================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, July 15, 2026 - 6:06 AM EDT ================================================================ Artificial intelligence drove Microsoft to a record 622-flaw Patch Tuesday and now runs intrusions on its own, as SonicWall, SharePoint, and decade-old Secure Boot zero-days force emergency patching worldwide. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Artificial intelligence now works both ends of the exploit chain, uncovering flaws behind Microsoft's record 622-CVE Patch Tuesday while Check Point documents attackers autonomously generating thousands of exploitation commands. see: Microsoft's Record 622-Flaw Patch Tuesday; AI Runs Attacks and Botnets on Its Own * [TREND] Actively exploited zero-days keep hitting exposed gear, with SonicWall's SMA1000 appliances under attack even as researchers reveal a decade-old Secure Boot bypass leaving most systems trivially exploitable. see: SonicWall SMA1000 Zero-Days Under Active Attack; Decade-Old Secure Boot Bypass Exposed * [TREND] Criminals keep salting open developer ecosystems, poisoning four asyncapi npm packages and nearly 300 impostor GitHub repositories, while fresh stealers OkoBot and CrashStealer hunt crypto wallets and macOS keychains. see: npm and GitHub Poisoned to Spread Malware; New Stealers Hunt Crypto Wallets and Keychains * [TREND] Global markets stay tense as the U.S.-Iran war drives Brent crude near $86 amid renewed strikes, while China's growth slowed to 4.3%, its weakest since 2022. see: U.S.-Iran War Escalates as Oil Nears $86; China's Growth Slows to Weakest Since 2022 * [UPDATE (new)] Allegheny County Council pulled a spending-cap measure from November's ballot, parents filed a civil-rights complaint over Pittsburgh Public Schools closures, and PennDOT preps the Parkway East bridge demolition. see: County Council Drops Spending-Cap Ballot Measure; Civil Rights Complaint Targets School Closures; Explosive Demolition of Parkway East Bridge Set SECURITY ---------------------------------------------------------------- 1. MICROSOFT'S RECORD 622-FLAW PATCH TUESDAY Vulnerabilities and Exploits · [patch, zero-day] Latest developments: Microsoft shipped fixes on July 14, 2026 for a record 622 CVEs by its own count—Krebs tallies 570 Windows-specific holes, nearly triple June's prior record—including two zero-days already under attack, Active Directory Federation Services flaw CVE-2026-56155 and SharePoint Server flaw CVE-2026-56164, plus a publicly disclosed BitLocker bug; Microsoft blocked the update on some Dell PCs after shutdowns, and CISA urged SharePoint hardening against an exploitation chain of CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164. The monthly release patches Windows and related software; Microsoft credits AI-assisted discovery for the ballooning counts and incident responders for both live zero-days. Administrators should prioritize the ADFS and SharePoint fixes and, for on-premises SharePoint, apply CISA's hardening steps. - The Hacker News: https://thehackernews.com/2026/07/microsoft-patches-record-622-flaws.html - Krebs on Security: https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/ - CISA Advisories: https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-some-dell-devices-shut-down-after-windows-update/ 2. SONICWALL SMA1000 ZERO-DAYS UNDER ACTIVE ATTACK Vulnerabilities and Exploits · [zero-day, patch] Latest developments: SonicWall confirmed on July 14, 2026 active zero-day exploitation of two SMA1000 series flaws—server-side request forgery CVE-2026-15409 rated 10.0 and code-injection CVE-2026-15410, one of which enables unauthenticated remote command execution—released fixed firmware, and told customers showing indicators of compromise to re-image appliances and reset all passwords, as CISA added both to its Known Exploited Vulnerabilities catalog. SonicWall's Secure Mobile Access 1000 appliances sit at the network edge for remote access, making unauthenticated command execution especially dangerous. Organizations must upgrade immediately and hunt for compromise. - The Hacker News: https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/ - SecurityWeek: https://www.securityweek.com/sonicwall-issues-urgent-sma-patch-warning-for-two-zero-day-exploits/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/14/sonicwall-sma-attacks-via-cve-2026-15409-cve-2026-15410/ 3. AI RUNS ATTACKS AND BOTNETS ON ITS OWN AI Security · [ai, botnet] Latest developments: Check Point's AI Security Report 2026, published July 