infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

The United States, United Kingdom, and seven allied governments warn that Russia's FSB Center 16 is hijacking poorly secured routers to breach critical infrastructure, the same day the EU and UK impose their first joint cyber sanctions on Moscow.


Emerging Trends and Key Updates

Security

1. Russian FSB Center 16 Router Campaign

Nation-State Activity · [apt, nation-state, critical-infrastructure]

Latest developments: On July 13, 2026, CISA, the FBI, and agencies from eight allied countries issued joint advisory AA26-194a warning that Russia's FSB Center 16 is opportunistically compromising vulnerable, poorly configured routers to infiltrate critical-infrastructure networks and stand up residential proxies.

read more

FSB Center 16 cyber actors exploit internet-facing routers with weak configurations across critical sectors worldwide to gain footholds and proxy their traffic. CISA urges operators to patch firmware, replace default credentials, and disable unused management services.

Sources: CISA Advisories · Ars Technica Security · BleepingComputer · ↑ top

2. AI Agent Memory Poisoning and Prompt-Injection Warfare

AI Security · [ai, prompt-injection]

Latest developments: The Hacker News detailed MemGhost on July 13, 2026, an attack that plants persistent false memories in a memory-enabled AI assistant through a single email, as Ars Technica reported defenders now firing context-bombing prompt injections that trick hacking agents into shutting down before they cause harm.

read more

MemGhost coaxes an AI assistant into saving a false fact about its user, hides the change, and quietly steers later answers, while security teams build 'yellow team' tools that turn prompt injection into a defense. Enterprises wiring AI agents to inboxes and tools should constrain memory writes and audit agent actions.

Sources: The Hacker News · Ars Technica Security · Dark Reading · ↑ top

3. Lidl, Centers Laboratory, and Nihon Kotsu Breaches

Data Breaches · [breach, ransomware]

Latest developments: On July 13, 2026, Lidl notified customers in Germany, Belgium, and the Netherlands that attackers stole personal data through a breached IT service provider, Centers Laboratory confirmed the WorldLeaks extortion group took 720 GB affecting 540,000 people, and Japan's largest taxi operator Nihon Kotsu shut down systems after a cyberattack.

read more

Three organizations across retail, healthcare testing, and transportation disclosed intrusions, two of them exposing large volumes of customer records. Affected customers of Lidl and Centers Laboratory should watch for phishing and identity fraud.

Sources: BleepingComputer · SecurityWeek · BleepingComputer · ↑ top

4. ShinyHunters OAuth Abuse Against SaaS

Ransomware and Cybercrime · [oauth, saas, phishing]

Latest developments: Microsoft Threat Intelligence disclosed on July 13, 2026 that threat actors sharing ShinyHunters tradecraft are chaining voice phishing, supply-chain compromise, and misconfigured guest access to abuse OAuth in SaaS applications and steal enterprise data.

read more

ShinyHunters-linked actors target software-as-a-service platforms through vishing, poisoned supply chains, and loose guest permissions, then abuse OAuth application consent to exfiltrate data. Microsoft advises tightening consent policies, guest access, and application monitoring.

Sources: Microsoft Security Blog · ↑ top

5. Russian Coms Spoofing Platform Charges

Ransomware and Cybercrime · [fraud, arrest]

Latest developments: UK authorities charged five people on July 13, 2026 following a National Crime Agency investigation into Russian Coms, a caller-ID spoofing platform that criminals used to place more than 1.8 million scam calls.

read more

Russian Coms let fraudsters mask their numbers and impersonate banks and officials at scale before UK investigators dismantled it. The case underscores caller-ID spoofing services as a backbone of telephone fraud.

Sources: BleepingComputer · ↑ top

6. CISA GitHub Credential Exposure

Data Breaches · [breach, credentials]

Latest developments: Krebs on Security reported on July 13, 2026 that CISA published a postmortem after a contractor left dozens of internal agency credentials, including AWS GovCloud keys, in a public GitHub repository for nearly six months before KrebsOnSecurity notified the agency.

read more

A CISA contractor exposed sensitive federal cloud credentials in a public repository that sat readable for months, and the agency's slow initial response drew scrutiny. The postmortem urges every security team to scan repositories for secrets and rotate keys immediately after exposure.

Sources: Krebs on Security · ↑ top

Business and Politics

U.S. Weighs Strike on Iran's Nuclear Site

Latest developments: Trump reimposed a full naval blockade, announced a 20% Hormuz transit fee, launched a third straight night of strikes, and said he is weighing an attack on an Iranian nuclear site.

read more

President Trump declared the United States the "guardian of the strait" and said Washington will charge ships 20% of their cargo's value for protection in the Strait of Hormuz as U.S. Central Command bombed Iranian targets for a third consecutive night; oil surged nearly 10% past $80 a barrel, Treasury yields rose, and gold fell below $4,000.

Sources: WSJ · WSJ · Financial Times · ↑ top

States Sue to Block Paramount-Warner Merger

Latest developments: California and eleven other states filed suit Monday to stop Paramount's roughly $110 billion takeover of Warner Bros. Discovery, alleging the deal is anticompetitive.

read more

A coalition of a dozen states led by California sued to block Paramount's $110 billion acquisition of Warner Bros. Discovery, arguing the Hollywood merger would raise consumer prices for TV bundles, harm theaters, and lower film and television quality; the suit could delay the deal and cost the studio tens of millions of dollars.

Sources: WSJ · Financial Times · ↑ top

Pittsburgh

Weather

Tonight: Mostly Clear, low 69F.

Tuesday: Sunny, high 94F.

