daily plain-text briefing: security, markets, business, and pittsburgh
A ransomware attack on Coca-Cola's Fairlife subsidiary halted US dairy production, underscoring how quickly digital intrusions now force physical shutdowns.
Latest developments: Microsoft Defender Experts tracked surging ACR Stealer campaigns using ClickFix lures from late April through mid-June 2026, Elastic Security Labs detailed the new modular TELEPUZ malware spreading the same way since late April, and Ukraine's defenders caught Sandworm dressing a copy-paste PowerShell command as a CAPTCHA check.
ClickFix lures instruct victims to paste attacker commands into Terminal or the Run box, delivering credential and crypto stealers such as ACR Stealer, TELEPUZ, ClickLock, and OkoBot. Train users to never paste unfamiliar commands and restrict scripting engines.
Sources: Microsoft Security Blog · The Hacker News · The Record · The Hacker News · ↑ top
Latest developments: Zoom patched CVE-2026-53412, a 9.8-severity input-validation flaw enabling account takeover across its Windows Workplace, VDI, and Meeting SDK clients; Splunk and F5 shipped fixes for critical account-takeover and NGINX and BIG-IP bugs; and researchers showed old Microsoft-signed UEFI shim bootloaders let attackers bypass Secure Boot on any operating system.
A burst of vendor patches followed CISA's order for federal agencies to fix an actively exploited Oracle E-Business Suite flaw by Saturday, July 18. Administrators should apply the Zoom, Splunk, F5, and Oracle updates immediately and revoke vulnerable UEFI shims.
Sources: The Hacker News · SecurityWeek · SecurityWeek · BleepingComputer · ↑ top
Latest developments: OpenAI disclosed GPT-Red, an internal automated red-teamer it uses to find and fix prompt-injection holes before hardening GPT-5.6 Sol, and Microsoft published least-privilege guidance for binding AI agent identity, access, and tools, both landing days after the Claude for Chrome extension flaw and the new agent data injection attack.
Autonomous agents that read data and call tools face prompt injection and data-poisoning that make them misclick or run attacker commands, while a Claude for Chrome flaw let malicious extensions trigger AI actions across Gmail and Salesforce. Defenders are countering with automated red-teaming and strict tool binding.
Sources: The Hacker News · The Hacker News · BleepingComputer · Microsoft Security Blog · ↑ top
Latest developments: Cisco Talos exposed UAT-11795, a Russian-speaking, financially motivated actor trojanizing WebEx and Zoom installers to drop the novel Starland RAT and a bespoke WLDR command-and-control implant against US and European users since June 2025, as Kaspersky caught the HelloNet campaign pushing malicious modules to large Russian organizations through the ViPNet secure-network update system.
Two Russian-nexus operations abused trusted software channels: UAT-11795 poisoned videoconferencing installers to steal credentials and cryptocurrency, and HelloNet subverted ViPNet updates to reach Russian enterprises. Verify installer signatures and monitor update mechanisms for tampering.
Sources: Cisco Talos · BleepingComputer · Securelist (Kaspersky) · ↑ top
Latest developments: The Coca-Cola Company disclosed July 16, 2026 that a ransomware attack on its Fairlife dairy subsidiary suspended production of Fairlife products across the United States, while Fortra profiled the Anubis ransomware-as-a-service operation battering healthcare organizations.
Fairlife, the ultra-filtered milk brand Coca-Cola owns, stopped output nationwide after ransomware disrupted operations. Manufacturers should segment operational technology from corporate IT, keep offline immutable backups, and rehearse recovery.
Sources: BleepingComputer · Graham Cluley · ↑ top
Latest developments: Genetic testing company 23andMe agreed July 16, 2026 to pay $18 million to settle claims from a coalition of 43 state attorneys general that it failed to protect customers' genetic data.
The settlement resolves multistate claims stemming from the 2023 credential-stuffing breach that exposed profiles of millions of 23andMe users. It signals rising regulatory liability for firms holding sensitive biometric and genetic records.
Sources: BleepingComputer · ↑ top
Latest developments: American forces struck deeper inside Iran and expanded their target list Thursday, July 16, bombing bridges to sever the supply routes the regime uses to attack ships near the Strait of Hormuz, and oil climbed again.
The United States escalated its air campaign against Iran, hitting infrastructure and bridges far inside the country to choke the routes Tehran uses to strike commercial vessels near the blockaded Strait of Hormuz, and crude futures rose on fears of wider supply disruption.
Sources: FT Markets · WSJ World News · WSJ Markets · ↑ top
Tonight: Smoke, low 66F.
Friday: Smoke, high 89F.
Friday Night: Smoke then Patchy Smoke, low 71F.
Latest developments: A report from county treasurer Erica Rocchi Brusselars, out Thursday, July 16, pegs the pension system's shortfall at $1.4 billion and says the county must add $100 million a year for 20 years to keep it from running dry.
