================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Friday, July 3, 2026 - 6:06 AM EDT ================================================================ Google and the FBI seized the NetNut proxy network's two million hijacked home devices as ransomware crews weaponized fresh Citrix and Fortinet flaws and ShinyHunters exposed 3.8 million Medtronic patients. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] IBM's $5 billion bet on Anthropic's Mythos bug-finder collides with skeptics as Zitron calls the AI industry a deflating bubble and Newport warns of productivity paradoxes. see: IBM Bets $5 Billion on Anthropic's Bug-Finding AI; The AI Industry Is Losing; Beware of Productivity Paradoxes * [TREND] Ransomware crews are racing to weaponize edge-device flaws, with Anubis affiliates exploiting CitrixBleed 2 and FortiBleed operators feeding stolen FortiGate credentials to the INC and Lynx gangs. see: Ransomware Crews Weaponize Citrix and Fortinet Flaws * [UPDATE (new)] The FBI, Google, and Lumen seized hundreds of domains and degraded the NetNut residential-proxy network, also tracked as Popa, cutting its pool of two million compromised home devices. see: NetNut Proxy Network and Popa Botnet Seized * [TREND] Data theft and surveillance surged as ShinyHunters exposed 3.8 million Medtronic records, Jamf flagged the PamStealer macOS infostealer, and Pegasus reinfected an EU spyware investigator. see: Medtronic Breach Exposes 3.8 Million; PamStealer Targets macOS Passwords; Pegasus Reinfects EU Spyware Investigator * [TREND] A relentless heat wave gripped western Pennsylvania as East Hills seniors endured a seventh day without air conditioning and a Red Line shutdown loomed in Dormont. see: Steamy, Stormy Holiday Weekend; East Hills Seniors Without Air Conditioning; Red Line 'T' Shutdown in Dormont SECURITY ---------------------------------------------------------------- 1. NETNUT PROXY NETWORK AND POPA BOTNET SEIZED Ransomware and Cybercrime · [botnet, takedown, cybercrime] Latest developments: The FBI, Google's Threat Intelligence Group, and Lumen seized hundreds of domains and degraded NetNut, also tracked as Popa, cutting its pool of more than two million compromised home devices, roughly two weeks after KrebsOnSecurity tied the service to publicly traded Israeli firm Alarum Technologies (NASDAQ: ALAR). NetNut rented access to millions of hijacked residential devices so criminals and nation-state actors could mask attack traffic; the disruption strips those relays and exposes the company behind the service. - Krebs on Security: https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/ - SecurityWeek: https://www.securityweek.com/google-fbi-disrupt-netnut-residential-proxy-network-powered-by-millions-of-devices/ - The Hacker News: https://thehackernews.com/2026/07/google-disrupts-netnut-residential.html 2. IBM BETS $5 BILLION ON ANTHROPIC'S BUG-FINDING AI AI Security · [ai, supply-chain, zero-day] Latest developments: IBM and Red Hat assigned 20,000 engineers to a new Project Lightwell service to fix open-source flaws surfaced by Anthropic's Mythos AI, as the Trump administration lifted restrictions on Claude Fable 5 following a cybersecurity alarm and SecurityWeek detailed Cursor's DuneSlide flaws (CVE-2026-50548, CVE-2026-50549) that enable OS-level remote code execution. Anthropic's automated bug hunting is reshaping software-supply-chain defense and drawing a multibillion-dollar remediation response, even as AI coding tools like Cursor open new attack surfaces; CISOs should govern AI tool usage and audit generated code before it ships. - Dark Reading: https://www.darkreading.com/vulnerabilities-threats/anthropic-s-ai-finds-bugs-ibm-bets-5b-it-can-fix-them- - SecurityWeek: https://www.securityweek.com/trump-administration-lifts-restrictions-on-anthropics-claude-models-after-cybersecurity-alarm/ - SecurityWeek: https://www.securityweek.com/critical-cursor-ai-ide-flaws-could-lead-to-os-level-remote-code-execution/ 3. PAMSTEALER TARGETS MACOS PASSWORDS Ransomware and Cybercrime · [infostealer, macos] Latest developments: Jamf Threat Labs disclosed PamStealer, a macOS infostealer shipped as a compiled AppleScript file impersonating the open-source Maccy clipboard