================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, July 9, 2026 - 12:07 PM EDT ================================================================ Researchers weaponized the autonomous AI coding agents developers rely on as Microsoft patched a Defender zero-day and breaches at KDDI and AssuranceAmerica exposed nearly 19 million people. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Wiz's GhostApproval disclosure shows symlink flaws that let a booby-trapped repository hijack developers relying on AI coding assistants like Claude Code, Cursor, and Amazon Q. see: AI Coding Agents Weaponized Against Their Users * [TREND] Attackers keep hammering Microsoft 365 with the Forg365 phishing-as-a-service platform, blending adversary-in-the-middle, device-code tricks, and AI-generated lures to steal accounts. see: Phishing and Vishing Besiege Microsoft 365 * [UPDATE (new)] Fresh breaches hit Japan's telecom KDDI, exposing 12 million people via a third-party zero-day, alongside insurer AssuranceAmerica's 6.9 million drivers. see: Breaches Strike KDDI, AssuranceAmerica, and Mount Royal * [UPDATE (new)] Microsoft patched the RoguePlanet Defender zero-day CVE-2026-50656 nearly a month after its details went public following June Patch Tuesday. see: Microsoft Patches RoguePlanet Defender Zero-Day * [TREND] Enforcement and regulation moved together as Interpol's sweep netted 5,811 fraud arrests while the EU hauled Ireland, Spain, France, and the Netherlands to court over NIS2 delays. see: Interpol Sweep Nets 5,811 Fraud Arrests; EU Confronts NIS2 Delays and Chat Control * [UPDATE (updated)] Energy markets brace as Iran widens strikes across the Gulf and Russia's diesel cutoff, driven by Ukrainian drone hits on refineries, threatens global supply. see: U.S. and Iran Widen Strikes to the Gulf; Russia's Diesel Cutoff Threatens Global Supply SECURITY ---------------------------------------------------------------- 1. AI CODING AGENTS WEAPONIZED AGAINST THEIR USERS AI Security · [ai, supply-chain, zero-day] Latest developments: Wiz disclosed GhostApproval on July 9, symlink flaws in six AI coding assistants—Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf—that redirect an approved file write onto a sensitive file to seize a developer's machine, as the AI Now Institute published Friendly Fire, which tricks Claude Code and OpenAI Codex into running an attacker's code, and Help Net Security showed malicious agent skills slipping past every scanner tested. Agent skills are bundles of instructions and scripts that tools like Claude Code and Codex load from public marketplaces, and the new attacks show a rigged project or skill can hijack the machine running the agent. Developers should restrict autonomous approval modes and vet third-party skills as strictly as npm or PyPI packages. - SecurityWeek: https://www.securityweek.com/ai-coding-tools-tricked-into-hacking-developer-machine-via-decades-old-technique/ - The Hacker News: https://thehackernews.com/2026/07/ghostapproval-symlink-flaws-could-let.html - The Hacker News: https://thehackernews.com/2026/07/friendly-fire-ai-agents-built-to-catch.html - Help Net Security: https://www.helpnetsecurity.com/2026/07/09/malicious-ai-agent-skills-scan/ 2. MICROSOFT PATCHES ROGUEPLANET DEFENDER ZERO-DAY Vulnerabilities and Exploits · [patch, zero-day, privilege-escalation] Latest developments: Microsoft shipped a Malware Protection Engine update on July 9 fixing CVE-2026-50656, the RoguePlanet privilege-escalation flaw, nearly a month after its details went public following June Patch Tuesday. The bug, an improper link resolution in mpengine.dll rated CVSS 7.8, lets an authenticated attacker on Windows 10 and Windows 11 reach SYSTEM privileges. The fix arrives through the antivirus engine's automatic update channel. - Help Net Security: https://www.helpnetsecurity.com/2026/07/09/microsoft-releases-fix-for-rogueplanet-defender-flaw-cve-2026-50656/ - SecurityWeek: https://www.securityweek.com/microsoft-patches-defender-rogueplanet-vulnerability/ - The Hacker News: https://thehackernews.com/2026/07/microsoft-patches-rogueplanet-defender.html - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-rogueplanet-defender-zero-day-vulnerability/ 3. BREACHES STRIKE KDDI, ASSURANCEAMERICA, AND MOUNT ROYAL Data Breaches · [breach, ransomware] Latest developments: Japanese telecom KDDI disclosed July 9 that attackers exploited a zero-day in a third-party system to reach an ISP email platform and expose 12 million people, the same day American insurer AssuranceAmerica confirmed a breach hitting 6.9 million drivers and Mount Royal University in Calgary confirmed hackers stole and then