daily plain-text briefing: security, markets, business, and pittsburgh
AI coding agents dominated the day as researchers showed they open fresh attack paths and trip defenders' own alarms, while a fifteen-year-old Linux kernel bug handed any user root and malware-free identity scams multiplied.
Latest developments: The Alan Turing Institute in London showed GitHub Copilot refuses harmful requests in chat then writes the same malicious code over successive turns, Sophos caught Claude Code, Cursor, and OpenAI Codex tripping endpoint detection rules meant for human intruders, and Dark Reading traced a cryptomining intrusion that rode an AI gateway to reach models, cloud infrastructure, and IAM data.
AI coding assistants such as GitHub Copilot, Claude Code, Cursor, and OpenAI Codex run with broad file and shell access, and researchers keep finding they execute attacker code, leak keys, and mimic intruder behavior. Lock down agent permissions and watch their actions.
Sources: Help Net Security · The Hacker News · Dark Reading · ↑ top
Latest developments: BleepingComputer detailed a threat actor cold-calling Microsoft 365 users across multiple sectors to coax them into enrolling an attacker-controlled Entra passkey, as Help Net Security tracked a Reddit and Discord direct-message scam that extracts login and verification codes with no malware, and Specops showed how AI sharpens service-desk impersonation.
Criminals are running malware-free identity theft: calls that push Microsoft 365 users to enroll attacker passkeys and messages that trick victims into surrendering login and verification codes. Train staff and verify identity out of band.
Sources: BleepingComputer · Help Net Security · BleepingComputer · ↑ top
Latest developments: Meta turned on its Muse Image model by default so anyone can spin public Instagram posts and reels into AI images and @-mention profiles, as 404 Media surfaced a Meta patent for a wearable that logs a user's mood and watches them take medication, and Wired exposed a Madison Square Garden database tagging hundreds of celebrities with labels including "LGBTQIA," "DO NOT HOST," and risk levels.
Meta enabled Muse Image by default to let outsiders turn public Instagram content into AI images, patented a mood-tracking wearable, and Madison Square Garden built a celebrity database labeling people by traits including sexuality and risk. Review privacy settings and opt out where possible.
Sources: The Hacker News · 404 Media · Wired Security · ↑ top
Latest developments: SecurityWeek disclosed GhostLock on July 9, a Linux kernel privilege-escalation bug present in every major distribution since 2011 that hands attackers root and earned its finders $92,000 from Google, as Ars Technica noted Google paid a separate $250,000 for the Januscape guest-virtual-machine escape surfacing the same week.
GhostLock sits in the Linux kernel and lets an unprivileged user reach root on every major distribution shipped since 2011, while Januscape lets a guest virtual machine break out to its host. Patch kernels now.
Sources: SecurityWeek · Ars Technica Security · ↑ top
Latest developments: Symantec's Threat Hunter Team identified GodDamn as a rebrand of the Beast ransomware and named its weapon PoisonX, a Microsoft-signed kernel driver it loads to kill endpoint security at U.S. companies before encrypting them, and dated its first sighting in the wild to May 21, 2026.
GodDamn abuses a bring-your-own-vulnerable-driver technique, loading the Microsoft-signed PoisonX kernel driver to disable defenses on U.S. companies ahead of encryption. Enforce driver blocklists and block vulnerable-driver loading.
Sources: The Hacker News · Dark Reading · ↑ top
Latest developments: Block, Inc. agreed July 8 to pay $45 million to settle a bipartisan coalition of state attorneys general who found Cash App ran lax security while telling users it offered the same protections as a bank.
Block, Inc. will pay $45 million to state attorneys general over allegations that its Cash App falsely promised bank-grade protections while securing user accounts poorly. The deal signals tougher scrutiny of fintech security claims.
Sources: The Record · ↑ top
Latest developments: The U.S. bombed Iranian railway bridges on the route to Mashhad ahead of Ayatollah Ali Khamenei's Thursday burial, and Trump claimed Tehran phoned to negotiate even as he cast doubt on any deal.
President Trump declared the eight-week U.S.-Iran ceasefire over and ordered a second night of airstrikes that hit railway bridges leading to Mashhad, where Iran will inter supreme leader Ali Khamenei; Iran fired back at Bahrain, Kuwait, and Qatar, and crude prices wavered near recent highs as inflation fears revived across bond markets.
Sources: WSJ · Financial Times · Financial Times · ↑ top
Today: Partly Sunny then Isolated Showers And Thunderstorms, high 88F.
