim payload delivery into rentable platforms. Defenders should enforce phishing-resistant multi-factor authentication and block unsigned remote-support installers. - Cisco Talos: https://blog.talosintelligence.com/artoken-inside-an-eviltokens-affiliate-panel-targeting-microsoft-365/ - The Hacker News: https://thehackernews.com/2026/07/seo-poisoned-software-sites-abuse.html - The Hacker News: https://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.html 3. CYBERCRIME ARRESTS AND PENALTIES Ransomware and Cybercrime · [arrest, policy] Latest developments: The Justice Department extradited Peter Stokes, a 19-year-old dual US-Estonian citizen and alleged Scattered Spider member, from Finland to a Chicago federal court on June 30 on charges of conspiracy, computer intrusion, and fraud, as Kim Zetter reported that an Iranian hacker's arrest last week spotlights Iran's move into economic espionage and intellectual-property theft, and the Federal Trade Commission fined Amazon $2.25 million for blocking identity-theft victims from their transaction records. Governments and regulators tightened the screws on cybercrime across three fronts: prosecuting the young operators behind Scattered Spider intrusions, exposing Iran's expansion beyond disruption into IP theft, and penalizing a corporate custodian that withheld fraud evidence from victims. - The Hacker News: https://thehackernews.com/2026/07/19-year-old-scattered-spider-suspect.html - Kim Zetter (Zero Day): https://www.zetter-zeroday.com/arrest-of-iranian-hacker-spotlights-irans-movement-into-economic-espionage-and-ip-theft/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/amazon-fined-225m-for-withholding-evidence-from-fraud-victims/ 4. US LIFTS EXPORT CONTROLS ON ANTHROPIC MODELS Policy and Regulation · [policy, ai] Latest developments: The Commerce Department on June 30 lifted the jailbreak-linked export controls it had placed on Anthropic's Claude Fable 5 and Mythos 5 about two and a half weeks earlier, restoring Fable 5 worldwide on July 1, while Anthropic shipped Sonnet 5 with new safeguards against dangerous cyber use. Washington reversed restrictions on Anthropic's most powerful models after the company reached agreements with the government, reopening global access as the vendor layers cyber-misuse guardrails into its newest release. The episode marks an early test of how the US governs frontier AI capable of both offense and defense. - The Record: https://therecord.media/us-lifts-export-controls-anthropic-cyber-models - The Hacker News: https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.html - Help Net Security: https://www.helpnetsecurity.com/2026/07/01/anthropic-claude-sonnet-5/ 5. DHS HSIN PLATFORM BREACH Data Breaches · [breach, government] Latest developments: The Department of Homeland Security confirmed July 1 that hackers breached the Homeland Security Information Network and opened an investigation. HSIN is a sensitive information-sharing platform that federal, state, local, and private-sector partners rely on to exchange threat and operational data. DHS is investigating the compromise, and connected partners should watch for exposed records and account misuse. - BleepingComputer: https://www.bleepingcomputer.com/news/security/dhs-confirms-hackers-breached-hsin-info-sharing-platform/ 6. UNPATCHED ARGO CD REPO-SERVER FLAW Vulnerabilities and Exploits · [zero-day, patch] Latest developments: Synacktiv disclosed July 1 an unpatched flaw in the repo-server component of Argo CD that lets an unauthenticated attacker who reaches the component's internal network port run code and seize a full Kubernetes cluster, with no CVE and no fix available. Argo CD deploys software to Kubernetes across many enterprises, so a repo-server takeover hands attackers the entire cluster. Synacktiv reported the bug to the maintainers; until a patch ships, teams should restrict network access to the repo-server port. - The Hacker News: https://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Declines to Renew North American Trade Pact Latest developments: Washington let a July 1 deadline pass without renewing the North American trade agreement, shifting terms with Canada and Mexico to annual reviews. The United States declined by a Wednesday deadline to renew the trade pact it holds with Canada and Mexico, its two largest trading partners, and will instead hold yearly reviews of the terms, injecting fresh uncertainty into cross-border commerce and supply chains. - WSJ: https://www.wsj.com/world/americas/u-s-plunges-trade-pact-with-canada-and-mexico-into-doubt-4ee87167 - FT: https://www.ft.com/content/2c7b4dc8-1b1c-49f4-b51a-0dee0c1d216a PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Sunny, high 98F. Tonight: Clear, low 74F. Thursday: Sunny, high 99F. Business: * Kroger Buys Giant Eagle for $1.65 Billion Latest developments: Kroger and Giant Eagle put a price on the deal July 1—$1.65 billion for the Pittsburgh chain, which keeps its name and headquarters. The Kroger Company reached a definitive agreement to acquire the Pittsburgh grocery chain Giant Eagle for $1.65 billion, a deal Kroger Chief Executive Greg Foran praised for the regional grocer's fresh products, pharmacy, and customer loyalty; Giant Eagle keeps its name and Pittsburgh headquarters. - KDKA: https://www.cbsnews.com/pittsburgh/news/kroger-buying-giant-eagle/ - WTAE: https://www.wtae.com/article/giant-eagle-kroger-sale/71792940 * Eat'n Park's Smiley Cookie Turns 40 Latest developments: Eat'n Park's Smiley Cookie won the Pennsylvania Chamber of Business and Industry's "Coolest Thing Made in PA" contest as it marks its 40th year. The Pittsburgh restaurant chain Eat'n Park bakes nearly 8 million Smiley Cookies a year, and its cheerful iced treat, now 40 years old, took the title of "Coolest Thing Made in PA" in a bracket-style competition the Pennsylvania Chamber of Business and Industry sponsored. