daily plain-text briefing: security, markets, business, and pittsburgh
The European Union and United Kingdom imposed their first joint cyber sanctions on Russia, blaming the FSB and GRU for sabotage across European critical infrastructure.
Latest developments: The European Union and United Kingdom imposed their first joint cyber sanctions on July 13, 2026, the EU listing nine individuals and four entities and the UK naming 24, targeting GRU military intelligence and a network of hackers, hacktivists, and front companies, while the US Treasury separately sanctioned First VPN Service and its Ukrainian administrator for aiding ransomware groups.
The sanctions follow allied attribution of FSB Center 16 sabotage against Poland's energy and water-treatment systems. Critical-infrastructure operators should harden internet-facing routers per CISA's companion advisory AA26-194a.
Sources: The Record · BleepingComputer · Help Net Security · The Record · ↑ top
Latest developments: The Los Angeles Police Department let its Flock license-plate-reader contract expire after the system repeatedly flagged innocent drivers' cars as stolen and led officers to pull them over, as Wired reported a leak of hours of San Francisco Police Department Skydio drone footage and Meta filed a patent for an AI that listens all day and logs a person's inferred emotions.
Automated plate readers, police drones, and always-listening AI each expand routine mass surveillance and its error rate. Civil-liberties advocates press for warrant requirements and tighter retention limits.
Sources: 404 Media · Wired Security · The Hacker News · ↑ top
Latest developments: Jamf Threat Labs flagged CrashStealer, a native C++ macOS stealer that poses as Apple's crash-reporting tool and rides a notarized dropper past Gatekeeper, validating the victim's login password locally before harvesting credentials, keychain data, and crypto wallets.
CrashStealer breaks from the usual AppleScript and Objective-C stealers by compiling in C++ and abusing Apple notarization. Mac users should avoid crash-reporter lookalikes and verify software provenance before installing.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Jscrambler disclosed that a threat actor published a malicious infostealer build of its npm package, downloaded nearly 1,500 times, the same day Google and Microsoft pulled ModHeader—a header-editing extension with 1.6 million Chrome and Edge installs—after researchers found a dormant hidden browsing-history collector inside the official store version.
Both incidents put attacker code inside widely trusted developer and browser tools. Teams should audit dependency and extension inventories, pin versions, and revoke exposed credentials.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Researchers caught an unknown actor running a vibe-coded, AI-generated PowerShell script that enumerated Active Directory—finding domain controllers, mapping users and computers, and exporting an AD_Report.html summary—while the SANS Internet Storm Center observed internet-wide scanning for exposed MCP servers and AI-assistant credentials.
Intruders now use large language models to write reconnaissance tooling and hunt for AI infrastructure keys. Defenders should monitor for anomalous PowerShell enumeration and lock down MCP endpoints and stored assistant credentials.
Sources: The Hacker News · SANS Internet Storm Center · ↑ top
Latest developments: Microsoft made passkeys the default sign-in method in Entra ID and rolled out a new SMS and voice authentication model on July 13, 2026, the same day Help Net Security detailed attackers spoofing the OAuth client_id to log account-enumeration probes as a familiar application and slip past Entra ID sign-in telemetry.
Entra ID's passkey default pushes tenants toward phishing-resistant login, while the client_id spoofing trick lets attackers enumerate valid accounts without tripping the usual logs. Administrators should enforce passkeys and scrutinize sign-in logs for unfamiliar application IDs.
Sources: Microsoft Security Blog · Help Net Security · ↑ top
Latest developments: Oil futures jumped nearly 10% past $80 a barrel, Treasury yields rose, gold slid below $4,000, and U.S. and Asian tech shares tumbled Monday as the reinstated blockade and Iran's renewed Hormuz closure drove investors into risk-off positions.
President Trump revived a U.S. naval blockade of Iran and vowed a 20% fee on ships transiting the Strait of Hormuz; the resulting oil surge and Treasury sell-off rippled across global markets as chipmakers led equities lower.