manager, that abuses pluggable authentication module checks to capture users' login passwords. Distributed through fake Maccy websites, PamStealer signals mounting investment in Mac infostealers; users should install clipboard tools only from verified sources and treat unexpected password prompts as suspect. - The Hacker News: https://thehackernews.com/2026/07/pamstealer-uses-fake-maccy-sites-and.html - Ars Technica Security: https://arstechnica.com/security/2026/07/new-pamstealer-macos-malware-uses-clever-tradecraft-to-remain-stealthy/ 4. PEGASUS REINFECTS EU SPYWARE INVESTIGATOR Nation-State Activity · [spyware, surveillance, apt] Latest developments: Citizen Lab found that Stelios Kouloglou, a former member of the European Parliament's committee investigating commercial spyware abuses, was infected with NSO Group's Pegasus twice while serving on it. Researchers describe the targeting of a lawmaker probing spyware as a direct attack on the rule of law, deepening scrutiny of Pegasus deployments against European officials. - The Record: https://therecord.media/pegasus-spyware-european-parliament-pega-committee-member - Wired Security: https://www.wired.com/story/eu-politicians-investigated-pegasus-spyware-then-it-ended-up-on-one-of-their-phones/ 5. MEDTRONIC BREACH EXPOSES 3.8 MILLION Data Breaches · [breach, healthcare] Latest developments: Medtronic began notifying more than 3.8 million people July 3 that the extortion group ShinyHunters accessed its corporate IT systems in April 2026 and stole personal and medical information. Medical-device maker Medtronic confirmed the intrusion in late April; affected patients and employees should watch for identity fraud and phishing tied to the exposed health records. - SecurityWeek: https://www.securityweek.com/medtronic-data-breach-impacts-3-8-million-people/ 6. RANSOMWARE CREWS WEAPONIZE CITRIX AND FORTINET FLAWS Ransomware and Cybercrime · [ransomware, zero-day, patch] Latest developments: The Hacker News reported July 2 that Anubis ransomware affiliates now exploit CitrixBleed 2 (CVE-2025-5777) for initial access, while Dark Reading and SecurityWeek tied FortiBleed operators to the INC and Lynx gangs monetizing hundreds of thousands of hijacked FortiGate firewalls and adding a Nextcloud zero-day, as attackers seized on public proof-of-concept code to read NetScaler memory through a newly disclosed CitrixBleed flaw. Ransomware operators are chaining freshly disclosed Citrix and Fortinet vulnerabilities into intrusions; administrators should patch NetScaler and FortiGate appliances and rotate exposed credentials immediately. - The Hacker News: https://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html - Dark Reading: https://www.darkreading.com/threat-intelligence/fortibleed-actors-inc-lynx-ransomware-gangs - SecurityWeek: https://www.securityweek.com/fortibleed-campaign-linked-to-inc-lynx-ransomware-attacks/ - SecurityWeek: https://www.securityweek.com/new-citrixbleed-vulnerability-exploited-immediately-after-public-disclosure/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Cool June Jobs Report Jolts Markets Latest developments: Thursday's weaker-than-expected June U.S. employment report sent a risk-on wave through global markets into July 3, weakening the dollar to a losing week, lifting gold, and pushing Wall Street strategists to reposition around slower hiring. A cooler-than-forecast June jobs report revived expectations of Federal Reserve rate cuts and drove global stocks higher and the WSJ Dollar Index down about 0.5 percent, even as U.S. markets closed for the Independence Day holiday. - WSJ US Business: https://www.wsj.com/business/weak-jobs-report-prompts-wall-street-to-change-strategy-f7bd350a?mod=pls_whats_news_us_business_f - FT Markets: https://www.ft.com/content/9be2c49c-a5fb-483d-99f8-81c8fa1e9753 * Canada Advances Pacific Oil Pipeline Latest developments: Canada and Alberta agreed July 2 to back a new crude pipeline from Alberta to British Columbia's Pacific coast, a move to ship roughly one million barrels a day to Asia and cut reliance on U.S. buyers. Prime Minister Mark Carney's government advanced the project to reduce Canada's dependence on the United States as its main oil customer amid trade hostilities, easing