daily plain-text briefing: security, markets, business, and pittsburgh
Attackers drained millions from cryptocurrency wallets through weak-randomness and hardware flaws as a fresh voice-phishing wave hijacked Microsoft 365 accounts and Microsoft warned AI is shrinking the window to patch.
Latest developments: Coinspect disclosed Ill Bloom, a weak-randomness flaw in wallet recovery-phrase generation that attackers used to drain more than $5 million starting with a coordinated May 27 sweep, Ledger's Donjon team showed a precisely timed laser pulse resets the password on Tangem wallet cards that cannot be patched, and threat actors who compromised Injective Labs' GitHub pushed a malicious npm package, @injectivelabs/sdk-ts@1.20.21, that steals wallet keys and seed phrases.
Cryptocurrency holders face converging attacks on the seed phrases and hardware cards that control their funds. Owners should verify wallet software versions, avoid the compromised Injective SDK build, and treat any recovery phrase generated by weak software as already burned.
Sources: The Hacker News · The Hacker News · The Hacker News · ↑ top
Latest developments: Microsoft told organizations on July 10 to shorten how quickly they deploy monthly Windows updates, warning that AI now cuts the time attackers need to weaponize a freshly patched flaw, a message it paired with its July Secure Future Initiative progress report as its own Patch Tuesday volume topped 200 CVEs a month.
Microsoft is rewriting deployment guidance because AI compresses the gap between a patch shipping and a working exploit landing. Teams should tighten update rollout windows on devices where faster deployment will not disrupt operations.
Sources: Help Net Security · Microsoft Security Blog · Help Net Security · ↑ top
Latest developments: Okta warned that a threat actor it tracks as O-UNC-066 is phoning employees across multiple sectors and steering them to phishing pages that mirror Microsoft Entra ID login screens, using a panel-controlled kit that hijacks the passkey-enrollment process to seize Microsoft 365 accounts for data extortion.
The campaign turns a phone call into full account takeover by tricking victims into enrolling an attacker-controlled Entra passkey. Organizations should restrict who can register authentication methods and train staff to reject unsolicited enrollment prompts.
Sources: SecurityWeek · The Hacker News · ↑ top
Latest developments: Researchers found a cybercrime crew's own server exposed for three weeks, revealing WP-SHELLSTORM, a mass operation carrying a target list of more than 1.4 million WordPress sites, while a separate network of 200 GitHub repositories used a Go module to load PowerShell that pulls a resolver from public dead drops and runs Windows malware.
Two distinct operations show how attackers weaponize public infrastructure at scale, one backdooring WordPress sites and the other abusing GitHub as a malware loader. WordPress operators should audit for unauthorized shells and defenders should treat Go modules that fetch remote PowerShell as hostile.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: The Record reported that automated license-plate-reader networks may face warrant requirements next after the Supreme Court reined in warrantless location tracking, a shift experts say would radically limit modern policing, as Bruce Schneier warned that AI-powered systems will soon track nearly everything people do in public and tie minor infractions to government records.
A Supreme Court limit on location tracking is spilling toward the camera networks that log every passing car, raising the prospect that ALPR searches will require warrants. Privacy advocates see a check on the automated public surveillance Schneier describes as inevitable.
Sources: The Record · Schneier on Security · ↑ top
Latest developments: Palo Alto Networks' Unit 42 published the first detailed profile of The Gentlemen, a ransomware operation whose affiliate recruitment model is driving rapid growth in its victim count.
The Gentlemen is an emerging ransomware crew scaling through affiliates who share its tooling and split extortion proceeds. Defenders should fold its tradecraft into detection now while its operations are still expanding.
Sources: Unit 42 (Palo Alto) · ↑ top
Latest developments: President Trump said the United States agreed to keep talking with Iran even as a senior U.S. official demanded Tehran reopen the Strait of Hormuz by Saturday or face consequences, and the administration grew increasingly pessimistic about any nuclear deal.
The fighting between the United States and Iran that resumed this week has stalled traffic through the Strait of Hormuz, the chokepoint for roughly a fifth of the world's oil, though Iran keeps rushing its own tankers through; oil futures closed the week higher on the standoff.
Sources: FT World · WSJ World News · WSJ World News · WSJ Markets · ↑ top
Latest developments: President Trump said Friday, July 10, he will refuse to sign the landmark federal housing bill, and with his 10-day window expiring Saturday, the measure automatically becomes law.
Congress passed the bill to address voters' worries about housing affordability; Trump declined to either sign or veto it before his deadline, so it takes effect on Saturday, July 11, over his objection.
Sources: WSJ Politics · ↑ top
Tonight: Chance Showers And Thunderstorms, low 67F.
