================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, July 13, 2026 - 4:06 PM EDT ================================================================ The European Union and United Kingdom imposed their first joint cyber sanctions on Russia, blaming the FSB and GRU for sabotage across European critical infrastructure. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] The EU and UK unveiled their first joint cyber sanctions, blacklisting GRU officers and a wider hacker network in a shift from naming to punishing Russian intrusions. see: EU and UK Impose First Joint Cyber Sanctions on Russia * [TREND] Trusted software kept betraying users, from a backdoored Jscrambler npm build and the yanked ModHeader extension to CrashStealer posing as Apple's crash reporter on macOS. see: Jscrambler npm and ModHeader Extension Compromises; CrashStealer macOS Infostealer * [TREND] Attackers leaned on AI, running a vibe-coded PowerShell script that enumerated Active Directory while scanners swept the internet for exposed AI-assistant credentials. see: Attackers Weaponize AI for Intrusions * [UPDATE (new)] Microsoft made passkeys the default sign-in in Entra ID and added SMS and voice authentication, as researchers detailed OAuth client_id spoofing for account enumeration. see: Entra ID Passkeys and OAuth Client-ID Spoofing * [UPDATE (new)] The LAPD let its Flock license-plate-reader contract expire after false stolen-car hits, as Wired reported a leaked trove of San Francisco drone surveillance footage. see: License-Plate Readers and Drone Surveillance * [UPDATE (new)] In Pittsburgh, the first full weekday of the Parkway East closure passed smoothly while Astrobotic completed its sale to Voyager Technologies. see: Parkway East Closure Eases Into Workweek; Astrobotic Sale to Voyager Completed SECURITY ---------------------------------------------------------------- 1. EU AND UK IMPOSE FIRST JOINT CYBER SANCTIONS ON RUSSIA Nation-State Activity · [policy, apt] Latest developments: The European Union and United Kingdom imposed their first joint cyber sanctions on July 13, 2026, the EU listing nine individuals and four entities and the UK naming 24, targeting GRU military intelligence and a network of hackers, hacktivists, and front companies, while the US Treasury separately sanctioned First VPN Service and its Ukrainian administrator for aiding ransomware groups. The sanctions follow allied attribution of FSB Center 16 sabotage against Poland's energy and water-treatment systems. Critical-infrastructure operators should harden internet-facing routers per CISA's companion advisory AA26-194a. - The Record: https://therecord.media/russia-blamed-for-poland-grid-cyberattack-in-joint-uk-eu-sanctions-package - BleepingComputer: https://www.bleepingcomputer.com/news/security/eu-and-uk-hit-russia-with-first-joint-cyber-sanctions-package/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/13/eu-uk-russia-cyber-activity-sanctions/ - The Record: https://therecord.media/first-vpn-administrator-us-sanctions-ransomware-groups 2. LICENSE-PLATE READERS AND DRONE SURVEILLANCE Surveillance and Privacy · [surveillance, privacy] Latest developments: The Los Angeles Police Department let its Flock license-plate-reader contract expire after the system repeatedly flagged innocent drivers' cars as stolen and led officers to pull them over, as Wired reported a leak of hours of San Francisco Police Department Skydio drone footage and Meta filed a patent for an AI that listens all day and logs a person's inferred emotions. Automated plate readers, police drones, and always-listening AI each expand routine mass surveillance and its error rate. Civil-liberties advocates press for warrant requirements and tighter retention limits. - 404 Media: https://www.404media.co/lapd-regularly-pulled-over-innocent-people-because-license-plate-readers-flagged-their-cars-as-stolen/ - Wired Security: https://www.wired.com/story/sfpd-drone-video-leak-surveillance/ - The Hacker News: https://thehackernews.com/2026/07/meta-files-patent-for-ai-that-can.html 3. CRASHSTEALER MACOS INFOSTEALER Ransomware and Cybercrime · [malware, macos] Latest developments: Jamf Threat Labs flagged CrashStealer, a native C++ macOS stealer that poses as Apple's crash-reporting tool and rides a notarized dropper past Gatekeeper, validating the victim's login password locally before harvesting credentials, keychain data, and crypto wallets. CrashStealer breaks from the usual AppleScript and Objective-C stealers by compiling in C++ and abusing Apple notarization. Mac users should avoid crash-reporter lookalikes and verify software provenance before installing. