infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

An LLM agent ran a full ransomware attack start to finish under the name JadePuffer, as researchers warned that frontier Chinese language models now hand attackers capabilities defenders struggle to match.


Emerging Trends and Key Updates

Security

1. JadePuffer's AI-Run Ransomware

AI Security · [ai, ransomware]

Latest developments: BleepingComputer on July 4 published the fullest account yet of JadePuffer, calling it the first documented ransomware operation a large language model agent ran end to end, after Sysdig and SecurityWeek tied the intrusion to a Langflow remote-code-execution flaw.

read more

An LLM agent operating as JadePuffer exploited a Langflow remote-code-execution flaw, then stole credentials, moved laterally, and encrypted and wiped a company's production database with no human at the keyboard. Patch Langflow and watch for automated multi-stage intrusions that reason in real time.

Sources: BleepingComputer · SecurityWeek · ↑ top

2. Kairos Extorts $1 Million From US Government Entity

Ransomware and Cybercrime · [extortion, breach]

Latest developments: The Hacker News reported July 4 that a U.S. government entity paid about $1 million to keep stolen files off the leak site, and researcher Rakesh Krishnan of Ransom-ISAC, reconstructing the case from a leaked negotiation chat and the payment's blockchain trail, found no sign the group ever encrypted a single file.

read more

Kairos runs data-theft extortion: it steals files and demands payment to suppress a leak, skipping ransomware entirely. The case shows government victims paying seven figures to a crew that only threatens exposure.

Sources: The Hacker News · ↑ top

3. Chinese LLMs Widen the Attacker-Defender Gap

AI Security · [ai]

Latest developments: Dark Reading reported July 3 that two new large language models from Chinese firms now rival top U.S. mainstream and frontier systems, raising the prospect that low-cost frontier-grade AI arms attackers faster than defenders can respond.

read more

Cheap, capable Chinese-built models put frontier reasoning within reach of ordinary criminals, compressing the time between disclosure and exploitation. Defenders face adversaries who automate reconnaissance, exploitation, and lateral movement.

Sources: Dark Reading · ↑ top

4. Avalon Framework Bundles CrownX Ransomware

Ransomware and Cybercrime · [malware, ransomware, phishing]

Latest developments: The Hacker News disclosed July 3 a previously undocumented modular malware framework codenamed Avalon that a multi-stage phishing chain delivers while bypassing traditional security controls.

read more

Avalon unites credential collection, lateral movement, remote access, recovery disruption, and CrownX ransomware execution in one toolkit. A single framework now carries an intrusion from first click to encrypted files.

Sources: The Hacker News · ↑ top

5. Armored Likho Hits Government and Power Sector

Nation-State Activity · [apt, espionage]

Latest developments: Kaspersky attributed July 3 a previously undocumented actor it calls Armored Likho to attacks on government agencies and the electric power sector across Russia, Brazil, and Kazakhstan, deploying a new BusySnake stealer.

read more

Armored Likho blends financially motivated campaigns against individuals with espionage aimed at government and power-sector organizations. Its BusySnake stealer siphons data from targets in three countries.

Sources: The Hacker News · ↑ top

6. Flock Cameras Track Cars Without Plates

Surveillance and Privacy · [surveillance, privacy]

Latest developments: Bruce Schneier surfaced July 3 a 2024 Flock Safety presentation showing the license-plate-reader firm markets a feature it calls Vehicle Fingerprint, which lets police search for cars by decals, bumper stickers, and roof racks even when no plate is visible.

read more

Flock's Vehicle Fingerprint lets law enforcement identify and search vehicles by physical features, extending automated mass surveillance past license plates. Officers can query the data to build fuller profiles of drivers.

Sources: Schneier on Security · ↑ top

Business and Politics

Iran Holds Six-Day Funeral for Khamenei

Latest developments: Iran opened a six-day state funeral July 4 for supreme leader Ayatollah Ali Khamenei, whom an airstrike killed in the war with Israel and the United States, as mourners demanded revenge.

read more

Ayatollah Ali Khamenei, Iran's supreme leader, died in an airstrike at the start of the recent war with Israel and the United States, and Tehran now stages six days of ceremonies that authorities predict will draw 20 million mourners, a show of strength as crowds call for retaliation.

Sources: WSJ World News · FT World · ↑ top

Pittsburgh

Weather

Independence Day: Mostly Sunny then Chance Showers And Thunderstorms, high 95F.

Tonight: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, low 71F.

Sunday: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 88F.

Business

Pennsylvanians Weigh Trump Tax Law After a Year

Latest developments: A Post-Gazette report July 4 gauges how Pennsylvanians feel the effects of President Trump's tax law one year on, tying the reaction to 2026 midterm polling.

read more

One year after President Trump signed his signature tax law, Pennsylvania voters are feeling its effects, and the Post-Gazette weighs how that sentiment could swing the state's competitive districts in the coming midterm elections.

