================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, July 4, 2026 - 9:05 PM EDT ================================================================ A U.S. government entity paid Kairos about $1 million to bury stolen files without a byte of encryption, underscoring a shift toward pure data-theft extortion as consolidated malware frameworks and capable Chinese AI models sharpen the offensive edge. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers keep weaving AI into intrusions, from Armored Likho's AI-generated loaders to new Chinese LLMs that now rival U.S. frontier models and widen the offense-defense gap. see: Armored Likho Deploys BusySnake Stealer; Chinese LLMs Widen the Attacker-Defender Gap * [TREND] Extortion is collapsing into fewer moving parts, as Kairos pocketed $1 million from a U.S. entity with no encryption while Avalon bundles CrownX ransomware, theft, and lateral movement. see: Kairos Extorts US Government Without Encryption; Avalon Framework Bundles CrownX Ransomware * [TREND] This run's Reading refresh doubts the AI boom, with Zitron calling the industry unsustainable, Newport warning of a productivity paradox, and Figma's Field pitching AI as a tailwind. see: The AI Industry Is Losing; Beware of Productivity Paradoxes; An Interview with Figma CEO Dylan Field About Design and AI * [UPDATE (new)] Fourth of July storms battered western Pennsylvania, forcing Pittsburgh to suspend its Point State Park celebration before an 8:15 p.m. reopening and a 10 p.m. fireworks show. see: July 4 Storms Batter the Region; Pittsburgh's July 4 Celebration * [UPDATE (new)] Iran opened a six-day state funeral in Tehran for supreme leader Ali Khamenei, killed in the war with Israel, with authorities forecasting 20 million mourners. see: Khamenei State Funeral Begins in Tehran * [UPDATE (new)] Paul Skenes made the National League All-Star team for a third straight year as the Pirates' only selection. see: Skenes Is Pirates' Lone All-Star SECURITY ---------------------------------------------------------------- 1. KAIROS EXTORTS US GOVERNMENT WITHOUT ENCRYPTION Ransomware and Cybercrime · [extortion, ransomware, breach] Latest developments: Rakesh Krishnan published a Ransom-ISAC case study July 4 tracing about $1 million from a U.S. government entity to a group calling itself Kairos, which never encrypted a single file and ran pure data-theft extortion. Kairos steals an organization's files and threatens to leak them, skipping ransomware encryption altogether. Krishnan rebuilt the payment from a leaked negotiation chat and the blockchain trail it left. - The Hacker News: https://thehackernews.com/2026/07/us-government-entity-paid-kairos-group.html 2. ARMORED LIKHO DEPLOYS BUSYSNAKE STEALER Nation-State Activity · [apt, espionage, stealer] Latest developments: Kaspersky attributed a July 3 campaign to Armored Likho, a previously undocumented actor hitting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan with spear-phishing, AI-generated loaders, and a new Python tool called BusySnake Stealer. Armored Likho blends financially motivated attacks on individuals with espionage against organizations. BusySnake Stealer siphons data from infected government and power-sector systems. - The Hacker News: https://thehackernews.com/2026/07/armored-likho-targets-government.html - Securelist (Kaspersky): https://securelist.com/tr/armored-likho-apt-with-busysnake-stealer/120292/ 3. AVALON FRAMEWORK BUNDLES CROWNX RANSOMWARE Ransomware and Cybercrime · [ransomware, malware, phishing] Latest developments: The Hacker News detailed Avalon on July 3, a previously undocumented modular malware framework that a multi-stage phishing chain delivers, packing CrownX ransomware alongside credential theft, lateral movement, remote access, and recovery disruption. Avalon unites the full intrusion toolkit inside one framework built to slip past traditional security controls. A single package now runs credential collection, network spread, backup destruction, and file encryption end to end. - The Hacker News: https://thehackernews.com/2026/07/new-avalon-malware-framework-packs.html 4. CHINESE LLMS WIDEN THE ATTACKER-DEFENDER GAP AI Security · [ai, llm] Latest