daily plain-text briefing: security, markets, business, and pittsburgh
The Inc ransomware crew is chaining two SonicWall SMA zero-days into root-level control of remote-access appliances, as fresh disclosures show governments and criminals racing to hoard and exploit personal data.
Latest developments: Dark Reading laid out how the Inc ransomware crew chains two SonicWall Secure Mobile Access flaws in sequence to seize root-level control of the appliances.
SonicWall's Secure Mobile Access appliances sit at the network edge to broker remote-worker connections. Inc, a ransomware-as-a-service operation, exploits a pair of zero-days together to run commands as root; SonicWall customers should apply the vendor's fixes and hunt their appliances for signs of compromise.
Sources: Dark Reading · ↑ top
Latest developments: A procurement record shows US Immigration and Customs Enforcement will pay Thomson Reuters $125 million for access to names, Social Security numbers, and ethnicity data to investigate what it calls 'voters fraud' and immigration fraud.
ICE is buying bulk personal records from Thomson Reuters to mine for alleged voter and immigration fraud. The deal folds Americans' Social Security numbers and ethnicity into an immigration-enforcement dataset, drawing sharp privacy and civil-liberties objections.
Latest developments: Fairlife named the plants the ransomware attack idled, sites in Michigan, New York, and Arizona, mapping the footprint of its suspended US production.
Fairlife, a Coca-Cola dairy subsidiary whose retail sales passed $1 billion in 2022, stopped US production after a ransomware attack. The disruption spans its plants in Michigan, New York, and Arizona.
Sources: The Record · ↑ top
Latest developments: Flare documented carders shifting to 'clean' residential proxies paired with browser fingerprints and device profiles to slip past modern fraud detection.
Residential proxies route criminal traffic through real home IP addresses to mimic legitimate shoppers. As fraud engines flag dirty proxies, carders now chase unflagged 'clean' ones and layer them with stolen device fingerprints and identity signals to cash out stolen cards.
Sources: BleepingComputer · ↑ top
Latest developments: SecurityWeek reported that Iran is geolocating the mobile phones of US military personnel.
Iranian operators are tracking the physical locations of US service members through their mobile phones as an intelligence effort against American forces. Personnel should tighten location-sharing and harden device settings.
Sources: SecurityWeek · ↑ top
Latest developments: Iran struck Saudi Arabia directly for the first time in months on Saturday, July 18, opening a front beyond the Kuwaiti desalination plant and Gulf shipping already reported.
The United States and Iran traded strikes on infrastructure and military targets across the Persian Gulf on Saturday, July 18, with Iran hitting Saudi Arabia as both sides pressed their fight over the Strait of Hormuz, raising the risk that the war spirals into a broader regional conflict that could choke oil and shipping.
Sources: Financial Times · Wall Street Journal · ↑ top
Today: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, high 87F.
Tonight: Showers And Thunderstorms, low 67F.
Sunday: Mostly Sunny, high 82F.
Latest developments: TribLive reported July 18 that growing Middle Eastern and Mexican populations are lifting demand for Westmoreland County lamb and mutton even as wool prices plunge.
Sheep and lamb growers in Westmoreland County are selling more meat as the region's Middle Eastern and Mexican communities expand, though a collapse in wool prices squeezes the same producers who raise the animals.
Latest developments: TribLive profiled July 18 how John English turned an unexpected career change into a fixture independent pizza shop in Indiana Township.
John English never planned to sell pizza, and his unplanned career pivot into the trade has made his independent shop a food fixture in Indiana Township, Allegheny County.
Latest developments: Air-quality alerts across the Pittsburgh region end just before 10 a.m. Saturday, July 18, as a wind shift clears the wildfire smoke, and forecasters now warn of severe storms with damaging winds, hail, and possible tornadoes after 3 p.m.
The Canadian wildfire smoke that drove Pittsburgh's air into hazardous ranges this week lifts Saturday, July 18, as winds push it out. Forecasters made the day a Severe Weather Alert Day, with a line of strong storms threatening damaging winds, hail, and tornadoes across Western Pennsylvania from mid-afternoon into the evening; the poor air had already forced cancellation of Friday's America's Mile race.
Sources: KDKA · WTAE · WPXI · ↑ top
Latest developments: TribLive reported July 18 that the city promoted a South Fayette resident to assistant police chief last month, despite rules that appear to require commanders to live in Pittsburgh.
The Pittsburgh Bureau of Police promoted a South Fayette resident to assistant chief in June, a move TribLive found conflicts with a city residency rule that appears to require police commanders to live within Pittsburgh.
Latest developments: TribLive detailed July 18 how commuters are turning to buses and rail during the Parkway East closure, with Pittsburgh Regional Transit chief executive Katharine Kelleman telling drivers, "Don't drive."
With the Parkway East (I-376) closed and roughly 100,000 daily drivers rerouting, Pittsburgh Regional Transit chief executive Katharine Kelleman is pressing commuters to leave their cars and ride the agency's buses and rail through the shutdown.
Latest developments: The Pittsburgh Downtown Partnership extended Picklesburgh's Sunday hours, WPXI reported July 18, to help vendors recover after wildfire smoke thinned Friday and Saturday crowds.
Picklesburgh, the Pittsburgh Downtown Partnership's food festival in Downtown Pittsburgh, closes Sunday, July 19, and partnership president and chief executive Jeremy Waldrup lengthened the festival's final-day hours to give vendors a stronger finish after wildfire smoke cut into attendance earlier in the weekend.
Pirates (50-47)
Fri Jul 17 · Pirates @ Guardians · Postponed
Up Next · Pirates @ Guardians · Sat Jul 18, 1:10 PM
Latest developments: A Post-Gazette profile July 18 detailed how first-round pick Derek Curiel, the LSU and Orange Lutheran outfielder, "does whatever it takes to win."
The Post-Gazette profiled Derek Curiel, the outfielder out of LSU and Orange Lutheran High School whom the Pirates took fifth overall in the 2026 draft, casting his win-at-all-costs makeup as the trait that drew the organization to him.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette reported July 17 that the Pirates postponed their series opener against the Cleveland Guardians because of the hazardous air quality from Canadian wildfire smoke.
The Pirates called off their series opener against the Cleveland Guardians as wildfire smoke pushed Pittsburgh's air quality into unhealthy ranges, one of several regional events disrupted by the haze.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Guardian reported July 18 that FIFA president Gianni Infantino will probably escape IOC sanction over a human-rights group's complaint about his Trump dealings surrounding United States forward Folarin Balogun.
The human-rights organization FairSquare asked the International Olympic Committee to punish FIFA president Gianni Infantino after President Trump said he had phoned Infantino over the affair around United States forward Folarin Balogun's red card and lifted ban; the Guardian reported Infantino is poised to avoid any penalty.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1434 ▲ +0.1% GBP/USD 1.3444 ▲ +0.4% USD/JPY 162.28 = +0.0%