daily plain-text briefing: security, markets, business, and pittsburgh
Microsoft warns that AI is collapsing the gap between a patch's release and its exploitation, pushing enterprises to deploy updates faster than monthly cycles ever assumed.
Latest developments: Microsoft rewrote its Windows update guidance on July 10 to urge shorter deployment timelines, warning that AI shrinks the time attackers need to exploit a freshly patched flaw, and said it expects more monthly updates as it leans on AI to hunt bugs in its own code.
Microsoft advises organizations to accelerate rollout of monthly security updates, particularly on devices that tolerate short deployment windows, as AI compresses the interval between disclosure and mass exploitation; June 2026 already delivered over 200 CVEs, including 116 for Windows 11.
Sources: Help Net Security · BleepingComputer · Help Net Security · ↑ top
Latest developments: BleepingComputer identified Helix on July 9, a new data-extortion group that pairs voice phishing, device-code phishing, and MFA abuse to steal data from SharePoint environments, joining Okta's O-UNC-066 crew that phones Microsoft 365 users to enroll rogue Entra passkeys.
Both Helix and O-UNC-066 lean on identity-focused social engineering—a phone call that steers victims to fake Microsoft Entra ID login pages or coaxes them through passkey enrollment—to seize accounts for data theft and extortion; enforce phishing-resistant MFA and verify IT callers.
Sources: BleepingComputer · SecurityWeek · The Hacker News · ↑ top
Latest developments: A US court sentenced Angelo Martino, 41, a former DigitalMint ransomware negotiator, to 70 months for conspiring with the BlackCat/ALPHV gang to extort victims in 2023, making him the third US security professional imprisoned in the scheme.
Martino, hired to negotiate on behalf of ransomware victims, instead worked with BlackCat operators and two other cybersecurity professionals to launch attacks; his sentencing caps a run of insider betrayals inside the incident-response industry.
Sources: SecurityWeek · BleepingComputer · The Hacker News · ↑ top
Latest developments: GitHub shipped npm 12 on July 9 with install scripts disabled by default and granular access tokens deprecated, the same day Datadog flagged dormant 'ghost' GitHub accounts enumerating corporate organizations through the API and SecurityWeek exposed a network of 200 GitHub repositories loading PowerShell malware.
Attackers exploit developer trust in GitHub and npm—scraping corporate repos through years-old accounts, hosting Go-and-PowerShell malware loaders across 200 repositories, and slipping stealers into packages—prompting npm 12 to make automatic install scripts opt-in; audit tokens and pin dependencies.
Sources: The Hacker News · The Hacker News · SecurityWeek · ↑ top
Latest developments: Microsoft dissected GigaWiper on July 9, a Windows backdoor that bolts three older destructive tools into one operator-selectable menu.
GigaWiper offers its operator a standalone disk wiper, a multi-pass overwrite of the Windows drive, and fake ransomware that scrambles files with a key it never saves, making recovery impossible; it targets machines for system-level sabotage rather than payment.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Ledger's Donjon team showed on July 10 that a precisely timed laser pulse aimed at a Tangem wallet card's chip resets the card's password to anything the attacker picks, handing over the coins, while Dark Reading detailed fresh bugs in a Microsoft BitLocker security wrapper that put crypto ATMs at risk.
The Tangem attack demands physical access and specialized equipment, so it endangers stolen or lost cards rather than every owner, and the unpatchable chip design leaves no fix; the BitLocker wrapper flaws expose organizations and ATMs to compromise.
Sources: The Hacker News · Dark Reading · ↑ top
Latest developments: Trump declared the U.S.-Iran ceasefire 'over' yet said Washington and Tehran agreed to keep negotiating, and markets calmed as Treasury yields rose and oil steadied on fading escalation fears.
President Trump said the U.S.-Iran ceasefire has ended while both sides agreed to continue talks; oil held steady and Treasury yields rose as investors bet against a fresh Persian Gulf escalation, even as the International Energy Agency warned that war damage to Gulf and Russian refineries threatens a petrol and diesel supply crunch and Delta reported jet-fuel costs running 77% above a year ago.
Sources: FT World · WSJ Markets · FT Markets · ↑ top
Latest developments: Trump said Friday he will not sign the bipartisan housing-affordability bill, letting it become law automatically without his signature.
President Trump declined to sign a landmark bipartisan housing bill aimed at voter affordability worries as U.S. home prices hit records; the measure becomes law automatically because he took no veto, though he has left open whether he might still act.
Sources: WSJ Politics · ↑ top
This Afternoon: Showers And Thunderstorms Likely, high 85F.
Tonight: Showers And Thunderstorms Likely, low 67F.
Saturday: Areas Of Fog then Slight Chance Showers And Thunderstorms, high 85F.
Latest developments: Seventeen Pittsburgh technology companies drew a combined $70.15 million in the second quarter of 2026, powered by two eight-figure rounds at local artificial-intelligence startups.