Sources: WSJ Markets · FT World · WSJ Markets · FT World · ↑ top
Latest developments: Federal Reserve governor Christopher Waller warned Monday that another 'hot' inflation reading could push the central bank to raise interest rates, a hawkish turn as energy prices climb.
Christopher Waller, a Federal Reserve governor, said a further elevated inflation reading may prompt the Fed to tighten policy, signaling rate-hike risk just as the U.S.-Iran conflict lifts oil prices.
This Afternoon: Mostly Sunny, high 89F.
Tonight: Mostly Clear, low 68F.
Tuesday: Sunny, high 94F.
Latest developments: Pittsburgh's Astrobotic Technology completed its sale to Colorado-based Voyager Technologies, the Post-Gazette reported Monday.
Astrobotic Technology, the Pittsburgh company that builds lunar landers and space robotics, finished its acquisition by Voyager Technologies of Colorado, folding a marquee local space startup into a larger aerospace firm.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Pennsylvania's newly passed state budget skipped any regulation of skill games, leaving Pittsburgh's tax on the machines unresolved, TribLive reported Monday.
Pennsylvania lawmakers approved a budget this weekend without addressing how to regulate skill games, the slot-like machines in bars and stores, leaving the City of Pittsburgh's tax on them in legal limbo.
Latest developments: Altoona-based Sheetz opened its newest store, deepening its push into the Greater Cincinnati market.
Sheetz, the family-owned convenience-store chain based in Altoona, opened another location in the Greater Cincinnati region as it extends its footprint into Ohio.
Latest developments: In a sudden reversal, Allegheny County Council could scrap its own plan to ask voters to remove the council's discretionary spending cap, the Post-Gazette reported Monday.
Allegheny County Council had advanced a ballot referendum to lift the cap on its discretionary spending; members now signal they may abandon the measure before it reaches voters.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The first full weekday of the Parkway East (I-376) closure brought no major traffic problems, and Pittsburgh Water halted several of its own construction projects to keep detour routes clear.
PennDOT's 25-day closure of the Parkway East for the Commercial Street Bridge replacement, routing roughly 100,000 daily drivers onto detours through Point Breeze and Swissvale, moved through its first workday smoothly as Pittsburgh Water paused nearby construction.
Sources: Pittsburgh Post-Gazette · WPXI · ↑ top
Latest developments: A 23-acre tract of wooded land along the Turtle Creek gorge near Trafford will be permanently preserved after its purchase, TribLive reported Monday.
Conservation of 23 acres along the Westmoreland Heritage Trail near Trafford expands protected habitat in the Turtle Creek gorge, adding to the trail's green corridor in Westmoreland County.
Pirates (50-47)
Sun Jul 12 · Brewers 5 · Pirates 14 · Final
Skenes wins 2nd straight start after 9-game winless slide, Pirates rout Brewers 14-5 with 10-run 4th
Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM
Latest developments: The Pirates added 16 more players on Day 2 of the 2026 MLB Draft, the Post-Gazette detailed.
After taking LSU outfielder Derek Curiel fifth overall, the Pirates selected 16 additional players on the draft's second day, filling out a class meant to restock the farm system.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The New England Revolution extended the loan of U.S. men's national team goalkeeper Matt Turner from Lyon through the end of 2026, the club announced Monday.
Matt Turner, the USMNT goalkeeper, will stay with MLS side New England Revolution on an extended loan from French club Lyon through 2026, keeping the veteran keeper stateside following the United States' World Cup exit.
Sources: ESPN Soccer · ↑ top
S&P 500 7,528.60 ▲ +1.0% Dow 52,690.77 ▲ +0.7% Nasdaq 26,059.80 ▲ +0.8% WTI crude 71.20 ▲ +2.7% EUR/USD 1.1421 ▲ +0.1% GBP/USD 1.3389 ▲ +0.7% USD/JPY 162.25 ▲ +0.2%