Tuesday Night: Mostly Clear, low 73F.

Business

PJM to Release Capacity Auction Results

Latest developments: PJM Interconnection releases its 2028-29 capacity auction prices Tuesday, July 14, a figure advocates expect to push electricity rates higher.

read more

PJM Interconnection, the grid operator for Pennsylvania and twelve other states, publishes capacity auction results for the 2028-29 delivery year Tuesday; energy and consumer advocates warn the numbers will drive up electricity rates across the region.

Sources: KDKA · ↑ top

Pitt, Penn State Win Performance Funding

Latest developments: The enacted Pennsylvania budget steers millions in new performance-based money to the University of Pittsburgh and Penn State while holding other colleges' appropriations flat.

read more

Pennsylvania's new state budget grants the University of Pittsburgh and Penn State millions in performance-based funds, leaving money for the commonwealth's other colleges stagnant.

Sources: Pittsburgh Post-Gazette · ↑ top

Pittsburgh Sues Fire-Truck Makers

Latest developments: The city of Pittsburgh filed an antitrust suit Monday against several fire-truck manufacturers, alleging they schemed to monopolize the trucks and parts markets.

read more

Pittsburgh sued several fire-apparatus manufacturers and related companies Monday, alleging anticompetitive schemes to consolidate and monopolize the markets for fire trucks and replacement parts.

Sources: WTAE · ↑ top

Around Town

23 Townhouses Proposed for Strip District

Latest developments: Pittsburgh's Planning Commission will hear a proposal Tuesday, July 14, for 23 new townhouses in the Strip District.

read more

A developer goes before the Pittsburgh Planning Commission on Tuesday to pitch 23 new townhouses in the city's Strip District neighborhood.

Sources: TribLive · ↑ top

Pittsburgh Restores 'Family Swim' Pool Rule

Latest developments: Pittsburgh began its "Family Swim" policy Monday, requiring swimmers 15 and under to bring an adult 21 or older to public pools on evenings and weekends.

read more

For the first time since the COVID-19 pandemic, Pittsburgh requires children 15 and under to be accompanied by an adult 21 or older during evening hours and all weekend at city public pools; the city declined to call the "Family Swim" rule a chaperone policy.

Sources: KDKA · ↑ top

Code Orange Air Quality, Heat for Tuesday

Latest developments: The Pennsylvania DEP issued a Code Orange ozone alert for Tuesday, July 14, with a Code Red heat advisory as highs reach the mid-90s.

read more

The Pennsylvania Department of Environmental Protection placed Allegheny, Westmoreland, Armstrong, Fayette, Washington, Beaver, and Butler counties under a Code Orange ozone alert for Tuesday, when sunny skies and highs in the low- to mid-90s will drive ozone buildup; a Code Red heat advisory covers parts of southwestern Pennsylvania.

Sources: WTAE · ↑ top

Sports

Pirates (50-47)

Sun Jul 12 · Brewers 5 · Pirates 14 · Final

Skenes wins 2nd straight start after 9-game winless slide, Pirates rout Brewers 14-5 with 10-run 4th

Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM

Around the Teams

Steelers Weigh Extensions for Young Core

Latest developments: A Post-Gazette video asked whether Troy Fautanu, Zach Frazier, and Payton Wilson have shown enough to earn contract extensions.

read more

The Post-Gazette weighed whether Steelers offensive tackle Troy Fautanu, center Zach Frazier, and linebacker Payton Wilson are ready to earn contract extensions heading into 2026.

Sources: Pittsburgh Post-Gazette · ↑ top

Pirates Eye a Second-Half Push

Latest developments: Post-Gazette writers say a revamped offense has the Pirates' clubhouse eager for the second half and confident they will stay in the wild-card race.

read more

The Post-Gazette's Noah Hiles and beat coverage described a Pirates clubhouse energized entering the All-Star break, crediting a rebuilt lineup for a power surge and arguing the club will stay in the National League Central and wild-card chase.

Sources: Pittsburgh Post-Gazette · Pittsburgh Post-Gazette · ↑ top

Skenes Treats All-Star Game as a Break

Latest developments: Pirates ace Paul Skenes said this year's All-Star Game feels "a little bit more of a vacation," though he still plans to make the most of it in Philadelphia.

read more

Pirates right-hander Paul Skenes, the club's lone All-Star selection, told the Post-Gazette the Philadelphia All-Star Game feels more like a rest than last year's, and he intends to enjoy the showcase.

Sources: Pittsburgh Post-Gazette · ↑ top

Team USA

USWNT to Host Spain Twice in October

Latest developments: U.S. Soccer announced Monday the U.S. women's national team will host world No. 1 Spain in two October friendlies.

read more

The United States women's national team will play reigning World Cup champions and top-ranked Spain in a pair of home friendlies in October, U.S. Soccer announced Monday.

Sources: ESPN · ↑ top

Projecting the USMNT's 2030 Roster

Latest developments: Days after the U.S. men's home World Cup exit, ESPN projected 30 players who could represent the United States at the 2030 World Cup.

read more

With the U.S. men's national team's 2026 home World Cup over, ESPN looked ahead to the 2030 tournament, naming 30 players who could make the American roster four years from now.

Sources: ESPN · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,524.19  ▲ +0.5%
Dow        52,579.32  ▲ +0.1%
Nasdaq     26,010.20  = +0.0%
WTI crude      71.20  ▲ +2.7%
EUR/USD       1.1421  ▲ +0.1%
GBP/USD       1.3389  ▲ +0.7%
USD/JPY       162.25  ▲ +0.2%