daily plain-text briefing: security, markets, business, and pittsburgh
Attackers piled onto freshly disclosed SharePoint, SonicWall, and Oracle flaws while AI tools powered both new malware and a White House vulnerability clearinghouse.
Latest developments: CISA on July 15, 2026 added Oracle E-Business Suite privilege-management flaw CVE-2026-46817 and KNX protocol flaw CVE-2023-4346 to its Known Exploited Vulnerabilities catalog, SonicWall confirmed attackers are exploiting two SMA 1000 zero-days—including SSRF bug CVE-2026-15409 rated 10.0 that yields arbitrary command execution—and Zoom warned of a critical unauthenticated account-takeover flaw in its Windows desktop client and SDK.
CISA urged administrators to patch three actively exploited on-premises SharePoint Server flaws that attackers chain for remote code execution on internet-exposed instances. Organizations running SonicWall SMA 1000 appliances, Oracle E-Business Suite, or the Zoom Windows client should apply vendor fixes immediately.
Sources: The Hacker News · BleepingComputer · CISA Advisories · BleepingComputer · ↑ top
Latest developments: Microsoft blocked this month's Windows 11 security updates on some Dell devices after the patches triggered shutdowns and performance drops, Ars Technica detailed the LegacyHive proof-of-concept as a powerful privilege-escalation primitive against the Windows User Profile Service, Siemens, Schneider Electric, and Rockwell Automation fixed dozens of ICS flaws on the same Patch Tuesday, and Mozilla and Google shipped Firefox 152 and Chrome 150 to close critical flaws whose exploit code is already public.
Microsoft's record 622-CVE July Patch Tuesday continues to reverberate as researcher Chaotic Eclipse's LegacyHive PoC surfaces a day later. Administrators should stage the Windows updates, patch browsers and ICS gear, and heed the Dell shutdown block.
Sources: Ars Technica Security · BleepingComputer · SecurityWeek · The Hacker News · ↑ top
Latest developments: Palo Alto Networks' Unit 42 dissected TuxBot v3 Evolution, an IoT botnet framework whose LLM-written code still carried the model's safety disclaimer, and Dark Reading detailed Anthropic's now-patched PromptFiction flaw that automatically fed malicious prompts to Claude agents, both surfacing alongside the still-unpatched Cursor code-execution bug and the Gemini CLI abuse by Russian-speaking actor bandcampro.
Threat actors now build malware with large language models and bend AI developer tools into attack vectors, including a git.exe that Cursor silently runs from a cloned repository root on Windows. Developers should treat cloned repositories as untrusted and keep AI coding assistants patched and sandboxed.
Sources: Unit 42 (Palo Alto) · Dark Reading · The Hacker News · BleepingComputer · ↑ top
Latest developments: Five malicious @asyncapi npm package versions delivered a multi-stage botnet loader and an info-stealing remote access trojan, Unit 42 published an updated npm threat landscape tracing wormable malware and CI/CD persistence after Shai Hulud, and Arctic Wolf found a financially motivated actor impersonating 292 brands across GitHub repositories to push smash-and-grab infostealers.
Open-source registries and code-hosting platforms remain prime malware-delivery channels, with the newly documented LabubaRAT posing as NVIDIA software to plant a reusable Windows foothold. Developers should pin dependency versions and verify download sources.
Sources: BleepingComputer · Unit 42 (Palo Alto) · Help Net Security · Help Net Security · ↑ top
Latest developments: The White House launched Gold Eagle on July 15, 2026, an AI-driven clearinghouse that lets industry, critical-infrastructure operators, and government agencies detect, prioritize, and patch vulnerabilities faster, a program stemming from the AI-focused executive order President Trump signed June 2, 2026.
Gold Eagle applies artificial intelligence to coordinate vulnerability disclosure and remediation across the public and private sectors. It arrives with fresh CISA and NSA guidance urging software makers to run coordinated vulnerability disclosure programs with outside researchers.
Sources: SecurityWeek · The Record · CISA Advisories · ↑ top
Latest developments: Dutch police arrested the alleged mastermind and several members of an international crypto-investment fraud ring that ran about two dozen call centers and employed more than 700 people posing as professional financial advisers, stealing over €100 million from tens of thousands of victims since at least 2021.
The scheme operated like a legitimate cross-border business, defrauding tens of thousands of victims. It caps a week of European fraud takedowns, including a €140 million network the Spanish National Police dismantled days earlier.
Sources: BleepingComputer · The Record · ↑ top
Latest developments: U.S. forces struck a tanker bound for Iran's Kharg Island oil terminal under the renewed blockade, and traders warn the commercial stockpiles that cushioned the war's early shocks now run low as the Strait of Hormuz closes again.
The United States reimposed a naval blockade of Iran and stepped up airstrikes after Iranian forces fired on ships in the Strait of Hormuz, the passage for roughly a fifth of the world's seaborne oil; crude climbed as thinning stockpiles raised the threat of a global supply crunch.
Sources: FT World · FT World · ↑ top
Tonight: Partly Cloudy, low 75F.
Thursday: Mostly Sunny then Smoke, high 92F.
Thursday Night: Smoke, low 67F.