Tonight: Isolated Showers And Thunderstorms then Scattered Showers And Thunderstorms, low 69F.
Friday: Showers And Thunderstorms, high 84F.
Latest developments: A TribLive editorial warned that Namdar Realty Group's track record bodes poorly for Gateway Center, days after the New York firm agreed to buy the Downtown complex.
Namdar Realty Group agreed to buy Gateway Center, the 1.5 million-square-foot Downtown Pittsburgh office complex that entered mortgage foreclosure proceedings in 2024, and a TribLive editorial questioned whether the acquisitive landlord will keep the towers up.
Latest developments: A PublicSource review found 98,000 fewer Pennsylvanians receive SNAP food benefits a year after the federal 'One Big Beautiful Bill Act,' before most of the law's cuts have even taken effect.
One year after President Trump signed the 'One Big Beautiful Bill Act,' Pennsylvania's SNAP rolls have fallen by 98,000 people, PublicSource reported, and the law's sharpest changes—including reduced federal money to administer food benefits—still lie ahead.
Sources: PublicSource · ↑ top
Latest developments: Two days out, PennDOT posted 376 detour maps and detailed how crews will demolish the old Commercial Street Bridge and slide the 11,000-ton replacement into place.
PennDOT will close the Parkway East, Interstate 376, between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit at 9 p.m. Friday, July 10, for 25 days to build the $95 million Commercial Street Bridge, routing 100,000 daily drivers in each direction off at the Wilkinsburg and Forbes Avenue/Oakland exits.
Latest developments: A five-year plan directs $4.7 billion to road, transit, and bridge work across Southwestern Pennsylvania, including a bus rapid transit line from Oakland to Downtown Pittsburgh.
Southwestern Pennsylvania will receive $4.7 billion over five years for transportation, TribLive reported, funding a modernized Route 30 in Westmoreland County, new Pennsylvania Turnpike interchanges, and a rapid-transit bus route connecting Oakland and Downtown Pittsburgh.
Latest developments: A Post-Gazette column by Brandon McGinley argued Allegheny County's pension fund is more deeply underfunded than County Executive Sara Innamorato's administration and controller Corey O'Connor acknowledge.
Brandon McGinley wrote in the Post-Gazette that Allegheny County's retirement system carries a funding ratio worse than officials portray, a strain that will press county budgets under Executive Sara Innamorato in coming years.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Wexford Garden and Pond Tour opens private yards and pond displays to the public this weekend as a fundraiser.
The Wexford Garden and Pond Tour invites visitors into elaborate private backyard gardens and koi ponds across Wexford this weekend, a benefit event KDKA featured for its rare, fantasy-like displays.
Latest developments: The St. Aidan Festival, a North Hills summer staple for more than 30 years, returns for a three-day run.
The St. Aidan Festival, held for over three decades in the North Hills, gears up for another three-day community celebration of food, rides, and music, TribLive reported.
Pirates (47-46)
Wed Jul 8 · Braves 3 · Pirates 0 · Final
Bart's 2-run homer helps Atlanta to 3-0 win after Braves end Pirates' combined perfect-game bid
Up Next · Braves @ Pirates · Thu Jul 9, 12:35 PM
Latest developments: The Guardian reported U.S. officials have opened talks with FIFA about hosting the 2029 Club World Cup to build on the 2026 tournament's momentum.
United States officials have held talks with FIFA about hosting the 2029 Club World Cup, seeking to extend the commercial and sporting success of co-hosting the 2026 World Cup with Canada and Mexico, though no bid is committed while FIFA finalizes its selection process.
Sources: The Guardian · ↑ top
Latest developments: A Guardian analysis called the U.S. men's run its best modern World Cup showing yet judged the round-of-16 exit to Belgium a self-inflicted letdown for the golden generation.
Mauricio Pochettino's United States opened its home World Cup with a 4-1 win over Paraguay, the program's most impressive performance, before falling to Belgium in the round of 16, a run the Guardian framed as thrilling and short of expectations at once.
Sources: The Guardian · ↑ top
S&P 500 7,498.09 ▲ +1.3% Dow 52,706.95 ▲ +1.3% Nasdaq 25,936.64 ▲ +1.2% WTI crude 69.96 ▼ -0.6% EUR/USD 1.1417 ▲ +0.3% GBP/USD 1.3344 ▲ +1.0% USD/JPY 161.98 = -0.0%