daily plain-text briefing: security, markets, business, and pittsburgh
IBM and Red Hat pledge $5 billion and 20,000 engineers to patch the open-source bugs Anthropic's AI unearths at machine speed, as attackers turn stolen Fortinet credentials and freshly confirmed Cisco and SharePoint flaws into live intrusions.
Latest developments: IBM and Red Hat assigned 20,000 engineers to a new service, Project Lightwell, to remediate the open-source flaws Anthropic's Claude keeps surfacing, and Anthropic made Claude Fable 5 widely available Tuesday night after the Trump administration lifted export controls on its frontier cybersecurity models.
Anthropic's Claude Mythos Preview combed more than 23,000 open-source code paths this spring and routed 1,596 verified vulnerabilities to the projects that own them, a volume Tuskira found overwhelms volunteer maintainers; IBM and Red Hat now pitch Project Lightwell to close the resulting patch gap.
Sources: Dark Reading · Help Net Security · SecurityWeek · The Record · ↑ top
Latest developments: Researchers attributed the FortiBleed campaign—credentials harvested from hundreds of thousands of FortiGate firewalls—to the INC and Lynx ransomware operations after finding an operator tied to FortiBleed infrastructure working negotiation panels for both groups.
FortiBleed threw roughly 75,000 Fortinet firewalls wide open and verified the stolen credentials, which now seed follow-on network intrusions and ransomware deployment; Fortinet customers should rotate credentials and audit access.
Sources: SecurityWeek · The Hacker News · BleepingComputer · Graham Cluley · ↑ top
Latest developments: CISA added SharePoint Server flaw CVE-2026-45659 to its Known Exploited Vulnerabilities catalog and warned that attackers now exploit the CVSS 8.8 remote-code-execution bug Microsoft patched in May.
The flaw arises from deserialization of untrusted data in Microsoft SharePoint Server and lets attackers run code on unpatched instances; federal agencies and enterprises must patch under CISA's directive.
Sources: BleepingComputer · SecurityWeek · The Hacker News · ↑ top
Latest developments: Cisco confirmed July 2 that attackers are exploiting CVE-2026-20230, a server-side request forgery flaw in Unified Communications Manager it patched in early June, with the first attempts observed last week and a public proof-of-concept circulating since disclosure.
Cisco Unified Communications Manager, the enterprise call-control platform, carries an SSRF bug that lets attackers reach internal systems; administrators should apply the June fix at once.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: Kaspersky detailed a massive multi-language campaign that abuses the ScreenConnect remote-access tool to deploy AsyncRAT through spoofed download sites for OBS Studio, DNS Jumper, DS4Windows, and Bandicam, while Fortinet's FortiGuard Labs tracked the Brazilian banking trojan Ousaban hitting Windows users who bank in Spain and Portugal.
Both campaigns lean on trusted software brands and geo-targeted phishing—Ousaban opens with a fake corrupted-PDF lure and hides its payload inside an image—to plant remote-access malware and steal banking logins; users should download software only from official vendors.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: The Labor Department reported June payrolls grew just 57,000, well short of forecasts and a sharp slowdown after three months of overperformance.
The weak reading sent Treasury yields and the dollar lower and lifted stock futures as traders bet the Federal Reserve will cut rates; the miss came against a backdrop of elevated inflation and global turmoil.
Sources: FT World · WSJ Markets · ↑ top
Latest developments: Blue Owl Capital investors asked to pull $4.7 billion from flagship funds, part of more than $22 billion in second-quarter redemption requests across 20 private credit funds the FT tracks.
The persistent investor exodus from Blue Owl's semi-liquid private credit funds signals stress in a fast-grown corner of nonbank lending, though the quarter's requests eased from the prior one.
Sources: FT Home · WSJ Markets · ↑ top
Latest developments: The overnight death toll rose to at least 17 as Russia fired 74 missiles and nearly 500 drones at Kyiv over several hours, one of the war's largest single strikes on the capital.
