daily plain-text briefing: security, markets, business, and pittsburgh
Microsoft's record 622-CVE Patch Tuesday collides with a same-day Windows privilege-escalation zero-day proof-of-concept as attackers weaponize AI coding tools and crypto-wallet malware.
Latest developments: Researcher Chaotic Eclipse, also known as Nightmare-Eclipse, published a proof-of-concept named LegacyHive for a Windows User Profile Service arbitrary-hive-load privilege-escalation flaw hours after Microsoft shipped a record 622-CVE Patch Tuesday that closed three zero-days, two of them already under active attack.
Microsoft's July release triples June's previous high of roughly 200 CVEs and carries 57 critical bugs; administrators should grab the two exploited zero-days first and treat the fresh LegacyHive primitive as imminent.
Sources: Ars Technica Security · The Hacker News · The Record · Dark Reading · ↑ top
Latest developments: Researchers found that opening a malicious cloned repository in Anysphere's Cursor AI editor on Windows silently runs any git.exe planted in the project root, a flaw that stays unpatched, as BleepingComputer traced a Russian-speaking actor called bandcampro who bent Google's Gemini CLI into a hacking agent and small-scale botnet operator.
The Cursor flaw executes attacker code with the developer's source, SSH keys, and cloud tokens the moment a project opens and re-runs it as long as the project stays open; developers should avoid opening untrusted repositories until a patch lands.
Sources: The Hacker News · SecurityWeek · BleepingComputer · Dark Reading · ↑ top
Latest developments: Spanish National Police dismantled a network that stole and laundered about €140 million through fake investment platforms, CEO fraud, and man-in-the-middle attacks, arresting four people across Portugal, Spain, and Panama, as U.S. prosecutors unsealed charges against three Russian nationals accused of running bulletproof hosting that shielded ransomware gangs and caused over $62 million in damage.
The Spanish operation began after officers flagged 19 companies whose finances resembled money laundering; the parallel U.S. charges target previously sanctioned Russian operators who rented infrastructure to extortion crews.
Sources: Help Net Security · BleepingComputer · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Progress Software confirmed a zero-day vulnerability drove the ShareFile Storage Zones Controller shutdown it ordered on July 10, rolled out a fix, and began restoring access, while Fortinet, Ivanti, and ServiceNow shipped patches including a critical remote-code-execution flaw in the ServiceNow AI platform.
Progress had told customers to power off on-premises Storage Zone Controllers amid a credible external threat; ShareFile admins should apply the fix before re-enabling servers, and ServiceNow customers should close the AI-platform RCE.
Sources: SecurityWeek · SecurityWeek · ↑ top
Latest developments: Kaspersky's GReAT team detailed OkoBot, a malware framework running on Windows since April 2025 that injects seed-phrase phishing pages into the genuine Ledger and Trezor desktop apps to steal recovery phrases, pairing the TookPS loader, Chromium-browser monitoring, and the Rilide stealer.
OkoBot waits for a victim to plug in a hardware wallet, then pops a malicious prompt from inside the wallet's own software to capture the recovery phrase; crypto holders should treat any in-app seed request on a general-purpose PC as fraud.
Sources: Securelist (Kaspersky) · The Hacker News · ↑ top
Latest developments: A coalition of 42 state attorneys general reached an $18 million settlement with genetic-testing firm 23andMe over the cybersecurity failings that led to its massive data breach.
The breach exposed genetic and personal data from millions of 23andMe customers; the multistate settlement resolves state claims and signals mounting regulatory cost for consumer-genomics data protection failures.
Sources: The Record · ↑ top
Latest developments: Trump, still favoring diplomacy, was briefed this week on options that include sending ground troops into Iran and bombing the nuclear-linked Pickaxe Mountain site, a step beyond the naval blockade and airstrikes already under way.
The United States and Iran remain at war after Tehran's attacks on shipping through the Strait of Hormuz; Washington reimposed a full naval blockade of Iran's ports after dropping a planned 20% transit fee, and oil edged higher as traders braced for the next escalation.
Sources: WSJ World News · WSJ Markets · ↑ top
This Afternoon: Sunny, high 96F.
Tonight: Partly Cloudy, low 75F.
