daily plain-text briefing: security, markets, business, and pittsburgh
The FBI and Google dismantled the two-million-device NetNut proxy network as artificial intelligence reshaped both offense and defense, pushing Apple to compress its patch cycles and letting Anthropic's Claude mine open-source code for thousands of flaws.
Latest developments: Dark Reading reported July 2 that FortiBleed operators began monetizing footholds in thousands of Fortinet firewalls and piled on a Nextcloud zero-day, with one operator working negotiation panels for both INC and Lynx, while The Hacker News tied Anubis affiliates to Citrix Bleed 2 (CVE-2025-5777) and Sophos linked the Vect and TeamPCP supply-chain credential theft to ransomware deployment.
FortiBleed harvested credentials from hundreds of thousands of FortiGate firewalls, and INC and Lynx affiliates are now converting that access into intrusions, joined by Anubis crews exploiting Citrix Bleed 2 for initial access. Rotate credentials on exposed edge appliances and hunt for remote-management tooling abuse.
Sources: Dark Reading · The Hacker News · Sophos News · SecurityWeek · ↑ top
Latest developments: IBM and Red Hat assigned 20,000 engineers to a new Project Lightwell service to patch the flaws Anthropic's Claude Mythos surfaces, after the preview combed more than 23,000 open-source code paths and routed 1,596 verified vulnerabilities to maintainers, as the Trump administration lifted restrictions and Anthropic shipped Claude Fable 5.
Anthropic's Mythos preview finds open-source vulnerabilities at machine speed, swamping volunteer maintainers who already field more reports than they can act on. IBM's Project Lightwell aims to close that patch gap; CISOs need audit strategies for AI-generated code before it reaches production.
Sources: Dark Reading · Help Net Security · SecurityWeek · ↑ top
Latest developments: The FBI seized hundreds of NetNut domains July 2, two weeks after KrebsOnSecurity linked the service to the Popa botnet, while Google's Threat Intelligence Group, Lumen, and partners cut that two-million-device network's usable pool by millions.
NetNut, a residential-proxy service the publicly traded Israeli firm Alarum Technologies operates, rented roughly two million compromised home devices as traffic relays for other people's activity. Defenders should treat unexplained relay traffic from home routers and IoT gear as a compromise indicator.
Sources: Krebs on Security · The Hacker News · ↑ top
Latest developments: Cisco confirmed July 2 that attackers are exploiting CVE-2026-20230, a server-side request forgery flaw in Unified Communications Manager it patched in early June, with a public proof-of-concept available since disclosure and the first exploitation attempts observed last week.
The flaw lets attackers coerce Cisco's enterprise call-management server into issuing requests on their behalf, a foothold in voice infrastructure many organizations expose. Apply Cisco's June fix immediately and review server logs for anomalous outbound requests.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: Max Schrems of the Vienna privacy group noyb told European officials in a July 1 letter he will sue to invalidate the EU-U.S. Data Privacy Framework after a U.S. Supreme Court decision, the same week the Court of Justice of the European Union dismissed Google's final appeal against a €4.1 billion antitrust fine over its use of Android to promote Chrome and search.
The Data Privacy Framework governs lawful transfer of Europeans' personal data to U.S. companies, and a successful noyb challenge would strand thousands of firms that rely on it. Companies moving EU data westward should track the litigation and prepare fallback transfer mechanisms.
Sources: The Record · BleepingComputer · ↑ top
Latest developments: Dark Reading reported July 2 that Apple abandoned a long-standing policy and will ship more compressed patching cycles, citing attackers who use artificial intelligence to shorten the time between disclosure and working exploits.
Apple historically batched and paced its security fixes; the shift means faster, more frequent releases across iOS, macOS, and Safari. Enterprises should expect tighter update windows and adjust deployment testing accordingly.
Sources: Dark Reading · ↑ top
Latest developments: Russia struck Kyiv over several hours on July 2 with 74 missiles and nearly 500 drones, one of the war's largest single attacks, hours after Volodymyr Zelensky warned Moscow was preparing a massive strike.
Ballistic and cruise missiles and waves of drones hit Ukraine's capital, killing at least 21 people, as Zelensky presses a drone-war surge meant to force Moscow toward peace talks.
Sources: FT World · WSJ World News · ↑ top
Latest developments: The United States added just 57,000 jobs in June, the Labor Department reported July 2, ending a three-month streak of overperformance and weakening the dollar broadly as markets pulled forward Federal Reserve rate-cut bets.
The sharp hiring slowdown missed forecasts and pushed the dollar down, easing pressure for a Japanese intervention to prop up the yen, though Treasury yields still finished the holiday-shortened week higher.
Sources: FT World · WSJ Markets · ↑ top
This Afternoon: Sunny, high 98F.
Tonight: Mostly Clear, low 77F.