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-crashstealer-malware-poses-as-apple-crash-reporting-tool/ - The Hacker News: https://thehackernews.com/2026/07/crashstealer-macos-malware-uses.html 4. JSCRAMBLER NPM AND MODHEADER EXTENSION COMPROMISES Ransomware and Cybercrime · [supply-chain, npm] Latest developments: Jscrambler disclosed that a threat actor published a malicious infostealer build of its npm package, downloaded nearly 1,500 times, the same day Google and Microsoft pulled ModHeader—a header-editing extension with 1.6 million Chrome and Edge installs—after researchers found a dormant hidden browsing-history collector inside the official store version. Both incidents put attacker code inside widely trusted developer and browser tools. Teams should audit dependency and extension inventories, pin versions, and revoke exposed credentials. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-backdoor-jscrambler-npm-package-with-infostealer-malware/ - The Hacker News: https://thehackernews.com/2026/07/google-and-microsoft-pull-modheader.html 5. ATTACKERS WEAPONIZE AI FOR INTRUSIONS AI Security · [ai, credential-theft] Latest developments: Researchers caught an unknown actor running a vibe-coded, AI-generated PowerShell script that enumerated Active Directory—finding domain controllers, mapping users and computers, and exporting an AD_Report.html summary—while the SANS Internet Storm Center observed internet-wide scanning for exposed MCP servers and AI-assistant credentials. Intruders now use large language models to write reconnaissance tooling and hunt for AI infrastructure keys. Defenders should monitor for anomalous PowerShell enumeration and lock down MCP endpoints and stored assistant credentials. - The Hacker News: https://thehackernews.com/2026/07/attacker-uses-suspected-ai-generated.html - SANS Internet Storm Center: https://isc.sans.edu/diary/rss/33150 6. ENTRA ID PASSKEYS AND OAUTH CLIENT-ID SPOOFING Vulnerabilities and Exploits · [identity, authentication] Latest developments: Microsoft made passkeys the default sign-in method in Entra ID and rolled out a new SMS and voice authentication model on July 13, 2026, the same day Help Net Security detailed attackers spoofing the OAuth client_id to log account-enumeration probes as a familiar application and slip past Entra ID sign-in telemetry. Entra ID's passkey default pushes tenants toward phishing-resistant login, while the client_id spoofing trick lets attackers enumerate valid accounts without tripping the usual logs. Administrators should enforce passkeys and scrutinize sign-in logs for unfamiliar application IDs. - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/13/entra-id-oauth-client-id-spoofing/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran Conflict Roils Global Markets Latest developments: Oil futures jumped nearly 10% past $80 a barrel, Treasury yields rose, gold slid below $4,000, and U.S. and Asian tech shares tumbled Monday as the reinstated blockade and Iran's renewed Hormuz closure drove investors into risk-off positions. President Trump revived a U.S. naval blockade of Iran and vowed a 20% fee on ships transiting the Strait of Hormuz; the resulting oil surge and Treasury sell-off rippled across global markets as chipmakers led equities lower. - WSJ Markets: https://www.wsj.com/finance/jgbs-rise-on-prospects-of-increased-inflows-into-domestic-securities-ca00140a?mod=rss_markets_main - FT World: https://www.ft.com/content/b1ab6ab2-b893-4605-b2b1-571ba9f46bd1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/gold-declines-amid-renewed-strikes-in-u-s-iran-conflict-daad6960?mod=rss_markets_main - FT World: https://www.ft.com/content/54be872f-c0a2-46dd-9337-5cad9124e734 * Fed's Waller Flags Rate-Hike Risk Latest developments: Federal Reserve governor Christopher Waller warned Monday that another 'hot' inflation reading could push the central bank to raise interest rates, a hawkish turn as energy prices climb. Christopher Waller, a Federal Reserve governor, said a further elevated inflation reading may prompt the Fed to tighten policy, signaling rate-hike risk just as the U.S.-Iran conflict lifts oil prices. - FT World: https://www.ft.com/content/74ced145-3cc2-42f7-873a-84d2764b0b4d PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Mostly Sunny, high 89F. Tonight: Mostly Clear, low 68F. Tuesday: Sunny, high 94F. Business: * Astrobotic Sale to Voyager Completed Latest developments: Pittsburgh's Astrobotic Technology completed its sale to Colorado-based Voyager Technologies, the Post-Gazette reported Monday. Astrobotic Technology, the Pittsburgh company that builds lunar landers and space robotics, finished its acquisition by Voyager Technologies of Colorado, folding a marquee local space startup into a larger aerospace firm. