================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, July 2, 2026 - 4:06 PM EDT ================================================================ The FBI and Google dismantled the two-million-device NetNut proxy network as artificial intelligence reshaped both offense and defense, pushing Apple to compress its patch cycles and letting Anthropic's Claude mine open-source code for thousands of flaws. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Artificial intelligence drives both attackers and defenders as Anthropic's Claude Mythos and IBM's Project Lightwell scale up bug-fixing while Apple compresses patch cycles against faster exploits. see: AI Turns Bug Hunter as Anthropic and IBM Scale Up; Apple Reverses Its Patch-Timing Policy * [TREND] Stolen edge-device access is becoming the ransomware on-ramp as FortiBleed operators monetize Fortinet firewalls for INC and Lynx while Cisco confirms active exploitation of a Unified CM flaw. see: FortiBleed and Citrix Bleed 2 Feed Ransomware; Cisco Confirms Unified CM Exploitation * [UPDATE (new)] The FBI seized hundreds of NetNut domains while Google's Threat Intelligence Group and Lumen slashed the two-million-device Popa botnet behind the proxy service. see: FBI and Google Dismantle NetNut Proxy Network * [UPDATE (new)] Russia hit Kyiv with 74 missiles and nearly 500 drones in one of the war's largest barrages, hours after Zelensky warned of a massive strike. see: Russia Launches One of the War's Largest Barrages on Kyiv * [UPDATE (new)] US June payrolls undershot at 57,000 jobs, ending a three-month overperformance streak and weakening the dollar as markets pulled forward Federal Reserve rate-cut bets. see: US June Payrolls Undershoot at 57,000 * [TREND] The Reading list turns skeptical on AI economics as Zitron argues the industry is losing, Newport warns of productivity paradoxes, and Figma's Dylan Field counters that AI is a tailwind. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI SECURITY ---------------------------------------------------------------- 1. FORTIBLEED AND CITRIX BLEED 2 FEED RANSOMWARE Ransomware and Cybercrime · [ransomware, credential-theft, exploit] Latest developments: Dark Reading reported July 2 that FortiBleed operators began monetizing footholds in thousands of Fortinet firewalls and piled on a Nextcloud zero-day, with one operator working negotiation panels for both INC and Lynx, while The Hacker News tied Anubis affiliates to Citrix Bleed 2 (CVE-2025-5777) and Sophos linked the Vect and TeamPCP supply-chain credential theft to ransomware deployment. FortiBleed harvested credentials from hundreds of thousands of FortiGate firewalls, and INC and Lynx affiliates are now converting that access into intrusions, joined by Anubis crews exploiting Citrix Bleed 2 for initial access. Rotate credentials on exposed edge appliances and hunt for remote-management tooling abuse. - Dark Reading: https://www.darkreading.com/threat-intelligence/fortibleed-actors-inc-lynx-ransomware-gangs - The Hacker News: https://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html - Sophos News: https://www.sophos.com/en-us/blog/vect-and-teampcp-partner-for-ransomware-campaigns - SecurityWeek: https://www.securityweek.com/fortibleed-campaign-linked-to-inc-lynx-ransomware-attacks/ 2. AI TURNS BUG HUNTER AS ANTHROPIC AND IBM SCALE UP AI Security · [ai, vulnerability, supply-chain] Latest developments: IBM and Red Hat assigned 20,000 engineers to a new Project Lightwell service to patch the flaws Anthropic's Claude Mythos surfaces, after the preview combed more than 23,000 open-source code paths and routed 1,596 verified vulnerabilities to maintainers, as the Trump administration lifted restrictions and Anthropic shipped Claude Fable 5. Anthropic's Mythos preview finds open-source vulnerabilities at machine speed, swamping volunteer maintainers who already field more reports than they can act on. IBM's Project Lightwell aims to close that patch gap; CISOs need audit strategies for AI-generated code before it reaches production. - Dark Reading: https://www.darkreading.com/vulnerabilities-threats/anthropic-s-ai-finds-bugs-ibm-bets-5b-it-can-fix-them- - Help Net Security: https://www.helpnetsecurity.com/2026/07/02/open-source-ai-patch-gap/ - SecurityWeek: https://www.securityweek.com/trump-administration-lifts-restrictions-on-anthropics-claude-models-after-cybersecurity-alarm/ 3. FBI AND GOOGLE DISMANTLE NETNUT PROXY NETWORK Ransomware and Cybercrime · [botnet, law-enforcement, cybercrime] Latest developments: The FBI seized hundreds of NetNut domains July 2, two weeks after KrebsOnSecurity linked the service to the Popa botnet, while Google's Threat Intelligence Group, Lumen, and partners cut that two-million-device network's usable pool by millions. NetNut, a residential-proxy service the publicly traded Israeli firm Alarum Technologies operates, rented roughly two million compromised home devices as traffic relays for other people's activity. Defenders should treat unexplained relay traffic from home routers and IoT gear as a compromise indicator. - Krebs on Security: https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/ - The Hacker News: https://thehackernews.com/2026/07/google-disrupts-netnut-residential.html 4. CISCO CONFIRMS UNIFIED CM EXPLOITATION Vulnerabilities and Exploits · [vulnerability, exploit, patch] Latest developments: Cisco confirmed July 2 that attackers are exploiting CVE-2026-20230, a server-side request forgery flaw in Unified Communications Manager it patched in early June, with a public proof-of-concept available since disclosure and the first exploitation attempts observed last week. The flaw lets attackers coerce Cisco's enterprise call-management server into issuing requests on their behalf, a foothold in voice infrastructure many organizations expose. Apply Cisco's June fix immediately and review server logs for anomalous outbound requests. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisco-finally-confirms-attackers-exploiting-unified-cm-flaw/ - SecurityWeek: https://www.securityweek.com/cisco-confirms-in-the-wild-exploitation-of-unified-cm-vulnerability/ 5. EUROPE PRESSES ON DATA TRANSFERS AND GOOGLE Policy and Regulation · [policy, privacy, regulation] Latest developments: Max Schrems of the Vienna privacy group noyb told European officials in a July 1 letter he will sue to invalidate the EU-U.S. Data Privacy Framework after a U.S. Supreme Court decision, the same week the Court of Justice of the European Union dismissed Google's final appeal against a €4.1 billion antitrust fine over its use of Android to promote Chrome and search. The Data Privacy Framework governs lawful transfer of Europeans' personal data to U.S. companies, and a successful noyb challenge would strand thousands of firms that rely on it. Companies moving EU data westward should track the litigation and prepare fallback transfer mechanisms. - The Record: https://therecord.media/supreme-court-decision-threatens-eu-us-data-sharing - BleepingComputer: https://www.bleepingcomputer.com/news/legal/google-loses-final-appeal-to-overturn-41-billion-eu-fine/ 6. APPLE REVERSES ITS PATCH-TIMING POLICY Vulnerabilities and Exploits · [patch, apple, ai] Latest developments: Dark Reading reported July 2 that Apple abandoned a long-standing policy and will ship more compressed patching cycles, citing attackers who use artificial intelligence to shorten the time between disclosure and working exploits. Apple historically batched and paced its security fixes; the shift means faster, more frequent releases across iOS, macOS, and Safari. Enterprises should expect tighter update windows and adjust deployment testing accordingly. - Dark Reading: https://www.darkreading.com/cybersecurity-operations/apple-patch-policy-ai BUSINESS AND POLITICS ---------------------------------------------------------------- * Russia Launches One of the War's Largest Barrages on Kyiv Latest developments: Russia struck Kyiv over several hours on July 2 with 74 missiles and nearly 500 drones, one of the war's largest single attacks, hours after Volodymyr Zelensky warned Moscow was preparing a massive strike. Ballistic and cruise missiles and waves of drones hit Ukraine's capital, killing at least 21 people, as Zelensky presses a drone-war surge meant to force Moscow toward peace talks. - FT World: https://www.ft.com/content/f85948e6-d779-4d74-9a59-56e83c3534d6 - WSJ World News: https://www.wsj.com/world/europe/russia-ukraine-strikes-kyiv-9f76c67d * US June Payrolls Undershoot at 57,000 Latest developments: The United States added just 57,000 jobs in June, the Labor Department reported July 2, ending a three-month streak of overperformance and weakening the dollar broadly as markets pulled forward Federal Reserve rate-cut bets. The sharp hiring slowdown missed forecasts and pushed the dollar down, easing pressure for a Japanese intervention to prop up the yen, though Treasury yields still finished the holiday-shortened week higher. - FT World: https://www.ft.com/content/4fd134b3-b75b-4a25-9f2c-8bdb4f8f7dea - WSJ Markets: https://www.wsj.com/finance/currencies/yen-consolidates-ahead-of-u-s-nonfarm-payrolls-report-94a64c4a?