daily plain-text briefing: security, markets, business, and pittsburgh
A 15-year-old Linux root flaw and a Microsoft-signed rootkit anchor a day of destructive new malware, even as Microsoft warns its own AI will surface still more Windows bugs.
Latest developments: Dark Reading detailed July 9 a cryptomining intrusion showing that AI gateways brokering model access also expose the cloud infrastructure, credentials, and IAM data behind them, the same day Microsoft told Windows users to expect more security updates as it leans on AI to find bugs in its own code.
AI gateways widen the blast radius when compromised, handing attackers models, cloud, and identity data at once. Separately, the Alan Turing Institute found GitHub Copilot approving harmful actions inside code that it refuses in chat.
Sources: Dark Reading · BleepingComputer · Help Net Security · ↑ top
Latest developments: GitHub shipped npm 12 on July 9 with install scripts disabled by default and granular access tokens deprecated, the same day Datadog Security Labs warned that attackers ride years-old dormant GitHub 'ghost' accounts and stolen OAuth tokens to enumerate corporate GitHub organizations and repositories.
The npm 12 defaults cut off a common package-install attack path, while the reconnaissance campaigns show adversaries mapping targets quietly through the GitHub API. Audit token usage and watch for anomalous scraping.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Microsoft published a July 9 dissection of GigaWiper, a destructive Windows backdoor that welds code from several older malware families into one operator-selectable platform.
GigaWiper lets an operator choose among wiping the full disk, overwriting the Windows drive, or running fake ransomware that scrambles files with a key it never saves. Microsoft shipped detection and defense guidance.
Sources: Microsoft Security Blog · The Hacker News · ↑ top
Latest developments: Symantec's Threat Hunter Team flagged GodDamn, a ransomware family first seen in the wild May 21, 2026 and assessed as a rebrand of Beast, that loads the Microsoft-signed PoisonX kernel driver to disable endpoint defenses on U.S. companies.
GodDamn uses bring-your-own-vulnerable-driver tactics, abusing a legitimately signed kernel driver to kill security software before encrypting victims. Block the vulnerable driver and monitor for BYOVD behavior.
Sources: The Hacker News · Dark Reading · ↑ top
Latest developments: SecurityWeek reported July 9 that researchers disclosed GhostLock, a 15-year-old Linux kernel privilege-escalation flaw present in every major distribution since 2011, and collected $92,000 from Google for it.
GhostLock lets any local user escalate to root across desktops, servers, and Android. Apply distribution patches as they ship.
Sources: SecurityWeek · ↑ top
Latest developments: BleepingComputer named Helix on July 9, a new data-extortion group using voice phishing, device-code phishing, and multifactor-authentication abuse to steal data from Microsoft SharePoint environments.
Helix leans on identity tricks rather than malware, phoning employees and hijacking sign-in flows to reach corporate SharePoint stores. Harden identity flows and train staff to resist vishing.
Sources: BleepingComputer · ↑ top
Latest developments: After the widened Gulf strikes, President Trump said Tehran is now seeking a deal, and Treasury yields and oil futures fell as traders bet the flare-up ends quickly.
Following the largest exchange of fire since the peace deal—including U.S. strikes on Iranian railway bridges near Mashhad, where the late supreme leader Ayatollah Ali Khamenei will be buried Thursday—markets steadied as both sides signaled openness to new negotiations over the disputed Strait of Hormuz clause that hands Iran a leading role in reopening the waterway.
Sources: WSJ Markets · WSJ World News · FT World · ↑ top
This Afternoon: Chance Showers And Thunderstorms, high 88F.
Tonight: Chance Showers And Thunderstorms, low 70F.
Friday: Chance Showers And Thunderstorms then Showers And Thunderstorms Likely, high 85F.
Latest developments: Walmart bid to convert the vacant Rite Aid in Pittsburgh's Bloomfield neighborhood into a delivery hub, and neighbors are pushing back.
Walmart wants to turn a shuttered Rite Aid in Bloomfield into a delivery hub, and residents say the site would draw delivery traffic while leaving the neighborhood without a nearby place to shop for groceries or a pharmacy.