deleted two drives of employee, student, and university data. Three unrelated intrusions surfaced together, ranging from a telecom supply-chain zero-day to a ransomware crew that wiped a university's file storage. Affected customers and staff should watch for identity theft and fraud tied to the exposed records. - SecurityWeek: https://www.securityweek.com/12-million-impacted-by-data-breach-at-japanese-telco-kddi/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/assuranceamerica-data-breach-exposes-records-of-69-million-drivers/ - SecurityWeek: https://www.securityweek.com/mount-royal-university-confirms-data-stolen-in-ransomware-attack/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/mount-royal-university-confirms-breach-as-hackers-claim-attack/ 4. PHISHING AND VISHING BESIEGE MICROSOFT 365 Ransomware and Cybercrime · [phishing, vishing, credential-theft] Latest developments: BleepingComputer detailed Forg365 on July 9, a phishing-as-a-service platform that blends adversary-in-the-middle and device-code methods with AI-generated lures to steal Microsoft 365 accounts, as Help Net Security named the Pink extortion crew, which cold-calls employees posing as IT and walks them through a fake Entra passkey enrollment to seize their accounts. Both operations chase Microsoft 365 logins, one through an automated phishing kit and the other through voice calls that keep victims busy while attackers finish the takeover. Organizations should train staff to distrust unsolicited passkey and login-code prompts. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-forg365-phishing-platform-uses-ai-to-target-microsoft-365-accounts/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/09/microsoft-365-fake-passkey-setup-enrollment/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/entra-passkey-enrollment-vishing-targets-microsoft-365-users/ 5. INTERPOL SWEEP NETS 5,811 FRAUD ARRESTS Ransomware and Cybercrime · [fraud, law-enforcement, social-engineering] Latest developments: Interpol wrapped Operation First Light 2026, a four-month campaign across 97 countries that arrested 5,811 suspects and seized $293 million tied to social-engineering scams and the money laundering that moves their proceeds. The operation targeted criminals posing as police officers, romantic partners, and business suppliers to defraud victims across continents. It marks one of the largest coordinated anti-fraud enforcement pushes to date. - Help Net Security: https://www.helpnetsecurity.com/2026/07/09/interpol-fraud-bust-social-engineering-scams/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/police-arrests-5-800-suspects-in-global-anti-fraud-crackdown/ 6. EU CONFRONTS NIS2 DELAYS AND CHAT CONTROL Policy and Regulation · [policy, regulation, privacy] Latest developments: The European Commission on July 9 took Ireland, Spain, France, and the Netherlands to court for running more than 20 months late transposing the NIS2 Directive on critical-infrastructure cybersecurity, as Wired reported the Chat Control bill will let companies scan citizens' texts, emails, and social posts for child-abuse material despite a majority of European lawmakers voting against it. Brussels is squeezing member states to enforce baseline cyber rules while advancing a message-scanning mandate that privacy advocates and many lawmakers oppose. Both moves reshape obligations for operators and platforms across the bloc. - The Record: https://therecord.media/eu-cyber-filing-ireland-spain-france-netherlands-nis2 - Wired Security: https://www.wired.com/story/a-majority-of-european-lawmakers-voted-against-letting-big-tech-read-our-messages-theyre-going-to-anyway/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. and Iran Widen Strikes to the Gulf Latest developments: Iran answered the second night of U.S. airstrikes by targeting Bahrain, Kuwait, and Qatar, threatening the interim deal that ended the war, while oil futures turned lower as traders bet the renewed fighting ends quickly. President Trump declared the ceasefire over and ordered fresh strikes on Iran, the largest escalation since the U.S.