daily plain-text briefing: security, markets, business, and pittsburgh
A new all-in-one Avalon malware framework carrying CrownX ransomware headlines a day thick with fresh nation-state espionage, developer-targeting supply-chain attacks, and AI woven into offense.
Latest developments: Kaspersky attributed a fresh espionage campaign July 3 to a previously undocumented actor it calls Armored Likho, which hits government agencies and the electric power sector across Russia, Brazil, and Kazakhstan using spear-phishing, AI-generated loaders, and a new Python tool named BusySnake Stealer.
Armored Likho blends financially motivated attacks on individuals with targeted espionage against organizations, pairing AI-built loaders with the BusySnake Stealer to siphon data from power-sector and government targets. Affected sectors should watch for spear-phishing lures and Python-based stealer activity.
Sources: Securelist (Kaspersky) · The Hacker News · ↑ top
Latest developments: The Hacker News reported July 3 that researchers uncovered Avalon, a previously undocumented modular malware framework that a multi-stage phishing chain delivers, uniting credential collection, lateral movement, remote access, recovery disruption, and CrownX ransomware execution under one roof.
Avalon consolidates an entire intrusion lifecycle into a single toolkit built to slip past traditional security controls, giving one operator credential theft through data destruction and encryption. Defenders should harden phishing defenses and hunt for the framework's multi-stage delivery chain.
Sources: The Hacker News · ↑ top
Latest developments: SecurityWeek reported July 3 that prosecutors named the extradited suspect as 19-year-old Peter Stokes, whom they call a member of Scattered Spider, the crew linked to more than 100 network intrusions and over $100 million in ransom payments.
Peter Stokes arrived in the United States to face charges tied to Scattered Spider's sprawling extortion campaigns, adding a named defendant to the ongoing law-enforcement push against the group. The case follows a string of arrests targeting the loosely organized crew.
Sources: SecurityWeek · ↑ top
Latest developments: JFrog tied North Korea-linked actors July 3 to two malicious npm packages, rollup-packages-polyfill-core and rollup-runtime-polyfill-core, that impersonate the legitimate rollup-plugin-polyfill-node project down to its description and repository metadata to grant remote access and steal developer secrets.
The counterfeit packages copy a trusted Rollup polyfill tool to trick developers into installing backdoors on their build machines, extending North Korea's pattern of poisoning open-source registries. Developers should verify package provenance before pulling Rollup tooling.
Sources: The Hacker News · ↑ top
Latest developments: Dark Reading reported July 3 that two new models from Chinese firms now rival top United States mainstream and frontier systems, raising fresh questions about whether cyber-defenders should worry that capable models lower the bar for attackers.
The arrival of competitive Chinese large language models expands the pool of tools adversaries can turn toward offense, from loader generation to reconnaissance, tightening the race between attackers and defenders. Security teams should factor advancing model capability into their threat models.
Sources: Dark Reading · ↑ top
Latest developments: Schneier on Security highlighted July 3 a 2024 Flock company presentation showing its Vehicle Fingerprint feature, which lets police search cars by decals, bumper stickers, roof and rear racks, and temporary state tags even without full license-plate information.
Flock's Vehicle Fingerprint markets to law enforcement the ability to track and search vehicles by physical characteristics alone, extending automated surveillance beyond plate readers. The disclosure sharpens privacy concerns over the reach of Flock's camera network.
Sources: Schneier on Security · ↑ top
Latest developments: Iran opened six days of state funeral ceremonies on July 3 for Supreme Leader Ayatollah Ali Khamenei, killed in the recent war with Israel and the United States.
Authorities in Tehran predict 20 million mourners over six days as dignitaries from more than 100 nations pay respects to Ayatollah Ali Khamenei, whose death removes the cleric who ran Iran for decades and unsettles the leadership of a state fresh from war with Israel and the United States.
Sources: WSJ World News · FT World · ↑ top
This Afternoon: Isolated Showers And Thunderstorms, high 98F.
