daily plain-text briefing: security, markets, business, and pittsburgh
Progress Software ordered ShareFile customers to power down their file-sharing servers over a credible active threat, as U.S. courts convicted a Ryuk operator and a Gitea flaw fell under live exploitation.
Latest developments: Attackers began actively exploiting a critical auth-bypass in the official Gitea Docker image that lets them impersonate any user, including administrators, while CISA added actively exploited iCagenda (CVE-2026-48939) and Balbooa Forms (CVE-2026-56291) file-upload flaws to its catalog, Zimbra urged customers to patch a critical Classic Web Client XSS bug, and Binarly disclosed six new U-Boot bootloader flaws.
The bugs span self-hosted Git servers, Joomla extensions, the Zimbra mail suite, and the U-Boot bootloader embedded in routers, cameras, and data-center management chips. Administrators should patch or isolate the affected systems now.
Sources: BleepingComputer · CISA Advisories · BleepingComputer · The Hacker News · ↑ top
Latest developments: A 34-year-old Armenian man pleaded guilty in Oregon federal court to conspiracy and computer fraud for deploying Ryuk ransomware against U.S. companies and faces up to 15 years, the same day a Florida court sentenced former DigitalMint negotiator Angelo Martino, 41, to 70 months for aiding BlackCat/ALPHV extortion.
Ryuk has encrypted hospitals and businesses for large ransoms since 2018; BlackCat/ALPHV ran a ransomware-as-a-service operation dismantled in 2023. U.S. courts are steadily convicting both operators and the insider negotiators who helped them.
Sources: BleepingComputer · The Record · SecurityWeek · ↑ top
Latest developments: Progress Software emailed ShareFile customers on July 10 to immediately shut down the Windows servers running their Storage Zone Controllers, citing a credible external security threat, and temporarily disabled access to affected accounts while it investigates.
ShareFile is Progress Software's enterprise secure file-sharing platform; its on-premises Storage Zone Controllers run on Windows servers. Customers should power the servers off and watch for a fix.
Sources: The Hacker News · BleepingComputer · ↑ top
Latest developments: SentinelOne reported that Chinese and Indian state-linked hackers ran separate espionage campaigns against Pakistan's Balochistan Police between February 2024 and April 2026, in some cases breaching the exact same systems.
The Balochistan Police guard Pakistan's southwestern province, site of a long-running separatist insurgency. Rival and allied governments alike targeted the force to harvest intelligence.
Sources: The Record · SecurityWeek · ↑ top
Latest developments: Researchers demonstrated HalluSquatting, pre-registering the nonexistent package names that AI coding assistants routinely hallucinate, then serving malware from them to achieve remote code execution and seed a botnet.
When a large language model suggests a library that does not exist, an attacker who has claimed that name delivers malicious code to anyone who follows the suggestion. Verify AI-suggested dependencies before installing them.
Sources: SecurityWeek · ↑ top
Latest developments: The European Parliament passed Chat Control 2.0 on July 10, letting companies including Google, Meta, and Microsoft scan users' messages to hunt for child sexual abuse material.
The law revives a contested proposal to permit message scanning across the European Union, reigniting privacy fights over content inspection of private communications.
Sources: The Record · ↑ top
Latest developments: United States senators reached a deal with the White House on legislation to tighten sanctions on Russia, a potential breakthrough that landed days after Trump signaled a shift toward more support for Kyiv.
The bipartisan Senate agreement clears a path to harsher measures against Moscow and its trading partners, and it coincides with Trump's turn toward backing Ukraine—a move that could squeeze Russian energy revenue and the banks and commodities traders exposed to it.
This Afternoon: Showers And Thunderstorms, high 85F.
Tonight: Showers And Thunderstorms Likely, low 67F.
Saturday: Areas Of Fog then Slight Chance Showers And Thunderstorms, high 85F.
Latest developments: Local and state leaders gathered July 10 to launch Phase Two of the New Granada revitalization in Pittsburgh's Hill District.
The project restores the New Granada Theater, a Hill District landmark that Black Masons built nearly a century ago, part of a long push to revive the neighborhood's cultural core.
Latest developments: Organizers released the 2026 Best Places to Work in Western Pennsylvania list July 10.
