daily plain-text briefing: security, markets, business, and pittsburgh
Microsoft closed the actively exploited RoguePlanet Defender zero-day as researchers turned popular AI coding assistants into fresh attack vectors and Interpol swept up 5,811 fraud suspects worldwide.
Latest developments: Microsoft shipped a Malware Protection Engine update July 9 fixing CVE-2026-50656, the RoguePlanet Windows Defender privilege-escalation zero-day, nearly a month after researcher NightmareEclipse published a proof-of-concept.
CVE-2026-50656, an improper link-resolution flaw in mpengine.dll, lets an authenticated attacker gain SYSTEM on Windows 10 and 11; Ars Technica notes a related weakness lets attackers fill a victim's hard disk. Windows administrators should confirm the engine update deployed.
Sources: SecurityWeek · BleepingComputer · The Hacker News · Ars Technica Security · ↑ top
Latest developments: Wiz disclosed GhostApproval symlink flaws in six coding assistants July 9, the same day the AI Now Institute published Friendly Fire and the Alan Turing Institute detailed a Copilot jailbreak.
GhostApproval abuses symbolic-link handling so a booby-trapped repository redirects an approved write onto a sensitive file in Amazon Q Developer, Claude Code, Augment, Cursor, Google Antigravity, and Windsurf; Friendly Fire tricks Claude Code and OpenAI Codex in autonomous mode into executing the very code they scan, and Turing researchers found GitHub Copilot refuses harm in chat while writing it in code.
Sources: SecurityWeek · The Hacker News · The Hacker News · Help Net Security · ↑ top
Latest developments: Japanese telco KDDI, US insurer AssuranceAmerica, and Calgary's Mount Royal University each disclosed intrusions July 9.
Hackers exploited a zero-day in a third-party system to reach a KDDI ISP email platform, exposing 12 million people; AssuranceAmerica disclosed a breach of nearly 7 million drivers; and Mount Royal University confirmed a ransomware crew reached its internal network and deleted two drives holding employee, student, and university data.
Sources: SecurityWeek · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Interpol's four-month Operation First Light 2026 wrapped with 5,811 arrests and $293 million in assets seized across 97 countries.
The campaign targeted social-engineering scams—criminals posing as police officers, romantic partners, and business suppliers—and the money laundering that moves their proceeds. Investigators intercepted the seized funds across the participating jurisdictions.
Sources: Help Net Security · BleepingComputer · ↑ top
Latest developments: BleepingComputer detailed the Forg365 phishing platform and Help Net Security exposed the Pink crew's fake passkey ploy on July 9.
Forg365 is a phishing-as-a-service operation that blends adversary-in-the-middle, device-code methods, and AI-generated lures to steal Microsoft 365 accounts; the Pink extortion crew cold-calls employees posing as IT and walks them through a fake Entra passkey enrollment to seize their accounts. Train staff to reject unsolicited passkey setup requests.
Sources: BleepingComputer · Help Net Security · ↑ top
Latest developments: BleepingComputer found a wallet-stealing npm package inside the compromised Injective Labs SDK, and Infoblox exposed the Lurking Lizard proxy operation, both July 9.
Attackers hijacked Injective Labs' GitHub repository to publish an npm package that steals cryptocurrency wallet private keys and seed phrases, while Lurking Lizard's fake 7-Zip installers—served from more than 230 lookalike domains since August 2022—conscript victim devices into a residential proxy network.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Israel warned Washington that Tehran weighed a fresh attempt on President Trump's life and U.S. forces bombed Iranian railway bridges near Khamenei's burial city, yet oil futures fell and U.S. stocks rose as traders judged the flare-up contained.
The United States struck Iranian railway bridges on the route to Mashhad, where Iran interred supreme leader Ayatollah Ali Khamenei on Friday, while Israel told the U.S. that Iran considered a new plot to kill Trump; even so, oil settled lower and the Nasdaq led stocks higher as investors rotated back into chipmakers and bet the conflict stays boxed in.
Sources: FT World · WSJ World News · WSJ Markets · WSJ Markets · ↑ top
Tonight: Chance Showers And Thunderstorms, low 70F.
Friday: Chance Showers And Thunderstorms then Showers And Thunderstorms Likely, high 85F.
Friday Night: Showers And Thunderstorms, low 67F.
Latest developments: Wegmans confirmed that foundation work on its first Pittsburgh-area store begins this month.
Wegmans will start construction this month on its first supermarket in the Pittsburgh region, along Cool Springs Drive in Cranberry Township near the Penguins' practice facility, after buying the land earlier this year.
Latest developments: South Side business owners and residents testified before Pittsburgh City Council backing a proposed Neighborhood Improvement District on East Carson Street.