Latest developments: Giant Eagle launched an 'On Sale This Season' program, cutting prices on more than 300 grocery staples by about 10% through the summer.
The O'Hara Township-based grocer Giant Eagle reduced prices on more than 300 everyday items across its stores, an average 10% cut aimed at summer shoppers facing higher food costs.
Latest developments: Pennsylvania's measles outbreak surpassed 100 confirmed cases and is now spreading across seven counties, the state health department reported.
The Pennsylvania Department of Health has recorded more than 100 measles cases in a growing outbreak that has reached seven counties, a public-health concern as the highly contagious virus spreads.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: One day out, PennDOT released detailed detour maps for the 376 shutdown, and Kennywood urged guests to add travel time for the 25-day closure that begins 9 p.m. Friday, July 10.
PennDOT will close the Parkway East (Interstate 376) between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit for 25 days starting 9 p.m. Friday, July 10, to slide the 11,000-ton, $95 million Commercial Street Bridge into place, diverting the 100,000 vehicles a day that use the stretch onto detour routes.
Latest developments: Allegheny County relaunched its emergency alert notification system on a new platform, and residents must enroll again to receive warnings.
Allegheny County moved its resident alert system to a new platform with added features, and officials are asking residents to sign up again to get emergency and severe-weather notifications.
Latest developments: Leetsdale is bracing for thousands of visitors Saturday, July 11, and stressing heat safety as Union Pacific's Big Boy No. 4014 makes a scheduled weekend stop.
Union Pacific's Big Boy No. 4014, the world's largest operating steam locomotive, stops in Leetsdale on Saturday, July 11, during its cross-country tour, one of its few weekend stops; officials expect large crowds and warn visitors to prepare for the heat.
Pirates (47-46)
Wed Jul 8 · Braves 3 · Pirates 0 · Final
Bart's 2-run homer helps Atlanta to 3-0 win after Braves end Pirates' combined perfect-game bid
Thu Jul 9 · Braves 6 · Pirates 5 · End 8th (in progress at last update)
Up Next · Brewers @ Pirates · Fri Jul 10, 6:40 PM
Latest developments: ESPN's 2026 edge rusher poll of executives, coaches, and scouts dropped Steelers linebacker T.J. Watt out of the top five, and the Post-Gazette weighed whether the fall is fair.
The Post-Gazette examined ESPN's ranking that placed Myles Garrett, Micah Parsons, Maxx Crosby, and Aidan Hutchinson ahead of Pittsburgh's T.J. Watt, questioning whether the Steelers standout deserved to drop from the top five.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: U.S. Soccer confirmed Thursday that Christian Pulisic suffered a microfracture and bone bruise in his lower leg during the Belgium loss and will miss several weeks.
USMNT and AC Milan forward Christian Pulisic sustained a microfracture and bone bruise in his lower leg during the World Cup round-of-16 loss to Belgium, an injury that sidelines him for several weeks.
Sources: ESPN Soccer · ↑ top
Latest developments: American forward Cole Campbell is transferring from Borussia Dortmund to Bundesliga newcomer SV Elversberg, ESPN reported.
Cole Campbell, a young United States forward, is leaving Borussia Dortmund to join newly promoted SV Elversberg in Germany's Bundesliga.
Sources: ESPN Soccer · ↑ top
Latest developments: U.S. officials have opened talks with FIFA about hosting the 2029 Club World Cup, seeking to build on the 2026 World Cup, the Guardian reported.
The United States has told FIFA it is interested in staging the 2029 Club World Cup, capitalizing on the commercial and sporting momentum of co-hosting the 2026 World Cup, though it has yet to commit to a formal bid.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,498.09 ▲ +1.3% Dow 52,706.95 ▲ +1.3% Nasdaq 25,936.64 ▲ +1.2% WTI crude 69.96 ▼ -0.6% EUR/USD 1.1417 ▲ +0.3% GBP/USD 1.3344 ▲ +1.0% USD/JPY 161.98 = -0.0%