================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, July 4, 2026 - 9:06 AM EDT ================================================================ North Korea floods open-source registries with 108 malicious packages as ransomware crews escalate their exploitation of Citrix and Fortinet appliances. CONTENTS: Emerging Trends and Key Updates | Security | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] North Korea's state-backed PolinRider campaign seeded 108 malicious packages across npm, Packagist, Go, and Chrome to poison developers who rarely audit their dependencies. see: PolinRider Floods Open-Source Registries * [TREND] Ransomware affiliates are turning appliance flaws into same-day access, weaponizing Citrix Bleed 2 and Fortinet footholds fast enough that Apple abandoned its patch cadence for AI-era emergency cycles. see: Ransomware Crews Weaponize Citrix Bleed 2 and Fortinet Flaws; Apple Compresses Patch Cycles for AI-Era Threats * [UPDATE (new)] Law enforcement scored wins as the FBI seized the NetNut proxy network tied to Alarum, while prosecutors extradited alleged Scattered Spider member Peter Stokes. see: FBI Seizes NetNut Proxy Network; Scattered Spider Suspect Extradited * [TREND] The Reading list sharpens AI skepticism, with Zitron arguing the AI industry is losing, Newport warning of productivity paradoxes, and Figma's Dylan Field calling AI a tailwind. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI * [UPDATE (new)] A record heat wave near 90 degrees expires Saturday evening even as Pirates players endured games through the punishing stretch. see: Heat Wave Peaks and Ends; Pirates Cope With Triple-Digit Heat * [UPDATE (new)] Max Schrems' noyb told European officials it will sue to invalidate the EU-U.S. Data Privacy Framework after a Supreme Court ruling undercut transatlantic transfers. see: Schrems Targets EU-US Data Privacy Framework SECURITY ---------------------------------------------------------------- 1. POLINRIDER FLOODS OPEN-SOURCE REGISTRIES Nation-State Activity · [apt, supply-chain, north-korea] Latest developments: North Korea's Contagious Interview crew published 108 malicious packages and browser extensions across npm, Packagist, Go, and the Chrome Web Store in a campaign researchers named PolinRider, dwarfing the two rollup polyfill packages disclosed a day earlier. The actors compromise maintainer accounts to plant remote-access code and harvest developer secrets, and the campaign stays active with fresh packages likely to keep appearing. Developers should audit dependencies and pin trusted versions. - The Hacker News: https://thehackernews.com/2026/07/north-korean-hackers-publish-108.html 2. FBI SEIZES NETNUT PROXY NETWORK Ransomware and Cybercrime · [botnet, takedown] Latest developments: The FBI seized hundreds of NetNut domains, and Krebs identified the operator as publicly traded Israeli firm Alarum Technologies (NASDAQ: ALAR), naming the underlying Popa botnet of at least 2 million compromised devices, including smart TVs and streaming boxes. NetNut rented access to millions of hijacked home devices, letting cybercriminals and nation-state actors mask their traffic. Google, Lumen, and the FBI cut the usable device pool by millions. - Krebs on Security: https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/ - The Hacker News: https://thehackernews.com/2026/07/google-disrupts-netnut-residential.html - SecurityWeek: https://www.securityweek.com/google-fbi-disrupt-netnut-residential-proxy-network-powered-by-millions-of-devices/ 3. SCATTERED SPIDER SUSPECT EXTRADITED Ransomware and Cybercrime · [ransomware, arrest] Latest developments: Prosecutors named the extradited suspect as 19-year-old Peter Stokes, an alleged Scattered Spider member tied to a group linked to more than 100 network intrusions and over $100 million in ransom payments. Stokes faces U.S. charges over attacks including a luxury jewelry retailer breach that drove an $8 million cryptocurrency ransom demand. The retailer expelled the intruders before paying, absorbing at least $2 million in disruption losses. - SecurityWeek: https://www.securityweek.com/alleged-scattered-spider-hacker-extradited-to-us/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/02/scattered-spider-criminal-group-suspect-extradited/ 