Sources: Pittsburgh Post-Gazette · ↑ top

Around Town

Pittsburgh Group Rallies for HIV Funding

Latest developments: A Post-Gazette piece July 4 goes behind a Pittsburgh group's awareness campaign fighting cuts to federal HIV funding.

read more

A Pittsburgh advocacy group in the ACT UP tradition has mounted an awareness campaign to protect federal HIV funding from cuts, warning of the toll on patients across the region.

Sources: Pittsburgh Post-Gazette · ↑ top

Events

Anthrocon Scraps Fursuit Parade

Latest developments: Anthrocon canceled its signature Fursuit Parade and block party July 4, citing the extreme heat and severe-weather forecast.

read more

Anthrocon, one of the world's largest furry conventions, runs through Sunday, July 5, at the David L. Lawrence Convention Center downtown, but organizers scrapped the marquee Fursuit Parade and block party over dangerous heat and shifted to alternative indoor activities.

Sources: WPXI · NEXTpittsburgh Events · ↑ top

Pittsburgh's America 250 Fireworks Tonight

Latest developments: Pittsburgh stages its America 250 Fourth of July celebration Saturday, July 4, with the city's largest-ever fireworks show, though scattered thunderstorms may threaten the evening display.

read more

Pittsburgh's Fourth of July celebration, voted the nation's best by USA Today readers, spreads across downtown, the North Shore, and Mount Washington on Saturday, July 4, with line dancing, Ferris wheel rides, a Plain White T's performance, and the largest fireworks show in city history after dark; forecasters warn of scattered thunderstorms into the evening.

Sources: KDKA · Post-Gazette Music · ↑ top

Sports

Pirates (44-45)

Fri Jul 3 · Pirates 5 · Nationals 9 · Final

García and Lile each homer twice as the Nationals rout the Pirates 9-5

Sat Jul 4 · Pirates 5 · Nationals 1 · Bot 3rd (in progress at last update)

Up Next · Pirates @ Nationals · Sun Jul 5, 1:00 PM

Around the Teams

Valdez Becomes 'a Dude' for the Pirates

Latest developments: A Post-Gazette 'Off The Bat' feature July 4 charted how Esmerlyn Valdez has become a middle-of-the-order force for the Pirates.

read more

The Post-Gazette's 'Off The Bat' detailed how outfielder Esmerlyn Valdez has emerged as one of the Pirates' most productive hitters this season, a bright spot the paper frames in All-Star terms as the club hovers around .500.

Sources: Post-Gazette Pirates · ↑ top

Steelers Podcast Parses Offseason Grades

Latest developments: On the Steelers' SNR Drive July 1, Matt Williamson and Wes Uhler broke down ESPN's NFL offseason grades for all 32 teams.

read more

On the Steelers' team podcast SNR Drive, analysts Matt Williamson and Wes Uhler worked through ESPN writer Seth Walder's offseason grades for every NFL team and added a Team USA-themed 'Best of the Wes' segment; the show pauses during training camp.

Sources: Pittsburgh Steelers (YouTube) · ↑ top

Heyward's Podcast Hosts Marcus Freeman

Latest developments: Cam Heyward's 'Not Just Football' released a July 1 interview with Notre Dame coach Marcus Freeman, Heyward's former Ohio State teammate.

read more

On his 'Not Just Football' podcast, Steelers captain Cam Heyward interviewed Notre Dame head coach Marcus Freeman, a onetime Ohio State teammate, about leadership, recruiting, and developing NFL talent.

Sources: Not Just Football with Cam Heyward · ↑ top

Team USA

Trinity Rodman Nets Late Winner for Spirit

Latest developments: USWNT forward Trinity Rodman marked her NWSL return July 3 with two goals, including a stoppage-time winner, for the Washington Spirit.

read more

Trinity Rodman, the United States forward, returned to NWSL action with a two-goal performance, sealing a 2-1 Washington Spirit win over the Houston Dash with a goal in stoppage time.

Sources: ESPN Soccer · ↑ top

USMNT Plots Belgium Test Without Balogun

Latest developments: As the World Cup round of 16 opened July 4, ESPN weighed how the United States will replace suspended striker Folarin Balogun against Belgium.

read more

The United States reached the World Cup round of 16, where it meets Belgium, but must field a lineup without striker Folarin Balogun, suspended after his red card against Bosnia and Herzegovina; ESPN casts Ricardo Pepi and Haji Wright as the leading options to fill his spot.

Sources: ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,452.06  ▲ +0.6%
Dow        52,316.67  ▲ +1.1%
Nasdaq     25,840.84  ▲ +0.1%
WTI crude      69.26  ▼ -3.7%
EUR/USD       1.1415  ▲ +0.3%
GBP/USD       1.3264  ▲ +0.5%
USD/JPY       161.98  ▲ +0.2%