developments: Dark Reading reported July 3 that two new models from Chinese firms now rival top U.S. mainstream and frontier models, raising the question of how far they widen the advantage attackers already hold over defenders. Capable Chinese large language models lower the cost of building offensive tooling. Defenders weigh whether the models tip the balance further toward attackers. - Dark Reading: https://www.darkreading.com/cyber-risk/chinese-llms-broaden-gap-between-attackers-and-defenders 5. FLOCK CAMERAS TRACK CARS WITHOUT PLATES Surveillance and Privacy · [surveillance, privacy] Latest developments: Bruce Schneier highlighted July 3 a 2024 Flock presentation describing 'Vehicle Fingerprint,' a feature that identifies cars by decals, bumper stickers, roof and rear racks, and temporary tags even when officers see no license plate. Flock's automated cameras profile vehicles beyond their plates and let police search the collected attributes. The capability extends mass vehicle surveillance to cars officers cannot identify by plate alone. - Schneier on Security: https://www.schneier.com/blog/archives/2026/07/flock-cameras-can-surveil-cars-without-license-plates.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Khamenei State Funeral Begins in Tehran Latest developments: Iran opened a six-day state funeral on July 4 for supreme leader Ayatollah Ali Khamenei, killed in the war with Israel and the United States, with authorities forecasting 20 million mourners and crowds chanting for revenge. Ayatollah Ali Khamenei, Iran's supreme leader since 1989, died in the recent war with Israel and the U.S., and the multiday Tehran ceremonies are the Islamic Republic's bid to project durability after losing its top figure. - WSJ World News: https://www.wsj.com/world/middle-east/iran-supreme-leader-khamenei-funeral-7e1ad603 - FT World: https://www.ft.com/content/c40471ec-cac8-4ab0-8a77-34ae971a7ffc PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Chance Showers And Thunderstorms, low 71F. Sunday: Patchy Fog then Chance Showers And Thunderstorms, high 86F. Sunday Night: Showers And Thunderstorms, low 68F. Around town: * July 4 Storms Batter the Region Latest developments: The forecast severe weather hit western Pennsylvania on July 4, triggering flash flood warnings, downing trees and wires that closed roads in Shaler Township, and knocking out power to homes as the heat wave broke. Severe thunderstorms swept the Pittsburgh region on Independence Day, flooding roads and cutting utility service, and the National Weather Service kept severe thunderstorm and flash flood warnings up through the evening. - WTAE: https://www.wtae.com/article/severe-storms-july-4-weekend-2026-western-pa/71823007 - WTAE: https://www.wtae.com/article/road-closed-blocked-fallen-trees-shaler-township/71823679 * West Newton Opens 1976 Time Capsule Latest developments: West Newton unsealed a time capsule buried in 1976 during a July 4 ceremony at the West Newton Cemetery Grove, fulfilling a 50-year charge given to Paul Williams and nine neighbors when they were children. The Westmoreland County borough of West Newton marked the nation's 250th birthday by opening a bicentennial-era time capsule, a duty passed as 'a promise between generations' to residents who were children in 1976. - TribLive: https://triblive.com/local/westmoreland/a-promise-between-generations-west-newton-opens-1976-time-capsule-on-nations-250th-birthday/ Events: * Pittsburgh's July 4 Celebration Latest developments: Storms forced Pittsburgh to suspend its Fourth of July celebration just before 5 p.m., then officials reopened gates at Point State Park and the North Shore at 8:15 p.m. for a 10 p.m. fireworks show. Pittsburgh's Independence Day program, billed as the city's largest-ever fireworks display, went ahead free to the public the evening of Saturday, July 4, downtown at Point State Park and along the North Shore after a weather delay. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-fourth-of-july-america-250-celebrations-severe-weather/ - TribLive: https://triblive.com/local/pittsburgh-delays-4th-of-july-events-amid-thunderstorms/ * Anthrocon Wraps Downtown Latest developments: Anthrocon, running through Sunday, July 5, at the David L. Lawrence Convention Center, canceled its Fursuit Parade and Block Party because of the extreme heat and severe weather, moving to indoor activities. Anthrocon, one of the world's largest furry conventions, marks its 20th anniversary downtown this year, though the weekend heat wave scrapped its signature outdoor fursuit parade. - NEXTpittsburgh Events: https://nextpittsburgh.com/events/17-things-to-do-for-4th-of-july-weekend-in-pittsburgh/ SPORTS ---------------------------------------------------------------- Pirates (45-45) Fri Jul 3 · Pirates 5 · Nationals 9 · Final García and Lile each homer twice as the Nationals rout the Pirates 9-5 https://plaintextsports.com/mlb/2026-07-03/pit-wsh Sat Jul 4 · Pirates 7 · Nationals 1 · Final Ashcraft wins 4th straight start as Pirates topple Nationals 7-1 https://plaintextsports.com/mlb/2026-07-04/pit-wsh Up Next · Pirates @ Nationals · Sun Jul 5, 1:00 PM https://plaintextsports.com/mlb/2026-07-05/pit-wsh Around the Teams: * Skenes Is Pirates' Lone All-Star Latest developments: The Pirates named Paul Skenes to the National League All-Star team for a third straight year on July 4, their only selection, and the Post-Gazette reported even Skenes was surprised given his recent rough stretch. Pittsburgh ace Paul Skenes, 24, joins Rip Sewell and Elroy Face as the only Pirates pitchers picked for three consecutive All-Star Games, and he stands as the club's sole representative this year. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/04/pirates-paul-skenes-all-star-ashcraft-lowe-reynolds/stories/202607040019 * Steelers Break Down Offseason Grades Latest developments: On the July 1 SNR Drive, Steelers analysts Matt Williamson and Wes Uhler dissected ESPN writer Seth Walder's offseason grades for all 32 NFL teams and noted the show pauses through training camp. The Steelers' team channel program SNR Drive reviewed ESPN's NFL offseason report cards, gauging where Pittsburgh's moves ranked ahead of camp at Saint Vincent College. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=5O7TI1b_RKY Team USA: * USMNT Meets Belgium in Round of 16 Latest developments: The United States plays Belgium in the World Cup round of 16 on Monday in Seattle without suspended striker Folarin Balogun, and Belgium's players said July 4 they will need courage to silence an expected raucous pro-U.S. crowd. The co-host United States, riding strong home support, faces Belgium in Seattle for a quarterfinal berth, and with Balogun serving his red-card ban coach Mauricio Pochettino weighs replacements such as Ricardo Pepi and Haji Wright up front. - Guardian World Cup 2026: https://www.theguardian.com/football/2026/jul/04/belgium-united-states-world-cup-environment - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49256530/how-usmnt-cope-red-card-striker-folarin-balogun-world-cup-round-16-belgium READING ---------------------------------------------------------------- * Ed Zitron -- The AI Industry Is Losing Zitron argues the AI business is fundamentally unsustainable, with the major labs and their backers burning cash far faster than AI products bring in revenue, and contends the underlying math is finally catching up to the hype. https://www.wheresyoured.at/the-ai-industry-is-losing/ * Cal Newport -- Beware of Productivity Paradoxes Newport revisits how transformative tools like the personal computer often fail to deliver the productivity gains they promise, warning that AI may repeat the same paradox. https://calnewport.com/beware-of-productivity-paradoxes/ * Stratechery -- An Interview with Figma CEO Dylan Field About Design and AI Ben Thompson interviews Figma chief executive Dylan Field on building the design tool and why Field believes AI acts as a tailwind rather than a threat to the company. https://stratechery.com/2026/an-interview-with-figma-ceo-dylan-field-about-design-and-ai/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.26 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3295 ▲ +0.7% USD/JPY 161.98 ▲ +0.2% ================================================================ Generated 2026-07-04 21:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================