daily plain-text briefing: security, markets, business, and pittsburgh
An LLM agent ran a full ransomware attack start to finish under the name JadePuffer, as researchers warned that frontier Chinese language models now hand attackers capabilities defenders struggle to match.
Latest developments: BleepingComputer on July 4 published the fullest account yet of JadePuffer, calling it the first documented ransomware operation a large language model agent ran end to end, after Sysdig and SecurityWeek tied the intrusion to a Langflow remote-code-execution flaw.
An LLM agent operating as JadePuffer exploited a Langflow remote-code-execution flaw, then stole credentials, moved laterally, and encrypted and wiped a company's production database with no human at the keyboard. Patch Langflow and watch for automated multi-stage intrusions that reason in real time.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: The Hacker News reported July 4 that a U.S. government entity paid about $1 million to keep stolen files off the leak site, and researcher Rakesh Krishnan of Ransom-ISAC, reconstructing the case from a leaked negotiation chat and the payment's blockchain trail, found no sign the group ever encrypted a single file.
Kairos runs data-theft extortion: it steals files and demands payment to suppress a leak, skipping ransomware entirely. The case shows government victims paying seven figures to a crew that only threatens exposure.
Sources: The Hacker News · ↑ top
Latest developments: Dark Reading reported July 3 that two new large language models from Chinese firms now rival top U.S. mainstream and frontier systems, raising the prospect that low-cost frontier-grade AI arms attackers faster than defenders can respond.
Cheap, capable Chinese-built models put frontier reasoning within reach of ordinary criminals, compressing the time between disclosure and exploitation. Defenders face adversaries who automate reconnaissance, exploitation, and lateral movement.
Sources: Dark Reading · ↑ top
Latest developments: The Hacker News disclosed July 3 a previously undocumented modular malware framework codenamed Avalon that a multi-stage phishing chain delivers while bypassing traditional security controls.
Avalon unites credential collection, lateral movement, remote access, recovery disruption, and CrownX ransomware execution in one toolkit. A single framework now carries an intrusion from first click to encrypted files.
Sources: The Hacker News · ↑ top
Latest developments: Kaspersky attributed July 3 a previously undocumented actor it calls Armored Likho to attacks on government agencies and the electric power sector across Russia, Brazil, and Kazakhstan, deploying a new BusySnake stealer.
Armored Likho blends financially motivated campaigns against individuals with espionage aimed at government and power-sector organizations. Its BusySnake stealer siphons data from targets in three countries.
Sources: The Hacker News · ↑ top
Latest developments: Bruce Schneier surfaced July 3 a 2024 Flock Safety presentation showing the license-plate-reader firm markets a feature it calls Vehicle Fingerprint, which lets police search for cars by decals, bumper stickers, and roof racks even when no plate is visible.
Flock's Vehicle Fingerprint lets law enforcement identify and search vehicles by physical features, extending automated mass surveillance past license plates. Officers can query the data to build fuller profiles of drivers.
Sources: Schneier on Security · ↑ top
Latest developments: Iran opened a six-day state funeral July 4 for supreme leader Ayatollah Ali Khamenei, whom an airstrike killed in the war with Israel and the United States, as mourners demanded revenge.
Ayatollah Ali Khamenei, Iran's supreme leader, died in an airstrike at the start of the recent war with Israel and the United States, and Tehran now stages six days of ceremonies that authorities predict will draw 20 million mourners, a show of strength as crowds call for retaliation.
Sources: WSJ World News · FT World · ↑ top
Independence Day: Mostly Sunny then Chance Showers And Thunderstorms, high 95F.
Tonight: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, low 71F.
Sunday: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 88F.
Latest developments: A Post-Gazette report July 4 gauges how Pennsylvanians feel the effects of President Trump's tax law one year on, tying the reaction to 2026 midterm polling.
One year after President Trump signed his signature tax law, Pennsylvania voters are feeling its effects, and the Post-Gazette weighs how that sentiment could swing the state's competitive districts in the coming midterm elections.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: A Post-Gazette piece July 4 goes behind a Pittsburgh group's awareness campaign fighting cuts to federal HIV funding.
A Pittsburgh advocacy group in the ACT UP tradition has mounted an awareness campaign to protect federal HIV funding from cuts, warning of the toll on patients across the region.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Anthrocon canceled its signature Fursuit Parade and block party July 4, citing the extreme heat and severe-weather forecast.
Anthrocon, one of the world's largest furry conventions, runs through Sunday, July 5, at the David L. Lawrence Convention Center downtown, but organizers scrapped the marquee Fursuit Parade and block party over dangerous heat and shifted to alternative indoor activities.
Sources: WPXI · NEXTpittsburgh Events · ↑ top
Latest developments: Pittsburgh stages its America 250 Fourth of July celebration Saturday, July 4, with the city's largest-ever fireworks show, though scattered thunderstorms may threaten the evening display.
Pittsburgh's Fourth of July celebration, voted the nation's best by USA Today readers, spreads across downtown, the North Shore, and Mount Washington on Saturday, July 4, with line dancing, Ferris wheel rides, a Plain White T's performance, and the largest fireworks show in city history after dark; forecasters warn of scattered thunderstorms into the evening.
Sources: KDKA · Post-Gazette Music · ↑ top
Pirates (44-45)
Fri Jul 3 · Pirates 5 · Nationals 9 · Final
García and Lile each homer twice as the Nationals rout the Pirates 9-5
Sat Jul 4 · Pirates 5 · Nationals 1 · Bot 3rd (in progress at last update)
Up Next · Pirates @ Nationals · Sun Jul 5, 1:00 PM
Latest developments: A Post-Gazette 'Off The Bat' feature July 4 charted how Esmerlyn Valdez has become a middle-of-the-order force for the Pirates.
The Post-Gazette's 'Off The Bat' detailed how outfielder Esmerlyn Valdez has emerged as one of the Pirates' most productive hitters this season, a bright spot the paper frames in All-Star terms as the club hovers around .500.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: On the Steelers' SNR Drive July 1, Matt Williamson and Wes Uhler broke down ESPN's NFL offseason grades for all 32 teams.
On the Steelers' team podcast SNR Drive, analysts Matt Williamson and Wes Uhler worked through ESPN writer Seth Walder's offseason grades for every NFL team and added a Team USA-themed 'Best of the Wes' segment; the show pauses during training camp.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: Cam Heyward's 'Not Just Football' released a July 1 interview with Notre Dame coach Marcus Freeman, Heyward's former Ohio State teammate.
On his 'Not Just Football' podcast, Steelers captain Cam Heyward interviewed Notre Dame head coach Marcus Freeman, a onetime Ohio State teammate, about leadership, recruiting, and developing NFL talent.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: USWNT forward Trinity Rodman marked her NWSL return July 3 with two goals, including a stoppage-time winner, for the Washington Spirit.
Trinity Rodman, the United States forward, returned to NWSL action with a two-goal performance, sealing a 2-1 Washington Spirit win over the Houston Dash with a goal in stoppage time.
Sources: ESPN Soccer · ↑ top
Latest developments: As the World Cup round of 16 opened July 4, ESPN weighed how the United States will replace suspended striker Folarin Balogun against Belgium.
The United States reached the World Cup round of 16, where it meets Belgium, but must field a lineup without striker Folarin Balogun, suspended after his red card against Bosnia and Herzegovina; ESPN casts Ricardo Pepi and Haji Wright as the leading options to fill his spot.
Sources: ESPN Soccer · ↑ top
S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.26 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3264 ▲ +0.5% USD/JPY 161.98 ▲ +0.2%