Latest developments: Re:Build Manufacturing has moved into five renovated buildings at the New Kensington Advanced Manufacturing Park and now turns out drones and drone components, the fruit of an $81 million investment made in 2023.
Re:Build Manufacturing's arrival at the New Kensington Advanced Manufacturing Park, seeded by an $81 million investment in 2023, is reviving the New Kensington and Arnold manufacturing base with drone and drone-component production.
Latest developments: A construction crew began work Wednesday, July 15, taking down signage at the former Rite Aid pharmacy on Pittsburgh Street in Cheswick, the site of the Alle-Kiski Valley's next Dollar General.
Crews started building a Dollar General at the former Rite Aid on Pittsburgh Street in Cheswick, the discount chain's next outlet in the Alle-Kiski Valley.
Latest developments: The Greater Pittsburgh Community Food Bank will direct a $1 million donation toward a new digital food academy.
The Greater Pittsburgh Community Food Bank, the region's hunger-relief nonprofit, plans to spend a $1 million donation building a digital food academy to expand how it trains and reaches the people it serves.
Latest developments: PennDOT canceled the Commercial Street Bridge implosion shortly before 8:30 p.m. Wednesday, July 15, after opening an eight-hour window, and rescheduled the explosive demolition for Thursday morning while the contractor finishes safety preparations.
PennDOT is replacing the Commercial Street Bridge on the Parkway East (I-376) and had planned to implode the old span; the blast now moves to the morning of Thursday, July 16, with no exact time announced.
Sources: KDKA · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Pennsylvania Department of Environmental Protection declared a Code Red air quality alert for all of Western Pennsylvania on Thursday, July 16, as smoke from wildfires in Canada and Minnesota pushes unhealthy pollution across the state.
Wildfire smoke drifting from Canada and Minnesota will drive Pennsylvania to Code Red air quality Thursday, July 16, a level the state Department of Environmental Protection calls unhealthy for everyone.
Latest developments: The Pennsylvania Department of Education will conduct an in-depth analysis of consolidating the Duquesne City and McKeesport Area school districts, giving the troubled Duquesne district a potential partner across the Monongahela River.
Pennsylvania's education department is studying a merger of the Duquesne City and McKeesport Area school districts; Duquesne, which has run for years without its own high school, would gain McKeesport as a partner.
Latest developments: Picklesburgh runs Thursday through Sunday, July 16-19, in Downtown Pittsburgh, with hours of noon to 10 p.m. and noon to 6 p.m. across the four days.
Picklesburgh, Pittsburgh's pickle-themed street festival, takes over Downtown from Thursday, July 16, through Sunday, July 19, with vendors serving sour, sweet, and spicy fare.
Sources: NEXTpittsburgh Events · ↑ top
Latest developments: A staging of the musical 'Sweeney Todd' runs this weekend at the Geyer Performing Arts Center, directed by Chris Schaffer with Joey Estok and Kayla Brill in the lead roles.
The Geyer Performing Arts Center presents 'Sweeney Todd' this weekend, directed by Chris Schaffer and led by performers Joey Estok and Kayla Brill.
Pirates (50-47)
Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM
Latest developments: A Post-Gazette training-camp countdown argues rookie wide receiver Germie Bernard will be a key piece of the Steelers offense as camp opens in Latrobe, working alongside DK Metcalf and quarterback Aaron Rodgers.
The Post-Gazette profiled rookie wide receiver Germie Bernard, making the case he could become integral to the Steelers' passing game under quarterback Aaron Rodgers as training camp begins in Latrobe.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Super Bowl-winning coach Jon Gruden joined Cam Heyward on 'Not Just Football' for war stories from Green Bay, the Raiders, and Tampa Bay, including trading for Antonio Brown, coaching Brett Favre, and his two biggest coaching regrets.
On Steelers defensive lineman Cam Heyward's 'Not Just Football' podcast, former Raiders and Buccaneers coach Jon Gruden recounted career war stories, from acquiring wide receiver Antonio Brown to coaching quarterback Brett Favre.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: The Post-Gazette traced Pirates right-hander Braxton Ashcraft's path from football stardom through a string of injuries to his first All-Star Game in Philadelphia.
Pirates pitcher Braxton Ashcraft, once a gridiron standout who fought back through repeated injuries, made his first All-Star team, representing Pittsburgh at the Midsummer Classic in Philadelphia.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: With the United States men's team out of its home World Cup at the round of 16 and coach Mauricio Pochettino's contract expiring, ESPN laid out 11 candidates U.S. Soccer could weigh to replace him.
The U.S. men's national team's home World Cup ended in the round of 16, and with Mauricio Pochettino's contract done, U.S. Soccer faces a coaching search that ESPN says could draw from a pool of 11 names.
Sources: ESPN Soccer · ↑ top
S&P 500 7,550.07 ▲ +0.7% Dow 52,557.99 ▼ -0.3% Nasdaq 26,147.58 ▲ +0.8% WTI crude 74.90 ▲ +8.3% EUR/USD 1.1414 = -0.0% GBP/USD 1.3389 ▲ +0.3% USD/JPY 162.28 ▲ +0.2%