4. RANSOMWARE CREWS WEAPONIZE CITRIX BLEED 2 AND FORTINET FLAWS Vulnerabilities and Exploits · [ransomware, exploit] Latest developments: Anubis ransomware affiliates began exploiting Citrix Bleed 2 (CVE-2025-5777) for initial access, attackers weaponized a freshly disclosed NetScaler memory-disclosure flaw within hours of its public proof-of-concept, and FortiBleed operators added a Nextcloud zero-day to their Fortinet foothold while monetizing through the Inc and Lynx gangs. Ransomware crews chain edge-appliance flaws, bring-your-own-vulnerable-driver tricks, and stolen supply-chain credentials to break into networks. Administrators should patch NetScaler and Fortinet devices and hunt for remote-management tool abuse. - The Hacker News: https://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html - SecurityWeek: https://www.securityweek.com/new-citrixbleed-vulnerability-exploited-immediately-after-public-disclosure/ - Dark Reading: https://www.darkreading.com/threat-intelligence/fortibleed-actors-inc-lynx-ransomware-gangs 5. APPLE COMPRESSES PATCH CYCLES FOR AI-ERA THREATS Vulnerabilities and Exploits · [patch, ai] Latest developments: Apple abandoned its long-standing patch cadence for compressed emergency cycles, citing attackers who use artificial intelligence to shorten the gap between disclosure and exploitation. The shift signals faster, more frequent Apple security updates across iOS and macOS as AI accelerates exploit development. Organizations should expect and deploy out-of-band fixes sooner. - Dark Reading: https://www.darkreading.com/cybersecurity-operations/apple-patch-policy-ai 6. SCHREMS TARGETS EU-US DATA PRIVACY FRAMEWORK Policy and Regulation · [policy, privacy] Latest developments: Max Schrems' privacy group noyb told European officials it will sue to invalidate the EU-U.S. Data Privacy Framework after a U.S. Supreme Court decision undercut the legal basis for transatlantic data transfers. A successful challenge would strand personal-data flows from the EU to thousands of U.S. companies, echoing the earlier collapse of Safe Harbor and Privacy Shield. Firms relying on the framework should prepare alternative transfer mechanisms. - The Record: https://therecord.media/supreme-court-decision-threatens-eu-us-data-sharing PITTSBURGH ---------------------------------------------------------------- Weather: Independence Day: Mostly Sunny then Chance Showers And Thunderstorms, high 95F. Tonight: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, low 71F. Sunday: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 88F. Business: * Upper Burrell Data Center Draws Resident Frustration Latest developments: TribLive reported July 4 that residents still cannot get answers about the project's long-term plan. A proposed data center in Upper Burrell Township, Westmoreland County, has drawn resident frustration, with Lisa Scherf and neighbors saying local officials have offered little clarity about the development's scale and future. - TribLive: https://triblive.com/local/valley-news-dispatch/skepticism-remains-answers-hard-to-come-by-for-long-term-plan-of-upper-burrell-data-center/ Around town: * Rivers Casino Swatting Scare Latest developments: Pittsburgh Public Safety said July 3 the casino threat appears to be a swatting hoax. A reported threat at Rivers Casino on Pittsburgh's North Shore Friday night drew a large response from Pittsburgh and Pennsylvania state police, who now investigate it as a swatting incident. - TribLive: https://triblive.com/local/pittsburgh-state-police-investigating-threat-at-rivers-casino-swatting-suspected/ * Butler County Man Freed From ICE Custody Latest developments: WPXI reported July 4 that the man is home after a surprise release. A Butler County man returned home after months in U.S. Immigration and Customs Enforcement detention ended with an unexpected release, closing what his family called an extremely difficult ordeal. - WPXI: https://www.wpxi.com/news/local/its-been-extremely-difficult-butler-county-man-returns-home-after-being-detained-by-ice/ER3JYQK2BZCWBKX7L4KETYDV4E/ * Heat Wave Peaks and Ends Latest developments: The National Weather Service's extreme heat warning expires at 8 p.m. Saturday, July 4, capping a fifth straight day near or above 90 degrees. Temperatures across Allegheny, Washington, Greene, Westmoreland, and Fayette counties surged near 100 degrees on July 4 as the region's heat wave peaked, with scattered afternoon thunderstorms threatening evening fireworks before warnings lift at 8 p.m. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-heat-wave-ends-on-saturday-night/ Events: * Pittsburgh's July Festival Season Latest developments: NEXTpittsburgh's July guide, published June 29, maps the month's festival calendar. Pittsburgh's summer festival season runs through July, headlined by Picklesburgh downtown and the Goat Fest, per NEXTpittsburgh's monthly roundup of things to do across the region. - NEXTpittsburgh Events: https://nextpittsburgh.com/events/12-iconic-pittsburgh-things-to-do-in-july-2026/ SPORTS ---------------------------------------------------------------- Pirates (44-45) Fri Jul 3 · Pirates 5 · Nationals 9 · Final García and Lile each homer twice as the Nationals rout the Pirates 9-5 https://plaintextsports.com/mlb/2026-07-03/pit-wsh Up Next · Pirates @ Nationals · Sat Jul 4, 11:05 AM https://plaintextsports.com/mlb/2026-07-04/pit-wsh Around the Teams: * Carter Fields Steelers Offseason Questions Latest developments: Post-Gazette beat writer Christopher Carter took reader questions in a July 2 live chat. In a July 2 reader chat, Post-Gazette Steelers writer Christopher Carter addressed the offseason additions of quarterback Aaron Rodgers and receiver DK Metcalf, along with cornerback Joey Porter Jr.'s situation, ahead of training camp. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/02/live-chat-nfl-offseason-rodgers-pittman-metcalf-porter/stories/202607020013 * Pirates Cope With Triple-Digit Heat Latest developments: A Post-Gazette feature July 3 detailed how Pirates players endure games in the extreme heat. The Post-Gazette reported July 3 that Pirates players described themselves as 'just trying to survive' games in triple-digit temperatures, laying out the cooling methods they lean on during the region's heat wave. - Post-Gazette Pirates: https://www.post-gazette.com/sports/2026/07/03/heat-wave-mlb-games/stories/202607020043 Team USA: * USMNT Awaits Belgium in Round of 16 Latest developments: With the World Cup field cutting from 32 to 16 on July 4, the United States now awaits Belgium and must cover for suspended striker Folarin Balogun. The United States reached the World Cup round of 16 and will play Belgium without Folarin Balogun, whose one-match ban for his red card against Bosnia and Herzegovina stands, leaving coach Mauricio Pochettino to choose between Ricardo Pepi and Haji Wright up front. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49256530/how-usmnt-cope-red-card-striker-folarin-balogun-world-cup-round-16-belgium * Pochettino Throws First Pitch Latest developments: ESPN noted July 4 that U.S. coach Mauricio Pochettino threw a ceremonial first pitch at a Major League Baseball game. United States men's national team coach Mauricio Pochettino became the latest World Cup figure to throw out a ceremonial first pitch at an MLB game during the tournament's stay in America. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49261996/usmnt-coach-mauricio-pochettino-latest-world-cup-star-throw-first-pitch-mlb READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI business is failing to generate the profits and returns its enormous spending demands, and that the hype is colliding with hard economic reality. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport uses the personal computer, once a supposed productivity slam dunk, to warn that technologies expected to boost output often fail to move measured productivity, a caution he applies to today's AI enthusiasm. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field about building the design platform and why Field believes AI acts as a tailwind rather than a threat to the company. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.26 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3264 ▲ +0.5% USD/JPY 161.98 ▲ +0.2% ================================================================ Generated 2026-07-04 09:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================