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/something-to-smile-about-eatn-parks-iconic-cookie-turns-40/ Around town: * Lawmaker Removed From Pa. House Over Flag Jacket Latest developments: State Representative Eric Davanzo said July 1 that he was pulled from the Pennsylvania House floor a day earlier for wearing an American-flag suit jacket. Eric Davanzo, a Republican representing Westmoreland County's 58th district, said Speaker Joanna McClinton had him removed from the Pennsylvania House floor Tuesday for wearing a suit jacket he called patriotic, worn ahead of the nation's 250th-anniversary celebrations. - KDKA: https://www.cbsnews.com/pittsburgh/news/pennsylvania-lawmaker-kicked-off-house-floor-patriotic-american-flag-jacket/ * Trolley Museum Unveils 'Spirit of 1776' Latest developments: The Pennsylvania Trolley Museum revealed a recreation of Pittsburgh's bicentennial streetcar for the nation's 250th birthday. The Pennsylvania Trolley Museum in Washington County unveiled the "Spirit of 1776," a faithful recreation of Pittsburgh's red-white-and-blue bicentennial streetcar that was scrapped after a 1982 Downtown collision, built by the museum's NextGen volunteer committee. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/spirit-of-1776-trolley/ * Pittsburgh Cyclist Finishes Coast-to-Coast Race Latest developments: Jeff Koontz completed the roughly 3,000-mile ride in 12 days and appeared live on KDKA July 1. Pittsburgh cyclist Jeff Koontz finished one of the world's toughest races, pedaling coast to coast—about 3,000 miles in 12 days—in support of the KDKA Turkey Fund. - KDKA: https://www.cbsnews.com/pittsburgh/video/pittsburgh-cyclist-jeff-koontz-completed-one-of-the-toughest-races-in-the-world/ Events: * Anthrocon Fills Downtown for 20th Year Latest developments: Organizers expect Anthrocon's largest-ever crowd, more than 18,000, for its milestone 20th anniversary this weekend. Anthrocon, one of the world's largest furry conventions, runs Thursday, July 2 through Sunday, July 5 at the David L. Lawrence Convention Center in Downtown Pittsburgh, drawing a projected 18,000-plus attendees for its 20th anniversary and an estimated $18.6 million in regional economic impact. - NEXTpittsburgh: https://nextpittsburgh.com/events/17-things-to-do-for-4th-of-july-weekend-in-pittsburgh/ - WPXI: https://www.wpxi.com/news/local/preparations-underway-anthrocon-pittsburgh-this-weekend/XXTO54GUHFFILILKYTZI3BTUWY/ SPORTS ---------------------------------------------------------------- Pirates (43-43) Tue Jun 30 · Pirates 0 · Phillies 8 · Final Sánchez fans 9 in 7 innings, becomes 1st starter to reach 10 wins in 8-0 victory over Pirates https://plaintextsports.com/mlb/2026-06-30/pit-phi Up Next · Pirates @ Phillies · Wed Jul 1, 6:40 PM https://plaintextsports.com/mlb/2026-07-01/pit-phi Around the Teams: * Two Pirates Prospects Make Futures Game Latest developments: MLB named pitcher Seth Hernandez and outfielder Edward Florentino to the All-Star Futures Game roster July 1. The Pirates placed top pitching prospect Seth Hernandez, the first pitcher in the minors to reach 100 strikeouts this season, and outfielder Edward Florentino on the MLB All-Star Futures Game roster, the Post-Gazette reported. - Post-Gazette: https://www.post-gazette.com/sports/pirates/2026/07/01/seth-hernandez-florentino-mlb-allstar-futures-game/stories/202607010043 * Marcus Freeman Joins Cam Heyward's Podcast Latest developments: Notre Dame coach Marcus Freeman guested on the July 1 episode of "Not Just Football with Cam Heyward." Notre Dame head coach Marcus Freeman appeared on Steelers captain Cam Heyward's "Not Just Football" podcast, tracing his path from Ohio State linebacker to head coach and discussing leadership, recruiting, handling pressure, and developing NFL talent. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=rfvLY672_Zo Team USA: * USMNT Faces Bosnia in Round of 32 Latest developments: Ahead of Wednesday's last-32 match, ESPN warned the U.S. men must key on Bosnia's set-piece threat. The United States men's national team meets Bosnia and Herzegovina in the World Cup round of 32 at its home tournament; ESPN's scouting flags Bosnia's set-piece prowess as the main danger to a U.S. side that has handled defensive-minded opponents in the group stage. - ESPN: https://www.espn.com/soccer/story/_/id/49227242/opposition-scouting-bosnia-herzegovina-set-piece-specialty-require-usmnt-full-focus-world-cup-round-32 - ESPN: https://www.espn.com/soccer/story/_/id/49229496/riding-high-world-cup-home-soil-now-usmnt READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI industry is faltering on both its finances and its strategy, marshaling the numbers to contend the boom is losing rather than winning. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport uses the personal computer's history to warn that a technology poised as a productivity slam dunk, AI included, can fail to deliver the gains its promise implies. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field on building the company and why Field sees AI as a tailwind for design tools rather than a threat. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,401.90 ▼ -0.7% Dow 52,029.51 ▲ +0.7% Nasdaq 25,633.34 ▼ -1.9% WTI crude 70.35 ▼ -6.8% EUR/USD 1.1381 ▼ -1.0% GBP/USD 1.3201 ▼ -0.6% USD/JPY 161.78 ▲ +0.4% ================================================================ Generated 2026-07-01 16:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================