15, 2026, documented intrusions in which AI autonomously ran exploitation workflows generating thousands of commands across dozens of sessions with minimal human direction, while Palo Alto's Unit 42 dissected TuxBot v3, an IoT botnet framework built with LLM assistance, and Michigan Technological University showed an overthinking attack that ties up a vision-language-model robot for over a minute. Attackers are wiring capable models into every stage of the kill chain and abusing how robots read text in camera frames. Defenders face faster, less-supervised campaigns and a new class of denial-of-service against embodied AI. - Help Net Security: https://www.helpnetsecurity.com/2026/07/15/check-point-ai-security-report-2026/ - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/tuxbot-v3-evolution-iot-botnet/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/15/robot-ai-overthinking-attack/ 4. NPM AND GITHUB POISONED TO SPREAD MALWARE Software Supply Chain · [supply-chain, malware] Latest developments: OX Security, SafeDep, Socket, and StepSecurity found four compromised @asyncapi npm packages delivering a multi-stage botnet loader on July 15, 2026, as a threat actor stood up nearly 300 fake GitHub repositories impersonating legitimate software and security projects to push infostealers, and Blackpoint Cyber flagged LabubaRAT, a Rust remote-access trojan posing as NVIDIA software. The affected npm packages include @asyncapi/generator@3.3.1 and @asyncapi/specs, widely pulled by API tooling. Developers should pin known-good versions, scrutinize GitHub project provenance, and treat NVIDIA-branded binaries from untrusted sources as suspect. - The Hacker News: https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/ - The Hacker News: https://thehackernews.com/2026/07/labubarat-masquerades-as-nvidia.html 5. NEW STEALERS HUNT CRYPTO WALLETS AND KEYCHAINS Ransomware and Cybercrime · [infostealer, cryptocurrency] Latest developments: Kaspersky's GReAT team detailed OkoBot on July 15, 2026, a framework that uses TookPS to exfiltrate seed phrases, watch Chromium browsers, and drop the Rilide stealer, while Jamf Threat Labs moved CrashStealer—a macOS infostealer posing as Apple's crash-reporting tool to grab passwords, Keychain data, and wallets—from development into in-the-wild use, and KU Leuven found 85 browser-extension wallets leaking addresses that enable cross-site tracking. Cryptocurrency users face a widening set of stealers across Windows and macOS plus privacy leaks baked into popular wallet extensions. Users should verify software sources, isolate wallet browsers, and treat seed phrases as never-typed secrets. - Securelist (Kaspersky): https://securelist.com/okobot-framework-targets-cryptocurrency-wallets/120660/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/14/crashstealer-macos-infostealer-password-theft/ - The Hacker News: https://thehackernews.com/2026/07/study-of-85-crypto-wallet-extensions.html 6. DECADE-OLD SECURE BOOT BYPASS EXPOSED Vulnerabilities and Exploits · [vulnerability, patch] Latest developments: Researchers revealed on July 14, 2026 that Microsoft failed for roughly a decade to revoke old, forgotten signed shims, leaving Secure Boot trivially bypassable on most systems, and separately catalogued 11 old Microsoft-signed Linux UEFI applications that let an attacker run untrusted code during boot and plant bootkits. Secure Boot verifies that only trusted code loads at startup; the stale Microsoft-signed components let attackers defeat that check and install malware that survives reinstalls. Affected systems need the revoked-certificate and firmware updates. - Ars Technica Security: https://arstechnica.com/security/2026/07/microsoft-secure-boot-has-been-broken-for-most-of-its-existence/ - The Hacker News: https://thehackernews.com/2026/07/11-old-microsoft-signed-linux-uefi.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S.