================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, July 4, 2026 - 4:07 PM EDT ================================================================ North Korean operators flood open-source registries with poisoned packages as prosecutors name a teenage Scattered Spider suspect in a widening enforcement push. CONTENTS: Emerging Trends and Key Updates | Security | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] North Korean operators behind Contagious Interview flooded npm, Packagist, Go, and the Chrome Web Store with 108 poisoned packages in the PolinRider campaign to steal developer credentials. see: North Korean PolinRider Package Flood * [UPDATE (new)] US prosecutors extradited 19-year-old Peter Stokes, an alleged Scattered Spider member tied to over 100 network intrusions and more than $100 million in ransoms. see: Scattered Spider Suspect Named in US Extradition * [TREND] Data from eleven SSH honeypots undercuts the hands-on-keyboard image, showing most intruders fire off non-interactive scripts once logged in, machines typing at machines. see: Non-Interactive SSH Attacks Dominate After Login * [UPDATE (new)] Apple's Hide My Email, meant to mask users behind random relay addresses, failed and exposed the real addresses it was designed to conceal. see: Apple Hide My Email Exposes Real Addresses * [TREND] Reading skeptics circle AI economics as Zitron argues the industry is losing money, Newport warns of productivity paradoxes, and Figma's Dylan Field calls AI a tailwind. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI * [UPDATE (new)] Pittsburgh's July 4 brings a severe thunderstorm watch amid a near-100-degree heat wave while Acrisure Stadium opens for a U.S.-Belgium World Cup watch party. see: Heat Wave Peaks With Severe Storms on July 4; Acrisure Stadium to Host U.S.-Belgium Watch Event SECURITY ---------------------------------------------------------------- 1. SCATTERED SPIDER SUSPECT NAMED IN US EXTRADITION Ransomware and Cybercrime · [ransomware, arrest] Latest developments: SecurityWeek reported July 3 that prosecutors identified the extradited suspect as 19-year-old Peter Stokes, an alleged Scattered Spider member tied to more than 100 network intrusions and over $100 million in ransom payments, while a separate SecurityWeek roundup logged an Anonymous-linked Canadian hacker jailed and two Venezuelans sentenced for ATM jackpotting. Scattered Spider is a loose, mostly English-speaking extortion crew behind high-profile breaches; the charging of Stokes marks the latest arrest in a widening law-enforcement push against young operators. - SecurityWeek: https://www.securityweek.com/alleged-scattered-spider-hacker-extradited-to-us/ - SecurityWeek: https://www.securityweek.com/in-other-news-canadian-hacker-jailed-open-source-zero-days-two-sentenced-for-atm-jackpotting/ - Wired Security: https://www.wired.com/story/security-roundup-apples-hide-my-email-service-fails-to-hide-your-email/ 2. NORTH KOREAN POLINRIDER PACKAGE FLOOD Nation-State Activity · [apt, supply-chain] Latest developments: The Hacker News reported July 4 that the North Korean actors behind Contagious Interview published 108 malicious packages and browser extensions across npm, Packagist, Go, and the Chrome Web Store in a campaign researchers call PolinRider, days after JFrog tied two npm packages posing as Rollup polyfill tooling to the same operation. The DPRK crews compromise maintainer accounts and upload lookalike packages—"rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the real "rollup-plugin-polyfill-node"—to plant remote access and siphon developer secrets; teams should pin dependencies and audit recently added packages. - The Hacker News: https://thehackernews.com/2026/07/north-korean-hackers-publish-108.html - The Hacker News: https://thehackernews.com/2026/07/north-korea-linked-npm-packages-mimic.html 3. APPLE HIDE MY EMAIL EXPOSES REAL ADDRESSES Surveillance and Privacy · [privacy] Latest developments: Wired reported July 4 that Apple's Hide My Email, the iCloud+ service that masks a user's real address behind random relay addresses, failed to keep those real addresses hidden. Hide My Email lets users hand apps and websites a throwaway relay address instead of their primary one; the lapse undercuts a privacy feature millions rely on, and affected users should watch for exposure of their true addresses. - Wired Security: https://www.wired.com/story/security-roundup-apples-hide-my-email-service-fails-to-hide-your-email/ 4. NON-INTERACTIVE SSH ATTACKS DOMINATE AFTER LOGIN Threat Detection and Response · [research, ssh] Latest developments: Help Net Security reported July 3 that data from eleven SSH honeypots shows most attackers, once they crack a login, fire off non-interactive scripts, machine-driven commands that run with no human at the keyboard. Internet-facing SSH servers face constant automated login attempts; the honeypot data tells defenders to watch for scripted post-login behavior and to harden credentials and monitoring. - Help Net Security: https://www.helpnetsecurity.com/2026/07/03/research-non-interactive-ssh-attacks/ 5. AUSTRALIA PUSHES CYBER RISK ONTO SMALL BUSINESS Policy and Regulation · [policy] Latest developments: Dark Reading reported July 2 that stronger institutional safeguards and stricter regulation have cut cybercrime