daily plain-text briefing: security, markets, business, and pittsburgh
Google and the FBI seized the NetNut proxy network's two million hijacked home devices as ransomware crews weaponized fresh Citrix and Fortinet flaws and ShinyHunters exposed 3.8 million Medtronic patients.
Latest developments: The FBI, Google's Threat Intelligence Group, and Lumen seized hundreds of domains and degraded NetNut, also tracked as Popa, cutting its pool of more than two million compromised home devices, roughly two weeks after KrebsOnSecurity tied the service to publicly traded Israeli firm Alarum Technologies (NASDAQ: ALAR).
NetNut rented access to millions of hijacked residential devices so criminals and nation-state actors could mask attack traffic; the disruption strips those relays and exposes the company behind the service.
Sources: Krebs on Security · SecurityWeek · The Hacker News · ↑ top
Latest developments: IBM and Red Hat assigned 20,000 engineers to a new Project Lightwell service to fix open-source flaws surfaced by Anthropic's Mythos AI, as the Trump administration lifted restrictions on Claude Fable 5 following a cybersecurity alarm and SecurityWeek detailed Cursor's DuneSlide flaws (CVE-2026-50548, CVE-2026-50549) that enable OS-level remote code execution.
Anthropic's automated bug hunting is reshaping software-supply-chain defense and drawing a multibillion-dollar remediation response, even as AI coding tools like Cursor open new attack surfaces; CISOs should govern AI tool usage and audit generated code before it ships.
Sources: Dark Reading · SecurityWeek · SecurityWeek · ↑ top
Latest developments: Jamf Threat Labs disclosed PamStealer, a macOS infostealer shipped as a compiled AppleScript file impersonating the open-source Maccy clipboard manager, that abuses pluggable authentication module checks to capture users' login passwords.
Distributed through fake Maccy websites, PamStealer signals mounting investment in Mac infostealers; users should install clipboard tools only from verified sources and treat unexpected password prompts as suspect.
Sources: The Hacker News · Ars Technica Security · ↑ top
Latest developments: Citizen Lab found that Stelios Kouloglou, a former member of the European Parliament's committee investigating commercial spyware abuses, was infected with NSO Group's Pegasus twice while serving on it.
Researchers describe the targeting of a lawmaker probing spyware as a direct attack on the rule of law, deepening scrutiny of Pegasus deployments against European officials.
Sources: The Record · Wired Security · ↑ top
Latest developments: Medtronic began notifying more than 3.8 million people July 3 that the extortion group ShinyHunters accessed its corporate IT systems in April 2026 and stole personal and medical information.
Medical-device maker Medtronic confirmed the intrusion in late April; affected patients and employees should watch for identity fraud and phishing tied to the exposed health records.
Sources: SecurityWeek · ↑ top
Latest developments: The Hacker News reported July 2 that Anubis ransomware affiliates now exploit CitrixBleed 2 (CVE-2025-5777) for initial access, while Dark Reading and SecurityWeek tied FortiBleed operators to the INC and Lynx gangs monetizing hundreds of thousands of hijacked FortiGate firewalls and adding a Nextcloud zero-day, as attackers seized on public proof-of-concept code to read NetScaler memory through a newly disclosed CitrixBleed flaw.
Ransomware operators are chaining freshly disclosed Citrix and Fortinet vulnerabilities into intrusions; administrators should patch NetScaler and FortiGate appliances and rotate exposed credentials immediately.
Sources: The Hacker News · Dark Reading · SecurityWeek · SecurityWeek · ↑ top
Latest developments: Thursday's weaker-than-expected June U.S. employment report sent a risk-on wave through global markets into July 3, weakening the dollar to a losing week, lifting gold, and pushing Wall Street strategists to reposition around slower hiring.
A cooler-than-forecast June jobs report revived expectations of Federal Reserve rate cuts and drove global stocks higher and the WSJ Dollar Index down about 0.5 percent, even as U.S. markets closed for the Independence Day holiday.
Sources: WSJ US Business · FT Markets · ↑ top
Latest developments: Canada and Alberta agreed July 2 to back a new crude pipeline from Alberta to British Columbia's Pacific coast, a move to ship roughly one million barrels a day to Asia and cut reliance on U.S. buyers.
Prime Minister Mark Carney's government advanced the project to reduce Canada's dependence on the United States as its main oil customer amid trade hostilities, easing Alberta separatist pressure while preserving British Columbia coastal environmental protections.
Sources: WSJ World News · FT Markets · ↑ top
Today: Sunny, high 97F.
Tonight: Chance Showers And Thunderstorms, low 76F.
Independence Day: Mostly Sunny then Chance Showers And Thunderstorms, high 95F.