Pittsburgh technology companies raised $70.15 million across 17 firms in the second quarter of 2026, WPXI reported, with two eight-figure funding rounds at artificial-intelligence startups driving most of the total.
Latest developments: Allegheny Health Network named Dr. Allan Klapper, president of AHN Wexford Hospital, to also serve as president of AHN Grove City Hospital.
Allegheny Health Network appointed Dr. Allan Klapper, already president of AHN Wexford Hospital, to lead AHN Grove City Hospital as well, placing one executive over both facilities.
Latest developments: The Post-Gazette reported that Pennsylvania businesses hosting skill-games machines brace for upheaval as a crucial state deadline tied to a new tax on the devices approaches.
Pennsylvania bars, convenience stores, and clubs that operate slots-like skill-games terminals face upheaval as the state nears a deadline to tax the machines, the Post-Gazette reported.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Pittsburgh's Department of Permits, Licenses and Inspections rolled out a 'Permit Tracker' tool on its OneStopPGH portal.
The City of Pittsburgh's Department of Permits, Licenses and Inspections added a 'Permit Tracker' to its OneStopPGH portal, letting residents and contractors follow the status of permit applications online.
Latest developments: Slippery Rock, IUP, and PennWest are among Pennsylvania State System universities set to waive tuition for qualifying students under a new PASSHE Pledge.
Several Pennsylvania State System of Higher Education universities—Slippery Rock, Indiana University of Pennsylvania, and PennWest among them—will waive tuition for certain qualifying students under a PASSHE Pledge program, the Post-Gazette reported.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette laid out where Pennsylvania's candidates for governor stand on legalizing marijuana, regulating hemp, and related policy.
The Post-Gazette detailed the positions of Pennsylvania's gubernatorial candidates—Democratic incumbent Josh Shapiro and Republican Stacy Garrity—on marijuana legalization, hemp regulation, and related issues heading into the 2026 race.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: NEXTpittsburgh's guide for the weekend of July 9-12 leads with the Pittsburgh Vintage Grand Prix and a staging of the 'Mean Girls' musical.
NEXTpittsburgh's roundup for the weekend of July 9-12 spotlights the Pittsburgh Vintage Grand Prix's classic-car events and the 'Mean Girls' musical among more than a dozen things to do across the city, alongside the new Pittsburgh Music Festival.
Sources: NEXTpittsburgh Events · ↑ top
Pirates (47-47)
Thu Jul 9 · Braves 10 · Pirates 5 · Final
Mike Yastrzemski hits grand slam in Braves' 10-5 win over Pirates
Up Next · Brewers @ Pirates · Fri Jul 10, 6:40 PM
Latest developments: T.J. Watt fell out of the top five of ESPN's edge-rusher poll, and Post-Gazette writers weighed whether he or Alex Highsmith could still be traded before training camp opens.
The Post-Gazette asked whether Steelers pass rushers T.J. Watt and Alex Highsmith stay put or move before training camp at Saint Vincent College, and separately noted Watt dropped outside the top five of ESPN's edge-rusher poll behind Myles Garrett, Micah Parsons, Maxx Crosby, and Aidan Hutchinson.
Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top
Latest developments: U.S. Soccer said Christian Pulisic suffered a microfracture and bone bruise in his leg during the United States' 4-1 round-of-16 loss to Belgium, sidelining him for several weeks.
Christian Pulisic, the Milan forward and USMNT captain, sustained a leg microfracture and bone bruise in the second half of the 4-1 World Cup loss to Belgium in Seattle; MRI and X-ray scans confirmed an injury expected to keep him out for weeks after critics had faulted his limited availability.
Sources: Guardian World Cup 2026 · ↑ top
Latest developments: Nielsen data showed the United States' 4-1 loss to Belgium averaged 33.1 million viewers on Fox, the most-watched American telecast since the Super Bowl.
The United States' round-of-16 loss to Belgium averaged 33.086 million viewers on Fox and peaked above 41 million, Nielsen reported—the most-watched U.S. telecast since the Super Bowl and, for a second straight match, a record American soccer audience.
Sources: Guardian World Cup 2026 · ↑ top
Latest developments: With his contract expired, U.S. Soccer has offered Mauricio Pochettino an extension, and both sides are taking time to decide as the program enters the 2030 cycle.
The Guardian reported that coach Mauricio Pochettino's USMNT contract has run out and U.S. Soccer has tabled an extension offer, leaving his future open as the team begins rebuilding toward the 2030 World Cup after sporting director Matt Crocker's abrupt departure for a Saudi role.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,510.17 ▲ +1.1% Dow 52,743.39 ▲ +1.2% Nasdaq 25,970.01 ▲ +0.9% WTI crude 70.66 ▲ +0.9% EUR/USD 1.1426 ▲ +0.3% GBP/USD 1.3367 ▲ +1.0% USD/JPY 161.98 ▼ -0.1%