================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, July 7, 2026 - 9:05 AM EDT ================================================================ A maximum-severity Adobe ColdFusion flaw fell under active exploitation within minutes of a public technical write-up, while Google sued a phishing crew that weaponized its Gemini AI. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Artificial intelligence works both sides of the ledger as Google sues a Telegram phishing crew abusing Gemini while analysts warn AI now writes unvetted code into the build pipeline. see: Google Sues Outsider Enterprise Over Gemini Abuse; AI Enters the Software Build Pipeline * [UPDATE (new)] Attackers weaponized a maximum-severity Adobe ColdFusion flaw, CVE-2026-48282, within minutes of watchTowr's write-up, with KEVIntel honeypots catching the first hits on July 2. see: Adobe ColdFusion Flaw Under Active Exploitation * [UPDATE (new)] Medtronic began notifying nearly 4 million people that a ShinyHunters intrusion exposed their Social Security numbers and health data, with no evidence the records surfaced online. see: Medtronic Notifies Nearly 4 Million of Breach * [UPDATE (new)] Law enforcement hit streaming piracy as Vietnam prosecuted seven HiAnime operators and Japanese police arrested a Tokyo-area teenager who exploited a subscription-service flaw. see: Arrests Hit Anime Piracy and Streaming Fraud * [TREND] Commentators scrutinize AI's economics as Ben Thompson scripts Zuckerberg's earnings pitch, Zitron mocks SoftBank's spectacle, and Newport warns of a productivity paradox. see: A Script for Mark Zuckerberg; Premium: The Hater's Guide To SoftBank; Beware of Productivity Paradoxes SECURITY ---------------------------------------------------------------- 1. ADOBE COLDFUSION FLAW UNDER ACTIVE EXPLOITATION Vulnerabilities and Exploits · [exploit, patch, zero-day] Latest developments: Exploitation of CVE-2026-48282 broadened this week, with KEVIntel's honeypots catching the first hits on July 2 minutes after watchTowr published a technical breakdown of the flaw. Adobe ColdFusion, a widely deployed web-application server, carries CVE-2026-48282, a CVSS 10.0 bug Adobe patched June 30, 2026; unpatched servers face full remote compromise, so administrators should apply the update immediately. - SecurityWeek: https://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/07/adobe-coldfusion-cve-2026-48282-exploitation-detected/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/ 2. AI ENTERS THE SOFTWARE BUILD PIPELINE AI Security · [ai, supply-chain] Latest developments: Analysts at The Hacker News and BleepingComputer argued this week that AI now writes code directly into the build pipeline, folding a new class of unvetted machine-generated dependencies into a supply chain that SolarWinds, Log4Shell, and XZ Utils already battered. As AI coding tools generate and commit software faster than humans can review it, they strip out the checkpoints where teams once caught security problems, widening the software supply-chain attack surface. - The Hacker News: https://thehackernews.com/2026/07/what-changes-when-your-software-supply.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/software-is-now-written-at-the-speed-of-thought-security-isnt/ 3. GOOGLE SUES OUTSIDER ENTERPRISE OVER GEMINI ABUSE AI Security · [phishing, ai, fraud] Latest developments: Google filed suit against Outsider Enterprise, a Telegram-based phishing-as-a-service operation that coached customers to use Google's Gemini model to spin up counterfeit Google and YouTube login pages for text-message scam campaigns. Outsider Enterprise sells ready-made phishing kits to low-skill fraudsters over Telegram; the lawsuit marks Google's attempt to choke off criminal abuse of its own AI models. - Schneier on Security: https://www.schneier.com/blog/archives/2026/07/google-is-suing-chinese-scammers-who-are-using-gemini.html 4. ARRESTS HIT ANIME PIRACY AND STREAMING FRAUD Ransomware and Cybercrime · [cybercrime, arrest, piracy] Latest developments: Vietnamese police arrested and are prosecuting seven suspects who ran HiAnime, the largest anime piracy streaming site before its June shutdown, while Japanese police arrested a teenager near Tokyo who exploited a flaw in a subscription anime platform to cancel more than 46,000 users' subscriptions. Two separate cases hit the anime streaming world: HiAnime's operators face prosecution in Vietnam, and a Japanese student faces charges for fraudulently voiding tens of thousands of paid subscriptions. - BleepingComputer: https://www.bleepingcomputer.com/news/security/vietnam-arrests-suspects-behind-hianime-anime-piracy-service/ - The Record: https://therecord.media/japanese-teen-arrested-over-attack-disrupted-streaming-service 5. MEDTRONIC NOTIFIES NEARLY 4 MILLION OF BREACH Data Breaches · [breach, healthcare] Latest developments: Medtronic began notifying nearly 4 million people that the ShinyHunters intrusion into its corporate systems exposed their Social Security numbers and health data, and the company said it found no evidence the stolen records surfaced online. ShinyHunters stole personal and medical records during an April 2026 breach of medical-device maker Medtronic's corporate IT; affected individuals should watch for identity theft and take up any monitoring offered. - The Record: https://therecord.media/medical-device-maker-notifies-nearly-4-million-of-breach BUSINESS AND POLITICS ---------------------------------------------------------------- * French Court Clears Le Pen to Run for President Latest developments: A French appeals court on July 7 upheld Marine Le Pen's embezzlement conviction but cut the sentence that had barred her from public office, freeing her to run. The ruling lets National