Thursday: Mostly Sunny then Smoke, high 92F.
Latest developments: Founder Jurgen Koster sat down with KDKA to explain how his online Pittsburgh superstore, Yinz Mart, has begun drawing attention from shoppers nationwide.
Yinz Mart is a web store built around Pittsburgh-themed merchandise, one of a crop of local e-commerce ventures leaning on the region's brand identity.
Latest developments: Pittsburgh Magazine profiled Roux Orleans, where chef Mike "Big EZ" Barnes is packing the dining room with jambalaya, blackened catfish, gumbo, and gator po'boys.
Roux Orleans is a New Orleans-style Cajun restaurant whose brisk business signals continued appetite for destination dining in the Pittsburgh market.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: Mayor Corey O'Connor announced July 15 that Chief Darryl Jones, on paid administrative leave since June, will retire September 16 after a review of the bureau's finances and management.
Darryl Jones has led the Pittsburgh Bureau of Fire for nearly 20 years; his departure follows an internal investigation into the bureau's financial, operational, and administrative practices.
Sources: Pittsburgh Post-Gazette · KDKA · ↑ top
Latest developments: PennDOT set an explosive demolition of the old Commercial Street Bridge for the evening of July 15, between 6 and 9 p.m., and livestreamed the blast for the public.
The implosion falls midway through PennDOT's 25-day closure of the Parkway East (I-376) between the Edgewood/Swissvale and Squirrel Hill exits for the bridge's replacement.
Latest developments: The Allegheny County District Attorney's Office charged William Schneider, 45, and William Petruskie, 57, with more than 100 felonies in a scheme that fraudulently transferred 43 property deeds without owners' knowledge.
Investigators say Schneider used counterfeit notary stamps bought on Amazon to file the bogus transfers and Petruskie created an LLC listed as owner on 10 of the properties across Allegheny County.
Sources: KDKA · Pittsburgh Post-Gazette · ↑ top
Latest developments: As the festival opens Thursday, two Primanti Bros. locations are serving sandwiches on limited-edition pickle bread through Sunday, or while supplies last.
Picklesburgh, the pickle-themed street festival, runs Thursday, July 16, through Sunday, July 19, in Downtown Pittsburgh, noon to 10 p.m. Thursday through Saturday and noon to 6 p.m. Sunday.
Sources: NEXTpittsburgh Events · WPXI · ↑ top
Latest developments: The Frick released its August programming, including Summer Fridays at The Frick and a new soundbathing and stargazing concert, and urges visitors to buy tickets in advance.
The Frick Pittsburgh Museum and Gardens sits in Point Breeze and runs a summer calendar of outdoor concerts, films, and gallery events on its historic grounds.
Sources: Pittsburgh Magazine · ↑ top
Pirates (50-47)
Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM
Latest developments: Post-Gazette columnist Noah Hiles writes that MLB's brewing labor war over a salary cap is already exhausting, with commissioner Rob Manfred and MLBPA lead negotiator Bruce Meyer far apart.
The next collective bargaining agreement looms as a flashpoint, and Hiles frames the cap standoff as an ominous backdrop for a small-payroll club like the Pirates.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN's Transfer Talk reports Juventus are considering a move for AS Monaco striker Folarin Balogun, adding the Turin club to earlier suitors Paris Saint-Germain, Tottenham, and Chelsea.
Balogun, a forward for the United States men's national team, could change clubs this summer as European sides weigh bids after the World Cup.
Sources: ESPN Soccer · ↑ top
Latest developments: ESPN detailed how rapper Flavor Flav became the driving force behind SHE Weekend, an inaugural Las Vegas showcase and his biggest show of support yet for the U.S. women's national ice hockey team.
Flavor Flav has grown into one of the most visible boosters of American women's sports, and SHE Weekend puts Team USA women's hockey at the center of the event.
Sources: ESPN Olympics · ↑ top
S&P 500 7,532.13 ▲ +0.4% Dow 52,495.94 ▼ -0.4% Nasdaq 26,067.87 ▲ +0.2% WTI crude 74.90 ▲ +8.3% EUR/USD 1.1414 = -0.0% GBP/USD 1.3389 ▲ +0.3% USD/JPY 162.28 ▲ +0.2%