Alberta separatist pressure while preserving British Columbia coastal environmental protections. - WSJ World News: https://www.wsj.com/world/americas/canada-alberta-agree-to-back-new-crude-pipeline-to-pacific-coast-3a84d311 - FT Markets: https://www.ft.com/content/e5ffb51d-40ee-4274-b6f2-2eb6cd5c4f89 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Sunny, high 97F. Tonight: Chance Showers And Thunderstorms, low 76F. Independence Day: Mostly Sunny then Chance Showers And Thunderstorms, high 95F. Business: * 'Mayor of Kingstown' Wraps Final Season Latest developments: The crime drama 'Mayor of Kingstown' finished shooting its fifth and final season in the Pittsburgh area, KDKA reported July 3, closing out a production the Pittsburgh Film Office values at more than $325 million in local spending. The series filmed across the region since 2022 completed its final season, ending a run the Pittsburgh Film Office credits with over $325 million injected and more than 10,000 jobs created over 457 shoot days. - KDKA: https://www.cbsnews.com/pittsburgh/video/mayor-of-kingstown-wraps-up-filming-final-season-in-pittsburgh-area/ * Trace Brewing Pauses Drag Shows Latest developments: Trace Brewing paused its indoor drag performances, WTAE reported July 3, changing its entertainment lineup amid a dispute with neighbors who complained. The Pittsburgh brewery halted its drag shows after neighbor complaints, reshaping its indoor programming as the disagreement plays out. - WTAE: https://www.wtae.com/article/local-brewery-drag-performances-pause-blames-neighbor-complaints/71813189 Around town: * Steamy, Stormy Holiday Weekend Latest developments: Western Pennsylvania entered a fourth straight day of extreme heat warnings on July 3, with feels-like readings above 100 degrees, and forecasters flagged severe-weather alert days Friday and Saturday and an impact day Sunday as storms move in. The extreme heat warning covers most of western Pennsylvania, while the higher elevations of Indiana, Westmoreland, and Fayette counties sit under a heat advisory until 10 p.m. Friday, and afternoon storms threaten the Fourth of July weekend. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-extreme-heat-warnings-fourth-straight-day-temperatures/ - WTAE: https://www.wtae.com/article/july-4th-weekend-for-western-pa-steamy-and-stormy/71814905 * Red Line 'T' Shutdown in Dormont Latest developments: Pittsburgh Regional Transit will close a stretch of the Red Line 'T' starting Monday, July 6, halting trains between the Dormont Junction and Potomac stations while crews replace rail crossings at Alabama and Hillsdale avenues in Dormont Borough. The construction disrupts Red Line service for riders traveling to and from Pittsburgh, forcing them onto alternatives as crews rebuild the grade crossings. - KDKA: https://www.cbsnews.com/pittsburgh/news/construction-work-will-disrupt-t-service-on-prts-red-line-next-week/ * East Hills Seniors Without Air Conditioning Latest developments: Residents of the Marian Plaza Apartments in Pittsburgh's East Hills neighborhood went a seventh straight day without air conditioning on July 3 as the heat wave pushed feels-like temperatures near triple digits. Tenants of the subsidized senior housing complex have endured a week of discomfort during one of the year's hottest stretches, with resident Sharon Poslik describing sitting in the dark behind blackout curtains with her lights off. - KDKA: https://www.cbsnews.com/pittsburgh/news/marian-plaza-apartments-pittsburgh-no-ac/ Events: * Canonsburg Fourth of July Parade Latest developments: Residents began lining the route with chairs on July 3 to claim spots ahead of Canonsburg's 63rd annual Fourth of July parade on Saturday, July 4. The Canonsburg parade, one of Pennsylvania's largest Independence Day celebrations, draws thousands to the Washington County borough, where parade veterans reserve their curbside seats days in advance. - WPXI: https://www.wpxi.com/news/local/chairs-line-canonsburg-fourth-july-parade-route-residents-prepare-celebrate/XUKF4YW67FBIZEKOYOAGOWBFTM/ - WTAE: https://www.wtae.com/article/canonsburg-chairs-fourth-of-july-parade/71806893 * Pittsburgh Symphony Budget Jumps to $42 Million Latest developments: A July 1 Post-Gazette