The barrage of ballistic and cruise missiles and waves of drones followed President Volodymyr Zelenskyy's warning that Moscow was preparing a massive strike, battering the capital as Ukraine's own long-range drones squeeze Russian fuel supplies.
Sources: WSJ World News · FT World · ↑ top
Today: Sunny, high 97F.
Tonight: Mostly Clear, low 77F.
Friday: Sunny, high 98F.
Latest developments: Western Pennsylvania grocery experts said Kroger's pending purchase of Giant Eagle extends a wave of consolidation sweeping the industry.
The acquisition merges two chains with deep regional roots—O'Hara Township-based Giant Eagle and Cincinnati's Kroger, which operated here decades ago—as analysts warn consolidation is reshaping where and how the region shops.
Sources: TribLive · TribLive · ↑ top
Latest developments: Brewers at last month's Beers of the Burgh festival showcased far more nonalcoholic options than in past years, a shift local makers say is accelerating.
NEXTpittsburgh reported a surge of nonalcoholic and low-alcohol brews from Pittsburgh producers, part of a national moderation trend, with Abjuration Brewing, Old Thunder, and Brew Gentlemen among those drawing notice.
Sources: NEXTpittsburgh · ↑ top
Latest developments: PennDOT laid out detour routes for the coming 25-day Parkway East shutdown to replace the Commercial Street Bridge near Frick Park.
The Interstate 376 closure will reroute commuters and freight for 25 days while crews replace the Commercial Street Bridge, a project Swissvale business owners warn will choke deliveries and supplier routes across the East End.
Latest developments: Crews closed the eastbound lanes of Mount Nebo Road in Sewickley Hills Borough after a routine inspection found deterioration on an overpass.
The Allegheny County borough shut the eastbound side of Mount Nebo Road when a bridge inspection turned up structural deterioration, with no reopening date set.
Latest developments: Pittsburgh kept its cooling centers open into the Fourth of July weekend as extreme heat warnings held for a third straight day, with Thursday the week's hottest.
An extreme heat warning covers much of Western Pennsylvania with heat-index values above 105 through Friday, feels-like temperatures topping 100, and storms threatening the holiday weekend across the region.
Sources: WTAE · TribLive · ↑ top
Latest developments: New details set the July 4 program: the Plain White T's will perform alongside line dancing and Ferris wheel rides, ahead of what the city bills as its largest-ever fireworks show.
On Saturday, July 4, Pittsburgh's America 250 celebration—voted the nation's best by USA Today readers—will span Downtown, the North Shore, and Mount Washington, capping the day with the biggest fireworks display in city history.
Sources: KDKA · Post-Gazette Music · ↑ top
Pirates (43-44)
Wed Jul 1 · Pirates 6 · Phillies 10 · Final
Phillies beat Paul Skenes and the Pirates 10-6 as Turner hits a 3-run homer
Up Next · Pirates @ Phillies · Thu Jul 2, 12:35 PM
Latest developments: The Post-Gazette's June report card graded teamwide pitching woes as the cause of the Pirates' worst month of the season.
Beat coverage pinned Pittsburgh's June slide on a struggling bullpen and rotation, including a down year from ace Paul Skenes, even as rookie outfielder Esmerlyn Valdez's bat offered a rare bright spot.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN analysis judged that the United States proved it can win ugly in beating Bosnia and Herzegovina and now must face Belgium in the round of 16 without suspended top scorer Folarin Balogun.
Mauricio Pochettino's side advanced 2-0 before Balogun's red card, and writers called the gritty, multifaceted win a good sign for a U.S. team that will lean on its depth against Belgium, which rallied from 2-0 down to beat Senegal in extra time.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
S&P 500 7,426.91 = +0.0% Dow 52,120.78 ▲ +0.9% Nasdaq 25,746.02 ▼ -0.8% WTI crude 70.00 ▼ -5.9% EUR/USD 1.1387 ▼ -0.5% GBP/USD 1.3211 ▼ -0.2% USD/JPY 161.98 ▲ +0.4%