Rally leader Marine Le Pen stand in France's 2027 presidential election, reversing a lower court's ban tied to her conviction for embezzling European Parliament funds, though electronic monitoring could hamper her campaign. - WSJ World News: https://www.wsj.com/world/europe/french-appeals-court-allows-le-pen-to-run-in-next-years-presidential-race-dd27a5d1 - FT World: https://www.ft.com/content/2ceb7109-b936-4088-9816-a0667cd2e1f7 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Patchy Fog then Scattered Showers And Thunderstorms, high 86F. Tonight: Scattered Showers And Thunderstorms then Areas Of Fog, low 69F. Wednesday: Areas Of Fog then Isolated Showers And Thunderstorms, high 87F. Business: * Mic Drop Nightlife Venue Coming to the North Shore Latest developments: Mic Drop, a karaoke and dueling-pianos entertainment concept, will open in 4,321 square feet on North Shore Drive. The venue pitches itself as an immersive nightlife destination with live music and social experiences on Pittsburgh's North Shore near the stadiums. - WPXI: https://www.wpxi.com/news/local/new-entertainment-concept-with-karaoke-dueling-pianos-more-open-pittsburghs-north-shore/ROJIE2OFGRC3PKJ3VWAHMQT6VI/ * Penn Township Industrial Park Adds Grocery and Lounge Latest developments: The owners of a Penn Township staffing and screening company are opening an all-in-one grocery store, restaurant, and fitness center at their industrial park. In Westmoreland County's Penn Township, a longtime staffing and screening business is diversifying into retail and dining, its most unusual pivot after decades adapting to changing economic times. - TribLive: https://triblive.com/local/westmoreland/why-a-penn-township-industrial-park-now-has-a-grocery-store-and-lounge/ Around town: * McCandless Unifies Its Volunteer Fire Departments Latest developments: McCandless is drafting a single combined set of bylaws to govern its three volunteer fire departments under one paid fire chief. The town is replacing three separate rulebooks with one unified structure meant to streamline and guide operations across its volunteer fire companies. - TribLive: https://triblive.com/local/mccandless-pursues-1-set-of-bylaws-for-3-volunteer-fire-departments/ * Court Weighs Pitt Police Records Exemption Latest developments: A denied open-records request over University of Pittsburgh police enforcement during pro-Palestine protests reached a judge on appeal. The appeal challenges whether the University of Pittsburgh Police Department can claim exemption from Pennsylvania's right-to-know laws covering how it policed campus demonstrations. - Pittsburgh City Paper: https://www.pghcitypaper.com/news-2/social-justice/legal-challenge-questions-pitt-polices-exemption-from-right-to-know-laws-palestine-protests/ * Flood Risk Persists Across the Region Latest developments: Forecasters placed significant parts of the Pittsburgh area in NOAA's excessive-rain outlook every day for the next five days, with Friday likely to become a First Alert weather day. Scattered afternoon storms could bring renewed flash flooding across Allegheny County and western Pennsylvania, KDKA meteorologists said, after a stormy holiday week. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-weather-forecast-scattered-afternoon-storms-flooding-risks/ Events: * Mini Golf at the Westmoreland Museum Latest developments: A summer-long miniature golf exhibition inside the Westmoreland Museum of American Art in Greensburg is drawing a broad range of visitors. The Westmoreland Museum of American Art in Greensburg has installed a playable miniature golf course as a summer exhibition, pairing art with a family activity. - TribLive: https://triblive.com/local/westmoreland/miniature-golf-experience-is-a-hole-in-1-for-westmoreland-museum-of-american-art/ SPORTS ---------------------------------------------------------------- Pirates (46-45) Up Next · Braves @ Pirates · Tue Jul 7, 6:40 PM https://plaintextsports.com/mlb/2026-07-07/atl-pit Team USA: * Balogun Says He Had No Role in Ban Reversal Latest developments: Folarin Balogun said July 7 he played no part in the process that cleared him to face Belgium, calling the decision 'controversial.' The U.S. striker's red-card suspension was lifted before the round-of-16 loss, a reversal that set off a FIFA-UEFA feud; Balogun said he accepts the outcome but did not seek it. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49294799/folarin-balogun-red-card-ban-fifa-usa-usmnt-world-cup READING ---------------------------------------------------------------- * Stratechery -- A Script for Mark Zuckerberg Ben Thompson drafts what Meta's Mark Zuckerberg should tell investors on the next earnings call, framing how the company should justify and discipline its enormous AI spending. https://stratechery.com/2026/a-script-for-mark-zuckerberg/ * Ed Zitron -- Premium: The Hater's Guide To SoftBank Zitron dissects SoftBank's 46th annual shareholder meeting and Masayoshi Son's rambling presentation, arguing the conglomerate's AI-era pitch is more spectacle than substance. https://www.wheresyoured.at/premium-the-haters-guide-to-softbank/ * Cal Newport -- Beware of Productivity Paradoxes Newport revisits how the personal computer, once a sure bet for productivity gains, failed to deliver them cleanly, a cautionary lens for judging today's claims about AI at work. https://calnewport.com/beware-of-productivity-paradoxes/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,488.74 ▲ +1.5% Dow 52,552.63 ▲ +1.4% Nasdaq 26,005.54 ▲ +1.7% WTI crude 69.21 ▼ -3.7% EUR/USD 1.1415 ▲ +0.3% GBP/USD 1.3295 ▲ +0.7% USD/JPY 162.00 ▲ +0.2% ================================================================ Generated 2026-07-07 09:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================