Allegheny County's employee pension fund is badly underfunded after years of deferred payments, and the treasurer's new report warns the county needs large annual cash infusions now to prevent the fund from being depleted.
Latest developments: Mon Valley residents are using a sewer-connection permit application to pry specifics from U.S. Steel on its multibillion-dollar investment in the Edgar Thomson plant, PublicSource reported July 16.
Braddock officials and residents, citing transparency concerns, are leveraging a sewer permit review to learn details of U.S. Steel's planned strip-mill investment at the Edgar Thomson works, a project central to the Mon Valley's industrial future.
Sources: PublicSource · ↑ top
Latest developments: Live! Casino distributed more than $17.2 million in Local Share Account grants to 69 Westmoreland County municipalities and organizations Thursday, July 16.
The Westmoreland County casino sets aside a portion of gaming revenue each year for the state's Local Share Account, and this round funds community projects across townships, boroughs, and cities that officials say routinely struggle to raise capital.
Latest developments: The Pennsylvania Department of Environmental Protection escalated the state to a Code Purple 'very unhealthy' alert for Friday, July 17, and the Allegheny County Health Department said parts of the county reached the hazardous 'maroon' range Thursday evening, worse than Thursday's Code Red.
Smoke from wildfires in Canada and Minnesota pushed fine-particulate pollution across Western Pennsylvania, and health officials urged residents to skip outdoor activity, with sensitive groups—children, the elderly, and those with respiratory illness—told to stay inside as pools closed early across the region.
Latest developments: With the old span imploded Thursday morning, July 16, PennDOT's contractor Mammoet, a Dutch heavy-moving firm, will now skid the new 22-million-pound Commercial Street Bridge into position on the Parkway East at a top speed near 20 feet an hour.
PennDOT is replacing the 75-year-old Commercial Street Bridge over the Parkway East during a 25-day I-376 closure, and Mammoet will move the new steel-and-concrete span a short distance into place using slow-crawling skid shoes.
Latest developments: Pittsburgh Public Schools is considering extending its full-time Bridges Academy emotional-support and special-education program to kindergarten through second grade, headquartered at Weil PreK-5 in the Hill District, TribLive reported July 16.
The district's Bridges Academy provides full-time emotional support and special education, and officials want to reach the youngest grades to serve those students earlier.
Pirates (50-47)
Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM
Latest developments: The Pirates acquired former first-round outfielder Robert Hassell III from the Washington Nationals in a low-risk trade, the Post-Gazette reported July 16.
Pittsburgh picked up Hassell, once a top Nationals prospect who has struggled to establish himself, betting a change of scenery revives the outfielder as the club chases a National League wild-card spot.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: A Post-Gazette training-camp countdown argues cornerback Jalen Ramsey must become defensive coordinator Patrick Graham's versatile chess piece as the Steelers open camp in Latrobe.
The Post-Gazette says Ramsey's ability to line up all over the secondary gives Graham the flexibility to disguise coverages, making the veteran the pivot of Pittsburgh's defense this season.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Pirates released their 2027 schedule even as a potential MLB lockout looms, with the collective bargaining agreement set to expire, the Post-Gazette noted July 16.
Baseball published 2027 dates while owners and the players' union spar over a salary cap, leaving the schedule provisional as the sport braces for a possible work stoppage that could delay the season.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: USA Basketball named Oklahoma City Thunder coach Mark Daigneault, Detroit Pistons coach JB Bickerstaff, and Gonzaga's Mark Few as assistants to head coach Erik Spoelstra's national-team staff, ESPN reported July 16.
With Miami Heat coach Erik Spoelstra leading the U.S. men's national team, USA Basketball rounded out his bench with two NBA head coaches and one of college basketball's most successful coaches ahead of the next international cycle.
Sources: ESPN Olympics · ↑ top
Latest developments: U.S. Soccer said it will 'take a break' before deciding Mauricio Pochettino's future, whose donor-funded contract expired with the World Cup, and the sporting-director job remains vacant since Matt Crocker resigned in April, the Guardian reported July 16.
The U.S. men's team left its home World Cup at the round of 16 with major holes in its organizational chart, and federation official Batson signaled no rush to name a coach or fill the sporting-director role that shapes hiring and roster strategy.
Sources: Guardian World Cup 2026 · ↑ top
Latest developments: U.S. captain Tim Ream said he and his teammates were in 'shock' at their poor performance in the round-of-16 loss to Belgium, ESPN reported July 16.
The veteran defender who wore the armband reflected on the Americans' 4-1 home World Cup elimination by Belgium, describing a locker room stunned by how far short the team fell of expectations.
Sources: ESPN Soccer · ↑ top
S&P 500 7,548.10 ▲ +0.5% Dow 52,571.11 ▼ -0.3% Nasdaq 26,082.60 ▲ +0.4% WTI crude 76.11 ▲ +8.8% EUR/USD 1.1423 = -0.0% GBP/USD 1.3418 ▲ +0.4% USD/JPY 162.19 ▲ +0.1%