daily plain-text briefing: security, markets, business, and pittsburgh
Fresh zero-day exploit code for Windows and Siemens switches lands as attackers turn hidden text and voice-cloning scripts against AI security defenses.
Latest developments: A researcher using the handle Nightmare Eclipse published a working Windows zero-day exploit called LegacyHive that escalates privileges to administrator on fully patched systems, Palo Alto Networks' Unit 42 chained three zero-days in Siemens ROX II OT switches to win persistent root, and n8n disclosed a JWT flaw that logs Enterprise users in as accounts belonging to a different token issuer.
LegacyHive abuses the Windows User Profile Service, the Siemens ROX II trilogy grants privilege escalation and root on industrial switches, and n8n's multi-issuer instances matched incoming tokens on the sub claim alone while ignoring iss. Patch each product and restrict exposure.
Sources: BleepingComputer · Unit 42 (Palo Alto) · The Hacker News · ↑ top
Latest developments: Dark Reading detailed how more than a million phishing emails hide characters through text salting to fool AI and LLM security filters into passing them to inboxes, researchers at Harvard Kennedy School and Meta found that a convincing script drives AI voice-phishing success across six commercial systems tested on 4,100 US adults, and 1Password shipped a beta letting Anthropic's Claude complete authenticated browser tasks without seeing user credentials.
Attackers exploit LLM filters' blind spots with hidden characters while agent makers scramble to contain credential exposure days after the Claude for Chrome extension flaw. Treat AI-driven filtering and browsing agents as porous.
Sources: Dark Reading · Help Net Security · Help Net Security · ↑ top
Latest developments: The European Commission ordered Google to give rival AI assistants the same Android reach Gemini enjoys—camera, microphone, on-screen content, and background app control—by the Android 18 release, San Francisco's City Attorney sent Apple and Google cease-and-desist letters demanding they pull 13 AI nudify face-swap apps, and Britain's Ofcom opened an investigation into TikTok over alleged age-verification lapses.
The three actions show regulators tightening control over how large platforms handle AI access, child safety, and abusive apps. Google, TikTok, Apple, and the app-store owners face binding deadlines and legal demands.
Sources: The Hacker News · Wired Security · The Record · ↑ top
Latest developments: US prosecutors charged a New York man and woman with laundering $43 million stolen through cyber investment-fraud scams, while Armenia has held Russian tourist Aleksandr Ermakov since June 28 on a US extradition request tied to a REvil ransomware suspect of the same name, whose lawyers say authorities have the wrong man.
The two cases show law enforcement pressing both the money-laundering networks behind investment fraud and the individuals tied to ransomware crews. Ermakov's wife, Maria Yurova, and his lawyers dispute the identification.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Symantec's Threat Hunter Team documented Spirals, a previously unknown Rust-based ransomware strain that last month struck an IT services company in South Asia, moving from initial access through data theft to full network encryption in under 24 hours.
Spirals encrypts each file with a separate AES-128 key and wraps every key with attacker-controlled ECDH, running fast once it gains a foothold. Its speed leaves defenders little time to detect and respond before encryption completes.
Sources: Help Net Security · ↑ top
Latest developments: Andy Burnham was crowned Labour leader Friday, July 17, and enters Downing Street as prime minister Monday, pledging to govern as "pro-business" and to steady markets.
Andy Burnham, the former mayor of Manchester who joined parliament only last month, takes office Monday as Britain's prime minister and Labour leader, and his first task is calming bond and mortgage markets that lenders have already jolted with fixed-rate rises after renewed Middle East hostilities.
Sources: FT World · WSJ World News · ↑ top
Latest developments: The AI-driven rout deepened Friday, July 17, with Netflix sliding on a weak-growth warning and IBM reeling from a 25% plunge, pushing the U.S. semiconductor index toward its worst week since 2025's "liberation day" selloff.
Investors kept fleeing chipmakers and AI-linked shares Friday—Tokyo's Nikkei 225 fell nearly 5%, Nasdaq futures dropped, gold slid, and Treasury yields fell as money sought safety—amid spreading doubt about the pace and payoff of the artificial-intelligence buildout.
Sources: FT Markets · WSJ Markets · ↑ top
Today: Smoke, high 91F.
Tonight: Smoke, low 71F.
Saturday: Patchy Smoke then Showers And Thunderstorms, high 86F.
Latest developments: U.S. Steel held an open house Thursday, July 16, to spotlight its planned plant investment, timing that drew scrutiny as wildfire smoke pushed the Mon Valley to a Code Purple air-quality alert.
U.S. Steel, now owned by Nippon Steel, used the open house to promote its multibillion-dollar reinvestment in the Edgar Thomson works in Braddock, the pledge that helped clear the Nippon takeover, even as smoke choked the surrounding Monongahela River communities.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: TribLive detailed Friday, July 17, how Westmoreland County's 65 municipalities will spend the $17.2 million in Local Share Account money—renovating infrastructure, replacing police vehicles, and funding stormwater and sewer repairs.
The state-mandated Local Share Account, funded by Live! Casino gambling revenue, distributed more than $17.2 million to Westmoreland County's 65 municipalities and organizations, money state Sen. Joe Pittman said many communities could not otherwise raise for critical repairs.
Latest developments: Kennywood, Sandcastle, and Idlewild all closed Friday, July 17, and outdoor events across Western Pennsylvania were canceled as the statewide Code Purple alert held, with relief expected from Saturday's storms.
Wildfire smoke from Canada and Minnesota drove all of Pennsylvania to a Code Purple "very unhealthy" air-quality alert Friday, closing the Kennywood, Sandcastle, and Idlewild parks and forcing region-wide cancellations; forecasters expect Saturday storms to wash the haze out.
Latest developments: Free Ride Bicycle Collective marked its 25th year with an alleycat ride and announced a "black jorts gala" for later this year.
Free Ride Bicycle Collective, a Pittsburgh co-op that teaches residents to repair and ride bicycles and earn a bike through volunteer hours, celebrated a quarter century of getting the city into the saddle.
Sources: Pittsburgh City Paper · ↑ top
Pirates (50-47)
Up Next · Pirates @ Guardians · Fri Jul 17, 7:10 PM
Latest developments: ESPN reported U.S. women's national team midfielder Lindsey Heaps has transferred to NWSL expansion side Denver Summit FC, a homecoming to Colorado.
Lindsey Heaps, the USWNT midfielder whose career took her to Paris Saint-Germain and across Europe, has joined new NWSL club Denver Summit FC in a return to her native Colorado, she and her family told ESPN.
Sources: ESPN Soccer · ↑ top
S&P 500 7,548.10 ▲ +0.5% Dow 52,571.11 ▼ -0.3% Nasdaq 26,082.60 ▲ +0.4% WTI crude 77.49 ▲ +9.7% EUR/USD 1.1423 = -0.0% GBP/USD 1.3418 ▲ +0.4% USD/JPY 162.19 ▲ +0.1%