risk for Australians overall while shifting the burden of protection onto the country's small and midsize businesses. Australia's tighter rules reduce aggregate consumer risk but leave smaller firms carrying more of the compliance and defense load; SMBs need to budget for controls larger institutions already run. - Dark Reading: https://www.darkreading.com/cybersecurity-analytics/aussies-face-reduced-cybercrime-risk-pressure-shifts-smbs PITTSBURGH ---------------------------------------------------------------- Weather: Independence Day: Showers And Thunderstorms Likely, high 95F. Tonight: Showers And Thunderstorms Likely, low 71F. Sunday: Patchy Fog then Chance Showers And Thunderstorms, high 86F. Around town: * Heat Wave Peaks With Severe Storms on July 4 Latest developments: The National Weather Service posted a severe thunderstorm watch across the Pittsburgh region through Fourth of July evening as the heat wave reached its final, hottest day with temperatures near 100 degrees. The prolonged heat wave over western Pennsylvania climaxed Saturday, July 4, with afternoon storms cutting power to homes and the CDC reporting extremely high rates of heat-related emergency-room visits across the eastern United States. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/07/04/pittsburgh-weather-severe-thunderstorm-watch/stories/202607040029 - WPXI: https://www.wpxi.com/news/local/july-4th-weather-temperatures-surge-near-100-final-day-heat-wave/BNAF5IXC3ZH4VDUGXLOSXZYJAE/ - WTAE: https://www.wtae.com/article/extremely-high-rates-heat-related-er-visits-cdc-more-saturday/71822409 * Washington County Retaliation Lawsuit Latest developments: Al Buchtan, a former GOP Pennsylvania Senate candidate, sued Washington County officials, alleging they retaliated against him after one of the region's most contested May 2026 primary races. Buchtan filed suit against Washington County officials claiming retaliation tied to his hotly contested May 2026 Republican primary campaign, a civil case now working through the courts. - WTAE: https://www.wtae.com/article/al-buchtan-lawsuit-alleges-retaliation-washington-county-may-2026-primary/71822672 * Acrisure Stadium to Host U.S.-Belgium Watch Event Latest developments: The Post-Gazette reported July 4 that the Steelers' Acrisure Stadium will open to fans for a public viewing of the United States' World Cup round-of-16 match against Belgium, played in Seattle. Acrisure Stadium on Pittsburgh's North Shore will welcome fans for a stadium watch of the U.S. men's national team's round-of-16 World Cup match, giving local supporters a large-venue gathering as the tournament reaches the knockouts. - Pittsburgh Post-Gazette: https://www.post-gazette.com/sports/2026/07/04/usa-belgium-world-cup-pittsburgh-acrisure-stadium/stories/202607040026 SPORTS ---------------------------------------------------------------- Pirates (45-45) Fri Jul 3 · Pirates 5 · Nationals 9 · Final García and Lile each homer twice as the Nationals rout the Pirates 9-5 https://plaintextsports.com/mlb/2026-07-03/pit-wsh Sat Jul 4 · Pirates 7 · Nationals 1 · Final Ashcraft wins 4th straight start as Pirates topple Nationals 7-1 https://plaintextsports.com/mlb/2026-07-04/pit-wsh Up Next · Pirates @ Nationals · Sun Jul 5, 1:00 PM https://plaintextsports.com/mlb/2026-07-05/pit-wsh Team USA: * Ream Calls USMNT 'True Representation of America' Latest developments: USMNT defender Tim Ream said July 4 that the squad's varied backgrounds make it 'a true representation of what America is' as the team readied for the World Cup knockout rounds it co-hosts. Ream, the veteran United States defender, framed his team's mix of dual-national and homegrown players as a mirror of the country, casting the diversity as a source of strength entering the round of 16. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49270695/usmnt-true-representation-america-tim-ream * Pochettino Throws Out First Pitch Latest developments: United States men's coach Mauricio Pochettino became the latest World Cup figure to throw a ceremonial first pitch at a Major League Baseball game, ESPN reported July 4. Pochettino, the U.S. men's national team head coach, took the mound for a first pitch as the tournament's soccer figures leaned into American baseball, a light interlude before the knockout stage. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49261996/usmnt-coach-mauricio-pochettino-latest-world-cup-star-throw-first-pitch-mlb READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI industry is fundamentally losing money, contending the economics of the build-out do not work and the boom is heading toward a reckoning. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport warns that technologies seemingly destined to boost output—the personal computer, and now AI—often fail to deliver the productivity gains everyone assumes. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma CEO Dylan Field on building the company and why Field believes AI works as a tailwind rather than a threat to design software. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.26 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3264 ▲ +0.5% USD/JPY 161.98 ▲ +0.2% ================================================================ Generated 2026-07-04 16:07 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================