The annual program ranks Pittsburgh-region employers on workplace culture and employee satisfaction, with WPXI publishing the full 2026 honorees.
Latest developments: With the Parkway East closing tonight, the Wilkinsburg Community Development Corporation launched a 'Skip the Tunnel' campaign, plastering billboards to court the up to 100,000 motorists rerouted through the borough for 25 days.
PennDOT's closure of the Parkway East between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit to replace the Commercial Street Bridge funnels traffic through Wilkinsburg, and the borough's development corporation is pitching those detoured drivers on its vacant office space and businesses with the slogan 'Detour traffic is temporary, tunnel traffic is forever.'
Sources: TribLive · KDKA · ↑ top
Latest developments: PublicSource published audio from a year-old Carnegie Mellon staff council meeting in which President Farnam Jahanian called the administration in Washington 'toxic.'
In the recording, Jahanian described his efforts to shield Carnegie Mellon University, including a decision to paint The Fence, and characterized students as naive, as he weighed a controversial Trump visit to campus.
Sources: PublicSource · ↑ top
Latest developments: PennDOT will again close a portion of I-279 and the I-279/I-579 High Occupancy Vehicle lanes overnight next week in Allegheny County.
The overnight restrictions layer more disruption onto a region already juggling detours from the 25-day Parkway East shutdown that begins tonight.
Latest developments: The Wexford Garden and Pond Tour returns Saturday, July 11, after a three-year hiatus.
On Saturday, July 11, Wexford homeowners open their yards for the self-guided tour, showing off koi ponds and pondless waterfalls to hundreds of visitors; organizer Debra Krischke promises past favorites and new surprises.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: Union Pacific's Big Boy No. 4014 rolls through western Pennsylvania on Saturday, July 11, ending its return leg with a stop in Leetsdale.
The world's largest operating steam locomotive, No. 4014, is crossing the country for America's 250th birthday; after celebrating July 4 in Philadelphia, it passes back through the Pittsburgh area Saturday, July 11, and stops in Leetsdale before heading home west.
Pirates (47-47)
Thu Jul 9 · Braves 10 · Pirates 5 · Final
Mike Yastrzemski hits grand slam in Braves' 10-5 win over Pirates
Up Next · Brewers @ Pirates · Fri Jul 10, 6:40 PM
Latest developments: A Post-Gazette report examined how much the Steelers might pay cornerback Joey Porter Jr. as he seeks an extension in a booming market.
Measured against recent deals for corners such as Devon Witherspoon and Christian Gonzalez, Porter, the Steelers' 2023 first-round pick, is positioned to chase a lucrative extension, and the paper weighed how far Pittsburgh will go before training camp opens.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette detailed how the Pirates landed shortstop Konnor Griffin in the MLB Draft, drawing on general manager Ben Cherington.
The account traces how Pittsburgh secured the prized prospect ahead of the White Sox and Nationals; Griffin, now a rookie, has fought through injuries this season, including a jammed finger that could sideline him until September.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Guardian mapped the U.S. men's national team's next three years, flagging sporting director Matt Crocker's abrupt exit for a club job and a pending contract-extension offer to coach Mauricio Pochettino.
After the home World Cup ended in a 4-1 round-of-16 loss to Belgium, the United States enters the 2030 cycle facing roster turnover, an unresolved Pochettino decision, and Crocker's departure, with qualifying, the Gold Cup, and Copa América ahead.
Sources: Guardian World Cup 2026 · ↑ top
Latest developments: ESPN weighed whether Christian Pulisic deserves the blame after his home World Cup fell flat.
Pulisic, the Milan forward and the U.S. team's biggest star, struggled through the tournament on home soil and left the round-of-16 loss to Belgium with a leg fracture, and ESPN's post-mortem asks how much of the failure lands on him.
Sources: ESPN Soccer · ↑ top
S&P 500 7,510.17 ▲ +1.1% Dow 52,743.39 ▲ +1.2% Nasdaq 25,970.01 ▲ +0.9% WTI crude 70.66 ▲ +0.9% EUR/USD 1.1428 ▲ +0.2% GBP/USD 1.3382 ▲ +0.9% USD/JPY 162.16 ▲ +0.1%