-Iran War Escalates as Oil Nears $86 Latest developments: Tehran threatened to halt all Middle East energy exports after the U.S. reimposed its naval blockade of Iranian ports, Brent crude climbed near $86 a barrel on a fourth straight night of U.S. strikes, and Senate Democrats blocked a $1 trillion defense bill in protest of the war. The United States has battled Iran for weeks over control of the Strait of Hormuz, the chokepoint for roughly a fifth of the world's seaborne liquefied natural gas, and Iranian attacks have already erased 17% of Qatar's LNG export capacity as Europe scrambles to fill storage before winter. President Trump also moved to withdraw all U.S. forces from Iraq by the end of September, closing a 23-year presence. - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-irans-attacks-on-shipping-in-strait-of-hormuz-e334b6d7?mod=rss_markets_main * China's Growth Slows to Weakest Since 2022 Latest developments: China's economy expanded 4.3% in the second quarter, one of its lowest rates in decades and below Beijing's target range, as feeble domestic demand offset surging exports. China's gross domestic product cooled more than economists expected, undercutting Beijing's roughly 5% annual goal and pointing to deepening weakness in consumer spending and property that ripples through global commodity and trade flows. - WSJ World News: https://www.wsj.com/world/china/chinas-growth-cools-more-than-expected-in-second-quarter-132e0670 - FT World: https://www.ft.com/content/5b12e491-dcd0-4e0c-a464-96ec37b737ab PITTSBURGH ---------------------------------------------------------------- Weather: Today: Sunny, high 97F. Tonight: Partly Cloudy then Patchy Smoke, low 75F. Thursday: Areas Of Smoke, high 95F. Business: * Viral Reuben Boosts Spring Garden Gas Station Latest developments: A viral internet video has sent local customers flocking to Marshall's, a Shell gas station in Pittsburgh's Spring Garden neighborhood, whose Reuben the Pittsburgh City Paper now judges the city's best. Marshall's, a Shell station deli in Spring Garden, sells what Pittsburgh City Paper calls the region's best Reuben sandwich, and the online attention has driven a surge of new business. - Pittsburgh City Paper: https://www.pghcitypaper.com/food-drink/food/pittsburghs-best-reuben-sandwich-is-sold-out-of-marshalls-shell-gas-station-in-spring-garden/ Around town: * County Council Drops Spending-Cap Ballot Measure Latest developments: Allegheny County Council voted Tuesday to pull from the November ballot a proposed charter amendment that would have asked voters to lift the 0.4% annual limit on council's operating budget. In a swift reversal, Allegheny County Council abandoned its plan to let voters eliminate the cap that holds its own operating-budget increases to 0.4% a year. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-local/2026/07/14/allegheny-county-council-spending-cap-repeal/stories/202607140054 - TribLive: https://triblive.com/local/valley-news-dispatch/allegheny-county-council-votes-to-retract-november-ballot-measure/ * Civil Rights Complaint Targets School Closures Latest developments: Parents and education advocacy groups filed a complaint with the Pennsylvania Human Relations Commission on Tuesday seeking to halt Pittsburgh Public Schools' plan to close 12 schools across nine buildings. Less than two months after the Pittsburgh Public Schools board approved closing 12 schools in nine buildings, opponents allege the plan discriminates and asked the state to stop it. - WPXI: https://www.wpxi.com/news/local/civil-rights-organizations-file-complaint-against-pittsburgh-public-schools-ahead-closures/5RWWHRBG6VEQ7DSHZAK4UCABLI/ - WTAE: https://www.wtae.com/article/parents-advocacy-groups-complaint-pittsburgh-public-schools-closure-plan/71937109 * Explosive Demolition of Parkway East Bridge Set Latest developments: PennDOT scheduled the explosive demolition of the Interstate 376 Commercial Street Bridge for Wednesday, July 15, between 1 p.m. and 9 p.m., weather permitting, with a livestream planned. Crews will blow up the Commercial Street Bridge on the closed Parkway East as part of the $95 million replacement that keeps I-376 shut through August 3, pushing roughly 100,000 daily drivers onto detours. - KDKA: https://www.cbsnews.com/pittsburgh/news/parkway-east-376-commercial-street-bridge-demolition/ Events: * Quantum Theatre Stages 'The Tempest' Latest developments: Quantum Theatre is mounting Shakespeare's 'The Tempest' on a blue circular stage at the Carrie Blast Furnaces, the final production of Karla Boos's tenure as the company's founding artistic director. Quantum Theatre performs 'The Tempest' outdoors against the rust-covered Carrie Blast Furnaces in Rankin, capping Karla Boos's run leading the site-specific company she founded. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/quantum-theatres-karla-boos-embarks-on-final-voyage-with-the-tempest/ * Bloop Vintage-Tech Museum in Penn Hills Latest developments: Bloop, a burgeoning grassroots museum of vintage technology, is showcasing its collection for visitors in Penn Hills. In Penn Hills, a homegrown museum called Bloop displays vintage computers and technology, a new destination for enthusiasts of old electronics. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/business/tech-news/2026/07/13/bloop-penn-hills-grassroots-museum-vintage-technology/stories/202607120088 SPORTS ---------------------------------------------------------------- Pirates (50-47) Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM https://plaintextsports.com/mlb/2026-07-17/pit-cle Around the Teams: * Rookie WR Germie Bernard a Camp Focus Latest developments: A Post-Gazette training-camp countdown argues rookie wide receiver Germie Bernard becomes key to the Steelers offense alongside DK Metcalf and quarterback Aaron Rodgers as camp opens in Latrobe. As the Steelers prepare to report to Saint Vincent College in Latrobe, the Post-Gazette makes the case that rookie receiver Germie Bernard turns into an important piece of an offense built around DK Metcalf and Aaron Rodgers. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/15/training-camp-countdown-germie-bernard-wr-metcalf-rodgers-latrobe/stories/202607150006 * Braxton Ashcraft's Road to All-Star Debut Latest developments: The Post-Gazette detailed Pirates pitcher Braxton Ashcraft's path from high school football stardom through a string of injuries to his first All-Star selection. Pirates right-hander Braxton Ashcraft, once a football star before injuries slowed his early career, reached his first MLB All-Star Game, the subject of a Post-Gazette profile. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/14/allstar-braxton-ashcraft-football-mlb/stories/202607130045 Team USA: * USA Basketball Names Olympic Assistants Latest developments: USA Basketball is expected to name Oklahoma City's Mark Daigneault, Detroit's JB Bickerstaff, and Gonzaga's Mark Few as assistant coaches under head coach Erik Spoelstra for the 2028 Los Angeles Olympics. Team USA's men's basketball program set its coaching staff for the Los Angeles Games, with Miami Heat coach Erik Spoelstra leading and Daigneault, Bickerstaff, and Few assisting, ESPN's sources reported. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49360656/daigneault-bickerstaff-help-coach-team-usa * Search Begins for USMNT's Next Coach Latest developments: With Mauricio Pochettino's future uncertain after the U.S. men's round-of-16 World Cup exit, ESPN named 11 coaches U.S. Soccer could hire to replace him. ESPN floated 11 candidates to take over the U.S. men's national team should Mauricio Pochettino depart following the Americans' 4-1 loss to Belgium at their home World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49344382/who-new-usmnt-coach-11-candidates-pochettino-world-cup-2026 * Balogun Says Red-Card Furor Hurt USMNT Latest developments: U.S. striker Folarin Balogun said he predicted President Trump's push to overturn his World Cup suspension would 'cause a lot of controversy,' and that the fallout affected his teammates. Folarin Balogun of AS Monaco, whose red-card ban FIFA reversed after Trump intervened, said the resulting controversy weighed on the U.S. squad during its home World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49358886/united-states-folarin-balogun-world-cup-ban-overturn-affected-teammates READING ---------------------------------------------------------------- * Stratechery -- IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems Ben Thompson dissects IBM's disappointing preliminary results, arguing its enduring mainframe franchise still forms a moat even as the company confronts multiple structural problems in the AI era. https://stratechery.com/2026/ibm-misses-ibms-mainframe-moat-ibms-many-ai-problems/ * Cal Newport -- Why Reading Matters Newport responds to Rose Horowitch's Atlantic piece 'The End of Reading is Here,' defending the cognitive value of deep reading against claims that it has become obsolete. https://calnewport.com/why-reading-matters/ * Ed Zitron -- Premium: The Hater's Guide To The Memory Crisis Zitron delivers a skeptical, detailed breakdown of the memory-chip shortage pushing up hardware costs amid the AI buildout, casting doubt on the industry's rationale. https://www.wheresyoured.at/premium-the-haters-guide-to-the-memory-crisis/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,524.19 ▲ +0.5% Dow 52,579.32 ▲ +0.1% Nasdaq 26,010.20 = +0.0% WTI crude 74.90 ▲ +8.3% EUR/USD 1.1410 ▼ -0.1% GBP/USD 1.3379 ▲ +0.4% USD/JPY 162.31 ▲ +0.2% ================================================================ Generated 2026-07-15 06:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================