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/07/13/astrobotic-sale-to-colorado-s-voyager-is-complete/stories/202607130027 * Skill-Games Tax Left in Limbo Latest developments: Pennsylvania's newly passed state budget skipped any regulation of skill games, leaving Pittsburgh's tax on the machines unresolved, TribLive reported Monday. Pennsylvania lawmakers approved a budget this weekend without addressing how to regulate skill games, the slot-like machines in bars and stores, leaving the City of Pittsburgh's tax on them in legal limbo. - TribLive: https://triblive.com/local/pittsburgh-tax-on-skill-games-left-in-limbo-after-state-budget-defers-regulation/ * Sheetz Expands in Greater Cincinnati Latest developments: Altoona-based Sheetz opened its newest store, deepening its push into the Greater Cincinnati market. Sheetz, the family-owned convenience-store chain based in Altoona, opened another location in the Greater Cincinnati region as it extends its footprint into Ohio. - WTAE: https://www.wtae.com/article/sheetz-ohio-cincinnati/71891258 Around town: * County Council May Keep Spending Cap Latest developments: In a sudden reversal, Allegheny County Council could scrap its own plan to ask voters to remove the council's discretionary spending cap, the Post-Gazette reported Monday. Allegheny County Council had advanced a ballot referendum to lift the cap on its discretionary spending; members now signal they may abandon the measure before it reaches voters. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-local/2026/07/13/allegheny-county-council-budget-referendum-reversal/stories/202607130031 * Parkway East Closure Eases Into Workweek Latest developments: The first full weekday of the Parkway East (I-376) closure brought no major traffic problems, and Pittsburgh Water halted several of its own construction projects to keep detour routes clear. PennDOT's 25-day closure of the Parkway East for the Commercial Street Bridge replacement, routing roughly 100,000 daily drivers onto detours through Point Breeze and Swissvale, moved through its first workday smoothly as Pittsburgh Water paused nearby construction. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/07/13/parkway-east-closure-commercial-street-biidge-traffic/stories/202607130030 - WPXI: https://www.wpxi.com/news/local/pittsburgh-water-temporarily-halts-several-construction-projects-due-parkway-east-closure/2N7RHNCTDBFKJAGVXKFWG2QXMY/ * Turtle Creek Gorge Land Preserved Latest developments: A 23-acre tract of wooded land along the Turtle Creek gorge near Trafford will be permanently preserved after its purchase, TribLive reported Monday. Conservation of 23 acres along the Westmoreland Heritage Trail near Trafford expands protected habitat in the Turtle Creek gorge, adding to the trail's green corridor in Westmoreland County. - TribLive: https://triblive.com/local/westmoreland/westmoreland-heritage-trail-land-acquisition-expands-protected-habitat/ SPORTS ---------------------------------------------------------------- Pirates (50-47) Sun Jul 12 · Brewers 5 · Pirates 14 · Final Skenes wins 2nd straight start after 9-game winless slide, Pirates rout Brewers 14-5 with 10-run 4th https://plaintextsports.com/mlb/2026-07-12/mil-pit Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM https://plaintextsports.com/mlb/2026-07-17/pit-cle Around the Teams: * Pirates Round Out 2026 Draft Class Latest developments: The Pirates added 16 more players on Day 2 of the 2026 MLB Draft, the Post-Gazette detailed. After taking LSU outfielder Derek Curiel fifth overall, the Pirates selected 16 additional players on the draft's second day, filling out a class meant to restock the farm system. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/12/mlb-draft-pirates-marohn-fay-phelps-bryson-moore/stories/202607120098 Team USA: * Revolution Extend Matt Turner's Loan Latest developments: The New England Revolution extended the loan of U.S. men's national team goalkeeper Matt Turner from Lyon through the end of 2026, the club announced Monday. Matt Turner, the USMNT goalkeeper, will stay with MLS side New England Revolution on an extended loan from French club Lyon through 2026, keeping the veteran keeper stateside following the United States' World Cup exit. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49350801/new-england-revolution-extend-contract-usmnt-gk-matt-turner-loan-lyon READING ---------------------------------------------------------------- * Cal Newport -- Why Reading Matters Responding to Rose Horowitch's Atlantic article 'The End of Reading Is Here,' Newport argues that deep, sustained reading builds cognitive capacities that skimming and video cannot, making its decline worth resisting. https://calnewport.com/why-reading-matters/ * Stratechery -- Apple Sues OpenAI, Apple's Real Problem Ben Thompson reads Apple's trade-secret lawsuit against OpenAI as lashing out over a single guilty employee, arguing Apple's deeper trouble is its lagging position in artificial intelligence. https://stratechery.com/2026/apple-sues-openai-apples-real-problem/ * Ed Zitron -- Premium: The Hater's Guide To The Memory Crisis Zitron dissects the hype around AI 'memory' features, contending the capability is oversold and the economics behind it remain shaky. https://www.wheresyoured.at/premium-the-haters-guide-to-the-memory-crisis/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,528.60 ▲ +1.0% Dow 52,690.77 ▲ +0.7% Nasdaq 26,059.80 ▲ +0.8% WTI crude 71.20 ▲ +2.7% EUR/USD 1.1421 ▲ +0.1% GBP/USD 1.3389 ▲ +0.7% USD/JPY 162.25 ▲ +0.2% ================================================================ Generated 2026-07-13 16:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================