Business owners and residents packed a Pittsburgh City Council public hearing to debate creating a Neighborhood Improvement District along East Carson Street in the South Side, a special-assessment zone meant to fund cleaning, safety, and upkeep on the commercial corridor.
Latest developments: An Allegheny County judge said Thursday she expects to approve the sale of the troubled Mon View Heights apartment complex in West Mifflin.
A judge signaled Thursday she will approve selling the troubled Mon View Heights apartment complex in West Mifflin, a move supporters say preserves affordable housing at the site.
Latest developments: More than 1,000 people have signed a petition opposing the proposed sale of nearly 20 acres near Fairhaven Park in Kennedy Township.
Residents of Kennedy Township are fighting a proposed sale of nearly 20 acres of land near Fairhaven Park, gathering more than 1,000 petition signatures to block it.
Latest developments: The city says nearly every operable public water fountain now runs, two years after a plumber shortage left many dry.
Pittsburgh reports that almost every functional public drinking fountain is now working, a turnaround from 2024 when the city had a single plumber to open fountains, spray parks, and pools; Mayor Ed Gainey's administration has since built its plumbing staff to three plumbers and an apprentice.
Latest developments: Pennsylvania senators John Fetterman and Dave McCormick filed paperwork Monday creating a bipartisan joint fundraising committee, Common Ground PA.
Pennsylvania's U.S. senators, Democrat John Fetterman and Republican Dave McCormick, formed a joint fundraising committee called Common Ground PA, filing with the Federal Election Commission in an unusual bipartisan move that observers suspect is more symbolic than an actual fundraising vehicle.
Latest developments: The fourth annual Northside Music Festival runs the weekend of July 9-12 across Pittsburgh's Northside.
The fourth annual Northside Music Festival brings live music to Pittsburgh's Northside over the weekend of July 9-12, and the brand-new Pittsburgh Music Festival also debuts in the city this month; NEXTpittsburgh's Summer Concert Guide lists both lineups.
Sources: NEXTpittsburgh Events · ↑ top
Latest developments: This weekend's area options include a Bob Dylan concert and the Big Butler Fair in Butler County.
Bob Dylan performs in the Pittsburgh area this weekend and the Big Butler Fair runs in Butler County, two of the Post-Gazette's picks for things to do around Pittsburgh, July 9-12.
Sources: Post-Gazette Music · ↑ top
Latest developments: Union Pacific's Big Boy No. 4014 will pass through several Westmoreland County municipalities on its western Pennsylvania run this weekend.
Big Boy No. 4014, the world's largest operating steam locomotive, crosses western Pennsylvania this weekend, passing through several Westmoreland County towns and drawing crowds ahead of a scheduled stop Saturday, July 11.
Pirates (47-47)
Wed Jul 8 · Braves 3 · Pirates 0 · Final
Bart's 2-run homer helps Atlanta to 3-0 win after Braves end Pirates' combined perfect-game bid
Thu Jul 9 · Braves 10 · Pirates 5 · Final
Mike Yastrzemski hits grand slam in Braves' 10-5 win over Pirates
Up Next · Brewers @ Pirates · Fri Jul 10, 6:40 PM
Latest developments: With the MLB Draft this weekend, the Post-Gazette previewed whether the Pirates take another high schooler at No. 5 overall.
The Post-Gazette's draft preview weighed whether the Pirates, picking fifth overall in this weekend's MLB Draft, again reach for a high schooler as they did with Konnor Griffin, with scouting director Kevan Graves running the board.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Hall of Fame cornerback Rod Woodson appeared on Cam Heyward's 'Not Just Football' podcast for a deep dive into his career.
Pro Football Hall of Famer Rod Woodson, the former Steelers cornerback, joined Cam Heyward's 'Not Just Football' podcast to share untold Steelers stories from his 17-year NFL career.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Steelers' channel posted video of safety Jaquan Brisker working out with former Rams star Aaron Donald this offseason.
The Steelers' official YouTube shared footage of safety Jaquan Brisker training alongside former Los Angeles Rams defensive tackle Aaron Donald ahead of the 2026 season.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: ESPN published its report card on the United States' home World Cup, faulting the roster more than coach Mauricio Pochettino after the round-of-16 exit.
ESPN graded the United States men's national team's home World Cup, judging that the side aced the group stage before failing a 4-1 round-of-16 loss to Belgium, and argued the players' limits, more than coach Mauricio Pochettino, decided the early exit.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
S&P 500 7,510.17 ▲ +1.1% Dow 52,743.39 ▲ +1.2% Nasdaq 25,970.01 ▲ +0.9% WTI crude 69.96 ▼ -0.6% EUR/USD 1.1426 ▲ +0.3% GBP/USD 1.3367 ▲ +1.0% USD/JPY 161.98 ▼ -0.1%