daily plain-text briefing: security, markets, business, and pittsburgh
Data-theft extortion, AI-assisted espionage, and unpatched open-source flaws keep defenders stretched even as courts jail a hacktivist and Google severs a two-million-device proxy botnet.
Latest developments: The Hacker News published a detailed July 4 account showing that Kairos, despite ransomware-style branding, never locked a single file, reconstructed from a leaked negotiation chat and the blockchain trail the $1 million payment left.
Kairos extorted a U.S. government entity out of roughly $1 million by threatening to leak stolen files, running pure data-theft extortion with no encryption. Rakesh Krishnan's Ransom-ISAC case study reconstructed the case; defenders should treat exfiltration-only extortion as a first-order risk and lock down data-exfiltration paths.
Sources: The Hacker News · ↑ top
Latest developments: runZero disclosed seven still-unpatched flaws in FatFs the same stretch of the news cycle that the patched Bad Epoll kernel flaw surfaced, sitting in the code where Anthropic's Mythos model recently caught a different bug.
runZero found seven vulnerabilities in FatFs, the small filesystem library that reads USB drives and SD cards inside security cameras, drones, industrial controllers, and hardware crypto wallets, while Bad Epoll (CVE-2026-46242) hands any unprivileged user root on Linux desktops, servers, and Android. Patch Linux immediately; embedded-device operators must press vendors for FatFs fixes.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Researchers detailed Avalon for the first time, a modular framework whose multi-stage phishing chain bypasses traditional controls and then executes CrownX ransomware.
Avalon is a previously undocumented modular malware framework that a multi-stage phishing chain delivers, combining credential theft, lateral movement, remote access, recovery disruption, and CrownX ransomware in one package. Its control-bypassing delivery makes phishing hardening and backup protection urgent.
Sources: The Hacker News · ↑ top
Latest developments: A joint operation involving Google cut off NetNut's roughly 2 million compromised Android devices, including smart TVs and streaming boxes, dismantling the residential proxy network.
NetNut resold access to about 2 million infected Android devices as residential proxies that attackers used to mask malicious traffic. The Google-led takedown severs a major source of hard-to-block residential-IP abuse.
Sources: BleepingComputer · ↑ top
Latest developments: SecurityWeek's July 3 roundup reported that courts jailed an Anonymous-linked Canadian hacker and sentenced Venezuelan nationals in the United States for ATM jackpotting, while a researcher separately published zero-days in open-source projects.
Law enforcement notched two convictions: an Anonymous-linked Canadian hacker went to jail and Venezuelan nationals drew U.S. sentences for ATM jackpotting, the technique that forces cash machines to empty themselves. The same roundup flagged a researcher dropping zero-days in open-source projects.
Sources: SecurityWeek · ↑ top
Latest developments: Kaspersky attributed a fresh campaign to Armored Likho, naming its new Python tool BusySnake Stealer and AI-generated loaders aimed at government agencies and the electric power sector across Russia, Brazil, and Kazakhstan.
Armored Likho, a previously undocumented actor, blends financially motivated theft against individuals with espionage against organizations, using spear-phishing, AI-generated loaders, and BusySnake Stealer. Government and power-sector defenders should harden email defenses and hunt for the BusySnake toolset.
Sources: The Hacker News · ↑ top
Latest developments: Iran's top leaders and the ayatollah's sons flanked the coffin on July 5, but Mojtaba Khamenei—long seen as a possible successor—stayed away, spotlighting an unresolved succession.
Iran is holding a six-day state funeral in Tehran for supreme leader Ayatollah Ali Khamenei, who died in the war with Israel and the United States; the Islamic Republic staged a show of elite unity even as the absence of his son Mojtaba underscored the unsettled question of who will rule.
Sources: Financial Times · ↑ top
Latest developments: OPEC and its allies raised production for a fifth straight month on July 5 just as tanker traffic through the Strait of Hormuz, which the war had disrupted, began recovering.
OPEC and its partners continued unwinding the production cuts they imposed in recent years, adding barrels to the market as shipping through the Strait of Hormuz normalizes after the Iran conflict, easing the supply picture for global crude.
Sources: Wall Street Journal · ↑ top
Today: Showers And Thunderstorms Likely, high 87F.
Tonight: Showers And Thunderstorms Likely, low 70F.
Monday: Patchy Fog then Chance Showers And Thunderstorms, high 85F.
Latest developments: Grim Wizard Coffee, the heavy-metal-themed café, moved into a larger storefront in Pittsburgh's Allentown neighborhood, pairing its coffee bar with a room of pinball machines.
Grim Wizard Coffee, an Allentown café built around a heavy-metal aesthetic—a deep-red arch, Rainbow's 1976 'Stargazer' lyrics stenciled in gold—grew into a bigger space, adding a pinball room beside its espresso bar.
Latest developments: A University of Pittsburgh study found that a video game built by a local physician measurably improved emergency-room doctors' decisions in treating older trauma patients.
Researchers at the University of Pittsburgh reported that a training video game, created by a Pittsburgh doctor, improved how ER physicians decide care for older trauma patients, a group whose injuries clinicians often under-triage.
Latest developments: The heat wave broke after a fifth 90-degree day; Saturday storms knocked out power to thousands, and forecasters now flag flooding as the main risk heading into a cooler, humid, rainy week.
Western Pennsylvania's heat wave ended as scattered storms crossed the Pittsburgh region, cutting power to thousands of customers Saturday and saturating ground so that Sunday's rain raises flash-flood concerns; KDKA forecasts cooler, humid conditions through the week.
Latest developments: Irwin council members' frustration boiled over at a meeting as they faulted contractors for work they see as missed or incomplete on a remodeling project meant to create new municipal offices.
In Irwin, a Westmoreland County borough, council members clashed over the conversion of a building into new municipal offices, criticizing what they call unfinished or overlooked work.
Pirates (45-45)
Sat Jul 4 · Pirates 7 · Nationals 1 · Final
Ashcraft wins 4th straight start as Pirates topple Nationals 7-1
Up Next · Pirates @ Nationals · Sun Jul 5, 1:00 PM
Latest developments: In a July 3 deep dive, Post-Gazette columnist Noah Hiles spread blame for Paul Skenes' recent struggles across his catchers, his coaching, and his mechanics.
Post-Gazette columnist Noah Hiles examined the causes of Pirates ace Paul Skenes' rough stretch—capped by a career-high eight runs against the Phillies—and found plenty of shared responsibility around the pitcher.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: In a July 2 live chat, Post-Gazette writer Christopher Carter took reader questions on quarterback Aaron Rodgers, receiver DK Metcalf, and cornerback Joey Porter Jr.
Post-Gazette Steelers writer Christopher Carter answered readers in a July 2 chat spanning the offseason roster, from Aaron Rodgers under center to DK Metcalf's fit and the contract questions surrounding Joey Porter Jr.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: A day from kickoff, captain Tim Ream called the squad 'a true representation of America' as the United States readied for its round-of-16 match against Belgium on Monday, July 6, in Seattle, still without suspended striker Folarin Balogun.
The United States men's national team, co-hosting the 2026 World Cup, faces Belgium in the round of 16 on Monday, July 6, in Seattle; ESPN weighed how the Americans replace suspended forward Folarin Balogun, while defender Tim Ream cast the team's diverse roster as a reflection of the country.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
S&P 500 7,452.06 ▲ +0.6% Dow 52,316.67 ▲ +1.1% Nasdaq 25,840.84 ▲ +0.1% WTI crude 69.26 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3295 ▲ +0.7% USD/JPY 161.98 ▲ +0.2%