analysis traced the Pittsburgh Symphony Orchestra's $7 million budget increase, to $42 million, largely to its growing film-music work. The Pittsburgh Symphony Orchestra's annual budget rose by $7 million to $42 million, growth the Post-Gazette attributes in large part to recording and performing film scores. - Post-Gazette Music: https://www.post-gazette.com/ae/music/2026/07/01/analysis-pittsburgh-symphony-orchestra-budget-film-music/stories/202607010012 SPORTS ---------------------------------------------------------------- Pirates (44-44) Thu Jul 2 · Pirates 6 · Phillies 1 · Final Valdez helps Pirates beat Phillies 6-1 to split their four-game series https://plaintextsports.com/mlb/2026-07-02/pit-phi Up Next · Pirates @ Nationals · Fri Jul 3, 6:45 PM https://plaintextsports.com/mlb/2026-07-03/pit-wsh Around the Teams: * Hiles Spreads the Blame for Skenes Latest developments: A July 3 Post-Gazette deep dive by Noah Hiles spread responsibility for Paul Skenes's rough stretch beyond the ace himself, weighing the roles of Pirates pitching coaches and catchers. Columnist Noah Hiles examined the causes of Skenes's recent struggles, pointing beyond the pitcher to figures including coaches Marin, Murphy, and catcher Kelly. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/03/hiles-skenes-blame-marin-murphy-kelly-pitcher/stories/202607020064 * SNR Drive Digs Into Steelers Offseason Grades Latest developments: On the July 1 Steelers show 'SNR Drive,' analysts Matt Williamson and Wes Uhler combed through ESPN writer Seth Walder's 2026 NFL offseason grades and debated Pittsburgh's marks. The Steelers' team channel broke down Walder's report card for all 32 teams, assessing how the club's roster moves stacked up across the league as training camp nears. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=5O7TI1b_RKY Team USA: * USMNT Draws Belgium, Loses Balogun Latest developments: The United States advances to a World Cup round-of-16 tie with Belgium and will play it without striker Folarin Balogun, whom ESPN reported July 3 cannot appeal his red card against Bosnia and Herzegovina and faces an extended ban. The U.S. men must replace top scorer Balogun against a Belgium side that rallied from two goals down to beat Senegal in extra time, leaving coach Mauricio Pochettino to weigh replacements at forward. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49256530/how-usmnt-cope-red-card-striker-folarin-balogun-world-cup-round-16-belgium - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49248052/usmnt-cannot-appeal-folarin-balogun-red-card-face-extended-world-cup-ban-sources * Olympic Canoeist Indicted Over Reflecting Pool Latest developments: A grand jury indicted David Hearn, a three-time U.S. Olympic canoeist, on a felony charge July 2 over damage to Washington's Lincoln Memorial Reflecting Pool that President Trump called vandalism. The indictment accuses Hearn, 67, of maliciously breaking lining material on the pool's bottom on June 19, damage tied to a troubled $14.7 million renovation the president ordered. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49250612/ex-olympian-indicted-felony-charge-reflecting-pool-case - Guardian Olympics: https://www.theguardian.com/us-news/2026/jul/02/us-olympian-indicted-trump-vandalism-reflecting-pool READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI industry is losing—pouring enormous capital into a build-out that lacks the profits and product-market fit to justify it—and reads the mounting financial strain as a deflating bubble. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport recalls how the personal computer, seemingly a productivity slam dunk with spreadsheets and word processors, delivered murky gains, and he warns readers to expect the same paradox from AI tools. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma CEO Dylan Field about building the design platform and why Field believes AI gives the company a tailwind. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.35 ▼ -5.5% EUR/USD 1.1392 ▼ -0.2% GBP/USD 1.3234 ▲ +0.2% USD/JPY 162.14 ▲ +0.4% ================================================================ Generated 2026-07-03 06:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================