Latest developments: The crime drama 'Mayor of Kingstown' finished shooting its fifth and final season in the Pittsburgh area, KDKA reported July 3, closing out a production the Pittsburgh Film Office values at more than $325 million in local spending.
The series filmed across the region since 2022 completed its final season, ending a run the Pittsburgh Film Office credits with over $325 million injected and more than 10,000 jobs created over 457 shoot days.
Latest developments: Trace Brewing paused its indoor drag performances, WTAE reported July 3, changing its entertainment lineup amid a dispute with neighbors who complained.
The Pittsburgh brewery halted its drag shows after neighbor complaints, reshaping its indoor programming as the disagreement plays out.
Latest developments: Western Pennsylvania entered a fourth straight day of extreme heat warnings on July 3, with feels-like readings above 100 degrees, and forecasters flagged severe-weather alert days Friday and Saturday and an impact day Sunday as storms move in.
The extreme heat warning covers most of western Pennsylvania, while the higher elevations of Indiana, Westmoreland, and Fayette counties sit under a heat advisory until 10 p.m. Friday, and afternoon storms threaten the Fourth of July weekend.
Latest developments: Pittsburgh Regional Transit will close a stretch of the Red Line 'T' starting Monday, July 6, halting trains between the Dormont Junction and Potomac stations while crews replace rail crossings at Alabama and Hillsdale avenues in Dormont Borough.
The construction disrupts Red Line service for riders traveling to and from Pittsburgh, forcing them onto alternatives as crews rebuild the grade crossings.
Latest developments: Residents of the Marian Plaza Apartments in Pittsburgh's East Hills neighborhood went a seventh straight day without air conditioning on July 3 as the heat wave pushed feels-like temperatures near triple digits.
Tenants of the subsidized senior housing complex have endured a week of discomfort during one of the year's hottest stretches, with resident Sharon Poslik describing sitting in the dark behind blackout curtains with her lights off.
Latest developments: Residents began lining the route with chairs on July 3 to claim spots ahead of Canonsburg's 63rd annual Fourth of July parade on Saturday, July 4.
The Canonsburg parade, one of Pennsylvania's largest Independence Day celebrations, draws thousands to the Washington County borough, where parade veterans reserve their curbside seats days in advance.
Latest developments: A July 1 Post-Gazette analysis traced the Pittsburgh Symphony Orchestra's $7 million budget increase, to $42 million, largely to its growing film-music work.
The Pittsburgh Symphony Orchestra's annual budget rose by $7 million to $42 million, growth the Post-Gazette attributes in large part to recording and performing film scores.
Sources: Post-Gazette Music · ↑ top
Pirates (44-44)
Thu Jul 2 · Pirates 6 · Phillies 1 · Final
Valdez helps Pirates beat Phillies 6-1 to split their four-game series
Up Next · Pirates @ Nationals · Fri Jul 3, 6:45 PM
Latest developments: A July 3 Post-Gazette deep dive by Noah Hiles spread responsibility for Paul Skenes's rough stretch beyond the ace himself, weighing the roles of Pirates pitching coaches and catchers.
Columnist Noah Hiles examined the causes of Skenes's recent struggles, pointing beyond the pitcher to figures including coaches Marin, Murphy, and catcher Kelly.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: On the July 1 Steelers show 'SNR Drive,' analysts Matt Williamson and Wes Uhler combed through ESPN writer Seth Walder's 2026 NFL offseason grades and debated Pittsburgh's marks.
The Steelers' team channel broke down Walder's report card for all 32 teams, assessing how the club's roster moves stacked up across the league as training camp nears.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: The United States advances to a World Cup round-of-16 tie with Belgium and will play it without striker Folarin Balogun, whom ESPN reported July 3 cannot appeal his red card against Bosnia and Herzegovina and faces an extended ban.
The U.S. men must replace top scorer Balogun against a Belgium side that rallied from two goals down to beat Senegal in extra time, leaving coach Mauricio Pochettino to weigh replacements at forward.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
Latest developments: A grand jury indicted David Hearn, a three-time U.S. Olympic canoeist, on a felony charge July 2 over damage to Washington's Lincoln Memorial Reflecting Pool that President Trump called vandalism.
The indictment accuses Hearn, 67, of maliciously breaking lining material on the pool's bottom on June 19, damage tied to a troubled $14.7 million renovation the president ordered.
Sources: ESPN Olympics · Guardian Olympics · ↑ top
S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.35 ▼ -5.5% EUR/USD 1.1392 ▼ -0.2% GBP/USD 1.3234 ▲ +0.2% USD/JPY 162.14 ▲ +0.4%