-Israel-Iran peace deal; Tehran retaliated against U.S. Gulf allies Bahrain, Kuwait, and Qatar, and global markets steadied after the initial shock. - WSJ: https://www.wsj.com/world/middle-east/u-s-launches-new-strikes-on-iran-after-trump-declares-ceasefire-over-2c0738fe - WSJ: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-concerns-over-supply-disruption-in-middle-east-35f6787b?mod=rss_markets_main * Russia's Diesel Cutoff Threatens Global Supply Latest developments: The Financial Times reported Russia has curbed diesel exports after sustained Ukrainian drone strikes on its refineries, tipping the world toward a diesel supply crunch that now spills beyond Russia's borders. Ukraine's escalating drone campaign against Russian refineries has forced Moscow to cut off diesel exports, squeezing global supply and lifting fuel costs from Europe to the United States as PepsiCo and other consumer firms warn of renewed inflationary pressure. - FT: https://www.ft.com/content/48959ee1-ccb9-48dc-8d85-1422a63ec234 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Isolated Showers And Thunderstorms, high 88F. Tonight: Isolated Showers And Thunderstorms then Scattered Showers And Thunderstorms, low 69F. Friday: Showers And Thunderstorms, high 84F. Business: * Wegmans Breaks Ground in Cranberry Latest developments: Wegmans told KDKA it will begin foundation work in July on its first Pittsburgh-area store. Wegmans will start building its first store in the Pittsburgh region this month, on Cool Springs Drive in Cranberry Township near the Penguins' practice facility, after buying the land earlier this year. - KDKA: https://www.cbsnews.com/pittsburgh/news/wegmans-pittsburgh-area-construction-cranberry-begins-this-month/ * PNC Launches AI-Enabled Banking App Latest developments: PNC launched its rebuilt mobile banking app with artificial-intelligence features on July 7 and began a phased rollout to customers. PNC Financial Services Group released a redesigned mobile banking app carrying new AI capabilities, spreading the release across its customer base through the end of summer. - WPXI: https://www.wpxi.com/news/local/pnc-rolls-out-redesigned-mobile-banking-app-featuring-ai-capabilities/Y44NQELGJZFLFJ5D7G2F4QNYBU/ * Oakland Student Housing on Craig Street Latest developments: New York developer Camp Eight Capital advanced its plan to replace a former Carnegie Mellon University building at 143 Craig Street with a seven-story, 155-unit student housing project. Camp Eight Capital is moving forward to tear down a small former CMU administrative building on Craig Street in Oakland and put up 155 units of student housing across seven stories. - WPXI: https://www.wpxi.com/news/local/new-york-developer-next-up-pursue-new-apartment-project-craig-street-oakland/MWKWOO2VKJBY7D5L7UV3TRL76Y/ Around town: * Parkway East Closes Friday Night Latest developments: One day out, PennDOT launched a website posting live drive times for the 376 detours and detailed how Oakland-bound traffic should navigate the 25-day shutdown that begins 9 p.m. Friday, July 10. PennDOT will close Interstate 376, the Parkway East, between the Squirrel Hill Tunnel and the Edgewood/Swissvale interchange for 25 days to demolish and replace the aging Commercial Street Bridge, pushing roughly 100,000 daily drivers in each direction onto detours through Wilkinsburg and Oakland. - WTAE: https://www.wtae.com/article/parkway-east-closure-oakland-detour/71883397 - KDKA: https://www.cbsnews.com/pittsburgh/news/penndot-parkway-east-closure-specialized-website-drive-times/ * Dozens of School Districts Raise Taxes Latest developments: A Post-Gazette review found dozens of Allegheny County school districts are raising property taxes for the coming year. Dozens of Allegheny County school districts have voted to lift property taxes, adding another cost to homeowners already stretched by rising bills. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/07/09/allegheny-county-school-district-taxes/stories/202607090025 * Kennedy Township Fights Park Land Sale Latest developments: Kennedy Township residents hired a lawyer and gathered more than 1,000 signatures to challenge the proposed sale of undeveloped land at Fairhaven Park. Residents in Kennedy Township are organizing against the potential sale of open land at Fairhaven Park, backing their opposition with a petition topping 1,000 names and legal counsel. - WTAE: https://www.wtae.com/article/kennedy-township-residents-push-https-wtae-edit-htvapps-net-en-content-edit-66854492-62c4-4ef7-80b2-7e896e3ad30a-back-against-proposed-fairhaven-park-land-sale/71876146 Events: * Northside Music Festival Latest developments: The fourth annual Northside Music Festival plays across Pittsburgh's North Side this weekend, July 9 through 12. The fourth annual Northside Music Festival takes over Pittsburgh's North Side from Thursday through Sunday, July 9-12, one of two July music festivals NEXTpittsburgh highlights in its summer concert guide alongside the brand-new Pittsburgh Music Festival. - NEXTpittsburgh: https://nextpittsburgh.com/events/14-things-to-do-this-weekend-from-the-pittsburgh-vintage-grand-prix/ - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/recreation/2026/07/09/things-to-do-this-weekend-pittsburgh-6/stories/202607070055 * Pittsburgh Vintage Grand Prix Latest developments: The Pittsburgh Vintage Grand Prix, the region's vintage-car racing and show weekend, headlines the July 9-12 calendar. The Pittsburgh Vintage Grand Prix runs Thursday through Sunday, July 9-12, drawing collector and race cars for one of the city's marquee summer weekends. - NEXTpittsburgh: https://nextpittsburgh.com/events/14-things-to-do-this-weekend-from-the-pittsburgh-vintage-grand-prix/ * Big Boy 4014 Rolls Into Leetsdale Latest developments: Union Pacific's historic Big Boy No. 4014 steam locomotive is arriving in Leetsdale, and WTAE published a guide on where to watch, park, and safely see the stop. Union Pacific's Big Boy No. 4014, the world's largest operating steam locomotive, is making a stop in Leetsdale, drawing rail fans who will need to plan viewing and parking around the visit. - WTAE: https://www.wtae.com/article/big-boy-4014-leetsdale-parking-information/71883933 SPORTS ---------------------------------------------------------------- Pirates (47-46) Wed Jul 8 · Braves 3 · Pirates 0 · Final Bart's 2-run homer helps Atlanta to 3-0 win after Braves end Pirates' combined perfect-game bid https://plaintextsports.com/mlb/2026-07-08/atl-pit Up Next · Braves @ Pirates · Thu Jul 9, 12:35 PM https://plaintextsports.com/mlb/2026-07-09/atl-pit Around the Teams: * Rod Woodson on 'Not Just Football' Latest developments: Pro Football Hall of Famer Rod Woodson joined Cam Heyward's 'Not Just Football' podcast to tell untold stories from his 17-year NFL career. Former Steelers cornerback Rod Woodson sat down with Steelers captain Cam Heyward on the 'Not Just Football' podcast for a deep dive into his career, including a stretch when coach Bill Cowher trusted his Hall of Fame instincts. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=pSO2ujESg2M * Pirates Weigh Another Prep Pick at No. 5 Latest developments: A Post-Gazette draft preview by Kevan Graves asked whether the Pirates use the No. 5 overall pick on another high schooler. With the MLB Draft approaching, the Post-Gazette laid out the Pirates' options at No. 5 overall and weighed whether the club leans again toward a high school prospect. - Pittsburgh Post-Gazette: https://www.post-gazette.com/sports/pirates/2026/07/08/mlb-draft-preview-pirates-kevan-graves/stories/202607070029 Team USA: * Pulisic Out Weeks With Leg Injury Latest developments: ESPN reported Christian Pulisic sustained a bone bruise and microfracture in his lower leg during the World Cup loss to Belgium and will miss several weeks. United States and AC Milan attacker Christian Pulisic hurt his lower leg in the round-of-16 exit, an injury that sidelines the American captain for weeks heading into his club season. - ESPN: https://www.espn.com/soccer/story/_/id/49315041/usa-christian-pulisic-suffered-microfracture-belgium-sources * Cherundolo to Coach U.S. at 2028 Olympics Latest developments: The U.S. Soccer Federation named Steve Cherundolo manager of the U.S. under-23 team for the 2028 Summer Olympics in Los Angeles. U.S. Soccer tapped former U.S. international and MLS Cup-winning coach Steve Cherundolo to lead the under-23 national team that will represent the country at the 2028 Los Angeles Games. - ESPN: https://www.espn.com/soccer/story/_/id/49314430/steve-cherundolo-manager-us-u23s-2028-la-olympics READING ---------------------------------------------------------------- * Stratechery -- Muse Image, Grok 4.5, Alex Karp on CNBC Ben Thompson argues the race for verifiable data increasingly defines AI competition, drawing the thread through Google's Muse Image, xAI's Grok 4.5, and Palantir chief Alex Karp's CNBC appearance. https://stratechery.com/2026/muse-image-grok-4-5-alex-karp-on-cnbc/ * Ed Zitron -- Let AI Burn Zitron contends the AI industry's mounting losses should be allowed to play out rather than propped up, extending his case that the boom rests on economically unsustainable footing. https://www.wheresyoured.at/let-ai-burn/ * Cal Newport -- Beware of Productivity Paradoxes Newport warns that new technologies often fail to deliver their promised productivity gains, using the personal computer's spreadsheets, word processors, and email as a cautionary example for today's AI tools. https://calnewport.com/beware-of-productivity-paradoxes/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,498.09 ▲ +1.3% Dow 52,706.95 ▲ +1.3% Nasdaq 25,936.64 ▲ +1.2% WTI crude 69.96 ▼ -0.6% EUR/USD 1.1417 ▲ +0.3% GBP/USD 1.3344 ▲ +1.0% USD/JPY 161.98 = -0.0% ================================================================ Generated 2026-07-09 12:07 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================