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Sunny, high 98F. Tonight: Mostly Clear, low 77F. Friday: Sunny, high 98F. Business: * Alcoa Buys South32 Australian Assets for $4.1 Billion Latest developments: Pittsburgh's Alcoa agreed July 2 to acquire South32's Australian aluminum assets in a $4.1 billion deal. Alcoa, the aluminum producer headquartered in Pittsburgh, is picking up South32's operations in Australia, expanding its bauxite and alumina footprint. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/powersource/2026/07/02/alcoa-south32-aluminim-pittsburgh-australia/stories/202607020060 * 'Mayor of Kingstown' Wraps Final Season in Pittsburgh Latest developments: The Paramount+ series 'Mayor of Kingstown' finished filming its fifth and final season in Pittsburgh, the Pittsburgh Film Office said July 2. Since 2022 the show shot 457 days across western Pennsylvania, injecting more than $325 million into the local economy and creating over 10,000 jobs, according to the Pittsburgh Film Office. - KDKA: https://www.cbsnews.com/pittsburgh/news/mayor-of-kingstown-wraps-pittsburgh/ Around town: * Allegheny County Faces $1.4 Billion Pension Shortfall Latest developments: A consultant's report shows Allegheny County's pension fund is underfunded by $1.4 billion, and county leaders say taxpayers may have to cover the gap. The shortfall lands a year after a 36% property tax increase; county workers have paid into the plan expecting steady retirement income, and leaders remain unsure how to close the hole, KDKA reported. - KDKA: https://www.cbsnews.com/pittsburgh/news/allegheny-county-pension-fund-crisis-explained/ * I-376 to Close 25 Days for Commercial Street Bridge Latest developments: PennDOT will fully close a large stretch of I-376 from July 10 to August 3 to replace the Commercial Street Bridge near the Squirrel Hill Tunnel. The 25-day total closure of the Parkway East segment near Frick Park forces detours on one of the region's most heavily traveled routes, Pittsburgh Magazine reported. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/commercial-street-bridge-closure-376-traffic-detours/ * PennDOT Truck Spills 1,000 Gallons of Oil Into Mon Tributary Latest developments: A PennDOT truck leaked about 1,000 gallons of oil into a Monongahela River tributary, and the Pennsylvania Department of Environmental Protection opened an investigation. The spill contaminated a Pittsburgh-area tributary of the Monongahela; the DEP is investigating the source and extent, WPXI reported. - WPXI: https://www.wpxi.com/news/local/tanker-truck-leaks-1k-gallons-oil-into-monongahela-river-tributary-dep-says/67DB7PISFBHP7PS4BKWAE3NAJM/ Events: * Taste of Picklesburgh Previews the Festival Downtown Latest developments: Taste of Picklesburgh runs Thursday, July 9, through Sunday, July 19, as a pickle-infused preview to the main Picklesburgh festival. Thirteen Downtown restaurants and one retailer across the Golden Triangle will serve pickle-inspired specials over the eleven days, Pittsburgh Magazine reported. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/its-a-big-dill-jumpstart-pittsburghs-fave-pickle-fest-with-a-taste-of-picklesburgh/ * Pittsburgh Marks America's 250th on the Fourth Latest developments: The Post-Gazette published a July 2 guide to America 250 celebrations across the Pittsburgh area, and WPXI Channel 11 confirmed it will broadcast the city's Independence Day fireworks on Saturday, July 4. Pittsburgh's Fourth of July festivities anchor the national semiquincentennial; residents can find events area-wide or watch the fireworks on WPXI. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/recreation/2026/07/02/where-to-celebrate-america-250-pittsburgh-area/stories/202607020002 - WPXI: https://www.wpxi.com/news/local/you-can-watch-pittsburgh-independence-day-fireworks-wpxi/HNFPDX5RJZHPPJ6JWLBO6O4JY4/ SPORTS ---------------------------------------------------------------- Pirates (44-44) Wed Jul 1 · Pirates 6 · Phillies 10 · Final Phillies beat Paul Skenes and the Pirates 10-6 as Turner hits a 3-run homer https://plaintextsports.com/mlb/2026-07-01/pit-phi Thu Jul 2 · Pirates 6 · Phillies 1 · Final Valdez helps Pirates beat Phillies 6-1 to split their four-game series https://plaintextsports.com/mlb/2026-07-02/pit-phi Up Next · Pirates @ Nationals · Fri Jul 3, 6:45 PM https://plaintextsports.com/mlb/2026-07-03/pit-wsh Around the Teams: * Hiles: Valdez Could Be the Bat Pirates Wanted in Ozuna Latest developments: Post-Gazette columnist Noah Hiles argued July 2 that rookie Esmerlyn Valdez can become everything the Pirates hoped Marcell Ozuna would be. Valdez has homered in four straight games and drove in three during the Phillies series; Hiles frames the young designated hitter as the answer to Pittsburgh's disappointing Ozuna signing. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/02/esmerlyn-valdez-hiles-ozuna-dh-cherington/stories/202607010040 * Marcus Freeman Joins Cam Heyward's 'Not Just Football' Latest developments: Notre Dame head coach Marcus Freeman sat down with Steelers captain Cam Heyward on the 'Not Just Football' podcast, posted July 1. Freeman traced his path from Ohio State linebacker to Notre Dame head coach and talked leadership, recruiting, handling pressure, and developing NFL talent, alongside his friendship with Heyward. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=rfvLY672_Zo * Two Pirates Prospects Named to All-Star Futures Game Latest developments: The Pirates' Seth Hernandez and Edward Florentino earned selection to the 2026 MLB All-Star Futures Game, the Post-Gazette reported July 1. Hernandez, the organization's top pitching prospect and the first minor leaguer to reach 100 strikeouts this season, joins outfielder Edward Florentino in the prospect showcase. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/01/seth-hernandez-florentino-mlb-allstar-futures-game/stories/202607010043 Team USA: * US Olympic Canoeist Indicted in Reflecting Pool Case Latest developments: A Washington grand jury indicted three-time US Olympic canoeist David Hearn on July 2 on a felony charge over damage to the Lincoln Memorial Reflecting Pool. The indictment accuses Hearn of maliciously destroying lining material at the pool on June 19, following a $14.7 million renovation that left liner peeling; President Trump had called the incident vandalism. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49250612/ex-olympian-indicted-felony-charge-reflecting-pool-case * USMNT Faces Belgium in Round of 16 Without Balogun Latest developments: ESPN assessed July 2 how the United States can advance past Belgium in the World Cup round of 16 without suspended top scorer Folarin Balogun. Belgium reached the last 16 by rallying from two goals down to beat Senegal in extra time; ESPN argues the US, having shown it can win ugly, has the tools to move on despite losing Balogun to a red card. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49245810/usmnt-shows-play-ugly-world-cup-which-exactly-needs-succeed READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI industry is losing, contending its economics and returns fail to justify the enormous capital pouring into companies like OpenAI, Anthropic, and NVIDIA. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport examines how technologies that seem poised for obvious productivity gains, like the personal computer, often fail to deliver them, and warns against assuming AI will prove different. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field on building the design company and why Field believes AI gives Figma a tailwind rather than a threat. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,426.91 = +0.0% Dow 52,120.78 ▲ +0.9% Nasdaq 25,746.02 ▼ -0.8% WTI crude 70.00 ▼ -5.9% EUR/USD 1.1387 ▼ -0.5% GBP/USD 1.3211 ▼ -0.2% USD/JPY 161.98 ▲ +0.4% ================================================================ Generated 2026-07-02 16:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================