Friday: Sunny, high 98F.
Latest developments: Pittsburgh's Alcoa agreed July 2 to acquire South32's Australian aluminum assets in a $4.1 billion deal.
Alcoa, the aluminum producer headquartered in Pittsburgh, is picking up South32's operations in Australia, expanding its bauxite and alumina footprint.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Paramount+ series 'Mayor of Kingstown' finished filming its fifth and final season in Pittsburgh, the Pittsburgh Film Office said July 2.
Since 2022 the show shot 457 days across western Pennsylvania, injecting more than $325 million into the local economy and creating over 10,000 jobs, according to the Pittsburgh Film Office.
Latest developments: A consultant's report shows Allegheny County's pension fund is underfunded by $1.4 billion, and county leaders say taxpayers may have to cover the gap.
The shortfall lands a year after a 36% property tax increase; county workers have paid into the plan expecting steady retirement income, and leaders remain unsure how to close the hole, KDKA reported.
Latest developments: PennDOT will fully close a large stretch of I-376 from July 10 to August 3 to replace the Commercial Street Bridge near the Squirrel Hill Tunnel.
The 25-day total closure of the Parkway East segment near Frick Park forces detours on one of the region's most heavily traveled routes, Pittsburgh Magazine reported.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: A PennDOT truck leaked about 1,000 gallons of oil into a Monongahela River tributary, and the Pennsylvania Department of Environmental Protection opened an investigation.
The spill contaminated a Pittsburgh-area tributary of the Monongahela; the DEP is investigating the source and extent, WPXI reported.
Latest developments: Taste of Picklesburgh runs Thursday, July 9, through Sunday, July 19, as a pickle-infused preview to the main Picklesburgh festival.
Thirteen Downtown restaurants and one retailer across the Golden Triangle will serve pickle-inspired specials over the eleven days, Pittsburgh Magazine reported.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: The Post-Gazette published a July 2 guide to America 250 celebrations across the Pittsburgh area, and WPXI Channel 11 confirmed it will broadcast the city's Independence Day fireworks on Saturday, July 4.
Pittsburgh's Fourth of July festivities anchor the national semiquincentennial; residents can find events area-wide or watch the fireworks on WPXI.
Sources: Post-Gazette Arts & Entertainment · WPXI · ↑ top
Pirates (44-44)
Wed Jul 1 · Pirates 6 · Phillies 10 · Final
Phillies beat Paul Skenes and the Pirates 10-6 as Turner hits a 3-run homer
Thu Jul 2 · Pirates 6 · Phillies 1 · Final
Valdez helps Pirates beat Phillies 6-1 to split their four-game series
Up Next · Pirates @ Nationals · Fri Jul 3, 6:45 PM
Latest developments: Post-Gazette columnist Noah Hiles argued July 2 that rookie Esmerlyn Valdez can become everything the Pirates hoped Marcell Ozuna would be.
Valdez has homered in four straight games and drove in three during the Phillies series; Hiles frames the young designated hitter as the answer to Pittsburgh's disappointing Ozuna signing.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Notre Dame head coach Marcus Freeman sat down with Steelers captain Cam Heyward on the 'Not Just Football' podcast, posted July 1.
Freeman traced his path from Ohio State linebacker to Notre Dame head coach and talked leadership, recruiting, handling pressure, and developing NFL talent, alongside his friendship with Heyward.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Pirates' Seth Hernandez and Edward Florentino earned selection to the 2026 MLB All-Star Futures Game, the Post-Gazette reported July 1.
Hernandez, the organization's top pitching prospect and the first minor leaguer to reach 100 strikeouts this season, joins outfielder Edward Florentino in the prospect showcase.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: A Washington grand jury indicted three-time US Olympic canoeist David Hearn on July 2 on a felony charge over damage to the Lincoln Memorial Reflecting Pool.
The indictment accuses Hearn of maliciously destroying lining material at the pool on June 19, following a $14.7 million renovation that left liner peeling; President Trump had called the incident vandalism.
Sources: ESPN Olympics · ↑ top
Latest developments: ESPN assessed July 2 how the United States can advance past Belgium in the World Cup round of 16 without suspended top scorer Folarin Balogun.
Belgium reached the last 16 by rallying from two goals down to beat Senegal in extra time; ESPN argues the US, having shown it can win ugly, has the tools to move on despite losing Balogun to a red card.
Sources: ESPN Soccer · ↑ top
S&P 500 7,426.91 = +0.0% Dow 52,120.78 ▲ +0.9% Nasdaq 25,746.02 ▼ -0.8% WTI crude 70.00 ▼ -5.9% EUR/USD 1.1387 ▼ -0.5% GBP/USD 1.3211 ▼ -0.2% USD/JPY 161.98 ▲ +0.4%