daily plain-text briefing: security, markets, business, and pittsburgh
Accenture confirmed a source-code breach as auth-bypass backdoors surfaced in BeyondTrust and Tenda gear and governments moved to answer machine-speed attacks with AI defense.
Latest developments: BeyondTrust warned July 7 of two critical pre-authentication bypass flaws—CVE-2026-40138 rates 9.2—in its Remote Support and Privileged Remote Access products, the same day CERT/CC disclosed an undocumented admin backdoor, CVE-2026-11405, embedded in multiple Tenda router firmware versions.
Both defects let unauthenticated attackers seize control: the BeyondTrust flaws hand over remote-access appliances, while the Tenda backdoor grants administrative access to the router's web management panel. Patch BeyondTrust immediately; Tenda owners have no fix yet and should restrict management-interface exposure.
Sources: The Hacker News · BleepingComputer · The Hacker News · BleepingComputer · ↑ top
Latest developments: Spain's National Police arrested a suspected member of the pro-Russian hacktivist groups CyberArmy of Russia Reborn and Z-Pentest, Dutch police jailed two young men running a credit-card phishing operation as the Netherlands drew Europe's worst payment-fraud ranking, and an unsealed U.S. complaint showed the FBI traced alleged Scattered Spider member Peter Stokes, 19, through a persistent Windows device ID tied to a May 2025 jewelry-retailer intrusion.
The three actions span hacktivism, financial fraud, and extortion, and the Stokes complaint shows Microsoft device records anchoring the identification. Together they mark a week of law-enforcement pressure on distinct criminal tiers.
Sources: BleepingComputer · Graham Cluley · The Hacker News · ↑ top
Latest developments: Britain's National Cyber Security Centre unveiled plans July 7 for an autonomous AI 'Cyber Shield' to counter attackers moving at machine speed and greater scale, as SecurityWeek reported CISA's Attack Surface Evaluation team is running Anthropic's Mythos model to scan federal software for flaws.
The NCSC pitches Cyber Shield as automated defense that detects and responds faster than human operators can, while CISA uses Mythos to hunt vulnerabilities in government code. Both moves answer the collapsing window between disclosure and exploitation.
Sources: The Record · SecurityWeek · ↑ top
Latest developments: Accenture confirmed July 7 that it suffered a breach after a threat actor put 35 GB of stolen source code and other data up for sale.
Accenture, the global information-technology services firm, acknowledged the intrusion once the attacker advertised the haul; the company has not said how the data left its systems or which clients the code touches. Organizations relying on Accenture-built software should watch for follow-on supply-chain risk.
Sources: BleepingComputer · ↑ top
Latest developments: A suspected China-aligned cluster exploited patched Roundcube webmail flaws, chiefly CVE-2024-42009 rated 9.3, to steal credentials from physics and engineering departments at U.S. and Canadian universities.
Roundcube is a widely deployed open-source email client; the attackers siphoned login credentials from academic research departments, a target set consistent with technology-focused espionage. Universities running Roundcube should confirm they applied the fixes and rotate exposed credentials.
Sources: The Hacker News · ↑ top
Latest developments: Sand Security's research team disclosed WriteOut, a now-patched one-click session-isolation flaw in the Writer enterprise generative-AI platform that let an outsider hijack any customer's AI agents across tenants.
The bug leaked session tokens through agent previews, letting an attacker jump from no access to full control of another organization's Writer workspace. Writer has fixed it; the case adds to a run of cross-tenant leaks in bolted-on enterprise AI.
Sources: The Hacker News · ↑ top
Latest developments: The United States launched a new wave of military strikes on Iranian targets early Wednesday, escalating past Monday's revocation of Iran's oil-sales waiver.
The U.S. military hit Iranian targets after missiles struck three merchant ships, including Qatari and Saudi vessels, off Oman near the Strait of Hormuz, and the Trump administration canceled Iran's license to sell oil, driving crude futures sharply higher and threatening the peace deal that ended the U.S.-Iran war.
Sources: Financial Times · Wall Street Journal · Wall Street Journal · ↑ top
Latest developments: U.S. stocks dropped Tuesday as Samsung Electronics' underwhelming earnings and the Strait of Hormuz strikes drove investors out of artificial-intelligence shares.
Investors fled volatile AI-linked investments after Samsung Electronics reported record quarterly profit that failed to reassure the market, pushing SpaceX below its Nasdaq-100 debut price, while Treasury yields and oil futures rose on U.S.-Iran tensions.
Sources: Wall Street Journal · Wall Street Journal · ↑ top
Tonight: Mostly Cloudy then Areas Of Fog, low 68F.
Wednesday: Areas Of Fog then Slight Chance Showers And Thunderstorms, high 89F.