Saturday: Areas Of Fog then Slight Chance Showers And Thunderstorms, high 85F.
Saturday Night: Slight Chance Showers And Thunderstorms then Partly Cloudy, low 64F.
Latest developments: The University of Pittsburgh raised tuition for the sixth consecutive year for 2026, and on-campus housing charges will climb as well.
The University of Pittsburgh, the state-related research university in Oakland, lifted tuition and housing costs again, adding to the financial pressure on students and families.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: PennDOT closed the Parkway East (I-376) at 9 p.m. Friday, July 10, launching the 25-day Commercial Street Bridge replacement, and Swissvale imposed around-the-clock parking restrictions that run until August 3.
The closure between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit forces all through traffic off at Wilkinsburg or Forbes Avenue in Oakland; Allegheny County emergency crews will use restricted roads closed to other drivers to hold response times down, and PennDOT is livestreaming the demolition.
Sources: WPXI · WTAE · WTAE · KDKA · ↑ top
Latest developments: Raccoon Creek State Park closed its lake swimming area after tests showed elevated coliform bacteria, surprising families who arrived to find caution tape and warning signs.
The state park in Beaver County shut its beach at Raccoon Lake to swimmers over the bacteria readings, an unwelcome closure during the July heat.
Latest developments: A congregation from Arlington, Virginia, gathered at Homewood Cemetery to dedicate a headstone for the Rev. Robert Simon Laws, 123 years after his burial in an unmarked grave.
Laws escaped slavery and went on to lead several churches, including one in Pittsburgh; his grave sat unmarked until the rededication ceremony finally gave him a headstone.
Sources: Pittsburgh Post-Gazette · KDKA · ↑ top
Latest developments: Organizers of Monroeville Pride hired additional security ahead of Saturday, July 11, expecting a large crowd after a week of online backlash.
Monroeville Pride, an LGBTQ festival, runs Saturday, July 11, in Monroeville, where organizers added security to keep attendees safe.
Latest developments: NEXTpittsburgh's guide for July 9-12 spotlights the Pittsburgh Vintage Grand Prix and a staging of 'Mean Girls' among the weekend's draws.
The weekend lineup includes the Pittsburgh Vintage Grand Prix, a production of 'Mean Girls,' the fourth annual Northside Music Festival, and the brand-new Pittsburgh Music Festival.
Sources: NEXTpittsburgh Events · ↑ top
Pirates (47-47)
Thu Jul 9 · Braves 10 · Pirates 5 · Final
Mike Yastrzemski hits grand slam in Braves' 10-5 win over Pirates
Fri Jul 10 · Brewers @ Pirates · Postponed
Up Next · Brewers @ Pirates · Sat Jul 11, 12:05 PM
Latest developments: A Post-Gazette video weighed whether T.J. Watt and Alex Highsmith stay put or a trade materializes before training camp, days after Watt slipped out of the top five in ESPN's edge-rusher poll.
With the Steelers' pass rush the subject of offseason speculation, beat coverage debated dealing edge rushers T.J. Watt or Alex Highsmith and questioned whether Watt still ranks among the NFL's five best edge defenders.
Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top
Latest developments: The Pirates recalled pitchers Antwone Kelly and Thomas Harrington from Triple-A Indianapolis on Friday to shore up a shaky bullpen, and Friday's rained-out opener against the Brewers pushed the teams to a Saturday doubleheader at PNC Park.
The Pittsburgh Pirates promoted relievers Antwone Kelly and Thomas Harrington amid bullpen struggles ahead of a day-night doubleheader with Milwaukee.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: On the July 9 SNR Drive, Matt Williamson and Wes Uhler ran their World Cup-style bracket on the best quarterback in NFL history and broke down Jeremy Fowler's top defensive tackles for 2026.
The Steelers' SNR Drive show, hosted by Matt Williamson and Wes Uhler, continued its tournament ranking the greatest NFL quarterbacks and reviewed the league's top defensive tackles heading into 2026 before the videocast pauses for training camp.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Latest developments: Nielsen figures show the U.S. men's 4-1 round-of-16 loss to Belgium averaged 33 million viewers on Fox, the most-watched American telecast since the Super Bowl, peaking above 41 million.
The United States men's national team's home World Cup run set the record for most-watched soccer telecast in U.S. history twice running; a later Mexico-England match neared 45 million viewers across platforms.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,528.60 ▲ +1.0% Dow 52,690.77 ▲ +0.7% Nasdaq 26,059.80 ▲ +0.8% WTI crude 71.22 ▲ +2.7% EUR/USD 1.1424 ▲ +0.1% GBP/USD 1.3391 ▲ +0.7% USD/JPY 162.21 ▲ +0.1%