Tonight: Scattered Showers And Thunderstorms, low 74F.
Independence Day: Mostly Sunny then Isolated Showers And Thunderstorms, high 95F.
Latest developments: The Post-Gazette reported July 3 that Pittsburgh restaurants are theming menus around the nations competing in the 2026 World Cup to court visiting fans.
As the World Cup draws crowds across the United States, Pittsburgh eateries are leaning into national dishes—poutine for Canada, barbecue for the United States—to pull in soccer fans and lift summer sales.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: TribLive reported July 3 that a Woodland Road home in Shadyside designed by architect Tasso Katselas is newly listed for sale.
A midcentury-modern house on Woodland Road in Shadyside, designed by Tasso Katselas—the architect behind the former Pittsburgh International Airport terminal—has gone up for sale.
Latest developments: WPXI reported July 3 that a stretch of Interstate 279 and its HOV lanes will fully close overnight next week.
The overnight closure will shut a stretch of I-279 and the HOV lanes through Pittsburgh, Ross, and Ohio Township next week, forcing detours along the North Hills commuting corridor.
Latest developments: Forecasters extended the extreme heat warning through Saturday, July 4, and flagged a Severe Weather Alert Day Saturday with an Impact Day Sunday.
Western Pennsylvania faces heat-index values above 105 degrees alongside a severe thunderstorm threat over the holiday weekend, with the National Weather Service extending its extreme heat warning through Saturday, July 4, and storms likely to disrupt Fourth of July plans.
Sources: WTAE · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette reported July 3 that Republican Al Buchtan filed suit alleging Washington County leaders swayed the primary in which he tried to unseat state Senator Camera Bartolotta.
Al Buchtan, who challenged Pennsylvania state Senator Camera Bartolotta in the Republican primary, alleges in a lawsuit that Washington County officials tilted the election against him.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: WTAE reported July 3 that Pittsburgh added drone surveillance, extra security, and parental advisories for Saturday's celebration, even as forecasters warn severe storms could disrupt it.
Pittsburgh caps America's 250th birthday on Saturday, July 4, with what the city bills as its largest fireworks show ever, staged downtown for an expected record crowd, with drone surveillance and heightened security in place.
Pirates (44-44)
Thu Jul 2 · Pirates 6 · Phillies 1 · Final
Valdez helps Pirates beat Phillies 6-1 to split their four-game series
Up Next · Pirates @ Nationals · Fri Jul 3, 6:45 PM
Latest developments: Steelers captain Cam Heyward's 'Not Just Football' podcast released a July 1 interview with Notre Dame head coach Marcus Freeman.
On his 'Not Just Football' show, Steelers defensive tackle Cam Heyward interviewed Notre Dame head coach Marcus Freeman, a former Ohio State linebacker and Heyward's onetime teammate, on leadership, recruiting, and developing NFL talent; Freeman also explained why Notre Dame declined the Pop-Tarts Bowl and gushed over running back Jeremiyah Love.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: A Post-Gazette beat writer teamed with a Nationals beat writer on July 3 to preview the Pirates' weekend series in the nation's capital.
Pirates and Nationals beat writers set the stage for Pittsburgh's weekend series at Nationals Park, sizing up the matchups as the Pirates try to climb out of the worst month of their season.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN and the Guardian reported July 3 that FIFA held Folarin Balogun's suspension to a single match, so he sits out only the United States' round-of-16 game against Belgium after his red card against Bosnia and Herzegovina.
Folarin Balogun, whose sending-off in the round-of-32 win over Bosnia and Herzegovina drew debate, misses the United States' round-of-16 match against Belgium; coach Mauricio Pochettino weighs Ricardo Pepi and Haji Wright to lead the line in his place.
Sources: Guardian World Cup 2026 · ESPN Soccer · ↑ top
S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.35 ▼ -5.5% EUR/USD 1.1392 ▼ -0.2% GBP/USD 1.3234 ▲ +0.2% USD/JPY 162.14 ▲ +0.4%