Wednesday Night: Chance Showers And Thunderstorms, low 70F.
Latest developments: Curtiss-Wright announced an $80 million expansion of its Harmar campus that will create as many as 150 jobs.
Global manufacturer Curtiss-Wright will pour $80 million into its campus in Harmar Township, Allegheny County, adding up to 150 new jobs.
Latest developments: The Pennsylvania Turnpike Commission approved a 3.5% toll increase taking effect in January, its smallest annual hike since 2014.
The Pennsylvania Turnpike Commission voted to raise tolls 3.5% starting in January, the lowest increase in the dozen years since 2014.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The rush of proposed data centers has turned into a flashpoint in Pennsylvania's governor's race, with Republican Stacy Garrity treading carefully as she campaigns against Governor Josh Shapiro.
A wave of proposed data centers across southwestern Pennsylvania has split residents and developers over grid strain, noise, and rising electric bills, and now divides the 2026 governor's race between Treasurer Stacy Garrity and Governor Josh Shapiro, with lawmakers weighing whether to make the companies pay for their extra energy use.
Sources: Pittsburgh Post-Gazette · TribLive · ↑ top
Latest developments: More than three years after the derailment, Norfolk Southern's $600 million class-action settlement began paying out, and some East Palestine residents say the varying check amounts feel unjust.
The $600 million class-action settlement over the February 2023 Norfolk Southern derailment in East Palestine, which dumped vinyl chloride and other toxic chemicals, started paying claimants, though residents dispute why payouts differ so widely.
Latest developments: With roughly three dozen Allegheny County home deeds fraudulently transferred into an LLC's name, the district attorney is investigating and property experts are offering protection tips.
The Allegheny County District Attorney is investigating after about 35 homes had their deeds fraudulently placed into an LLC's name, and experts urge owners to monitor property records regularly to guard against the scheme.
Latest developments: Four days before the 25-day Parkway East closure, PennDOT crews are removing construction material and coordinating traffic signals to keep detour routes flowing.
PennDOT will close the Parkway East between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit for 25 days starting July 10 to replace the aging Commercial Street Bridge, and crews are now clearing obstacles from detour routes reaching into Westmoreland County.
Pirates (46-45)
Tue Jul 7 · Braves 2 · Pirates 11 · Bot 8th (in progress at last update)
Up Next · Braves @ Pirates · Wed Jul 8, 6:40 PM
Latest developments: Pirates right-hander Braxton Ashcraft made the National League All-Star team as a replacement, days after the club said it felt snubbed when Paul Skenes was its lone pick.
Pittsburgh's Braxton Ashcraft, in his second major league season, earned a first-time All-Star selection, likely stepping in for teammate Paul Skenes on the National League roster.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: On the July 7 SNR Drive, Matt Williamson and Wes Uhler broke down ESPN's Jeremy Fowler ranking of the NFL's top cornerbacks for 2026 and debated the best teams never to win a Super Bowl.
The Steelers' team show SNR Drive, hosted by Matt Williamson and Wes Uhler, walked through Jeremy Fowler's 2026 cornerback rankings and ran a bracket-style debate on the best NFL teams never to hoist a Super Bowl trophy.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: A Post-Gazette video weighed whether Steelers quarterback Aaron Rodgers can join Tom Brady and Peyton Manning as passers who won a Super Bowl late in their careers.
The Post-Gazette asked whether veteran Aaron Rodgers, now leading the Steelers, can follow the late-career championship paths of Tom Brady and Peyton Manning.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: In the wake of the round-of-16 loss to Belgium in Seattle, ESPN, the Guardian, and TribLive framed the exit as the U.S. men's team squandering the biggest opportunity in American soccer history.
The United States men's national team, coached by Mauricio Pochettino, exited its home World Cup with a round-of-16 loss to Belgium in Seattle, and analysts argued the team wasted a favorable draw and healthy roster to again fall at the same stage.
Sources: ESPN Soccer · The Guardian · ↑ top
Latest developments: The U.S. run through its home World Cup drove record soccer betting handle, and American sportsbooks profited when the team lost to Belgium.
The United States' World Cup campaign produced record soccer wagering at American sportsbooks, which turned a handsome profit once the round-of-16 loss to Belgium cashed bets against the home side, a match 42 million U.S. viewers watched.
Sources: ESPN Soccer · ↑ top
S&P 500 7,501.42 ▲ +1.7% Dow 52,701.11 ▲ +1.5% Nasdaq 26,005.25 ▲ +1.9% WTI crude 69.21 ▼ -3.7% EUR/USD 1.1419 ▲ +0.3% GBP/USD 1.3324 ▲ +0.9% USD/JPY 162.03 ▲ +0.2%