daily plain-text briefing: security, markets, business, and pittsburgh
Ready-to-run public exploits for a WordPress core flaw and a fresh 7-Zip archive bug hand attackers unauthenticated code execution across millions of installs.
Latest developments: BleepingComputer, Help Net Security, and The Hacker News report that ready-to-run public exploits for both flaws now circulate: SQL injection CVE-2026-60137 and REST API batch-route confusion CVE-2026-63030, which chains to remote code execution and which WordPress 7.0.2 fixes.
WordPress core versions 6.9 through 7.0.1 let an unauthenticated attacker run code from a single HTTP request. Adam Kues of Assetnote and Searchlight Cyber plus researchers TF1T, dtro, and haongo reported the bugs; WordPress shipped 7.0.2 and 6.9.5 and pushed auto-updates, so administrators should confirm the patch landed.
Sources: BleepingComputer · Help Net Security · The Hacker News · ↑ top
Latest developments: 7-Zip released version 26.02 on July 18, 2026 to fix a remote code execution flaw that runs attacker code when a victim opens a specially crafted compressed archive.
7-Zip, the free archiver installed across most Windows enterprises, carried a flaw that executes code from a booby-trapped archive file. 7-Zip lacks an auto-updater, so users and IT teams must install version 26.02 manually.
Sources: BleepingComputer · ↑ top
Latest developments: Wired on July 18, 2026 detailed context bombing, a technique that floods a malicious AI hacking agent's context window until the agent aborts, extending the defensive prompt-injection tactic Ars Technica first reported on July 13.
Context bombing turns prompt injection—the flaw that plagues AI assistants—against attackers, feeding their autonomous hacking agents enough instructions to make the agents shut down before striking. Security teams see it as an early countermeasure to offensive AI automation.
Sources: Wired Security · ↑ top
Latest developments: An Iranian missile strike on a U.S. base in Jordan killed two American servicemembers and left one missing Saturday, July 18, the first U.S. combat deaths of the war, and Tehran hit Saudi Arabia for the first time in months.
The United States and Iran have traded escalating strikes across the Persian Gulf in a widening war over control of the Strait of Hormuz, a waterway that once carried a fifth of the world's crude oil; the deaths in Jordan and the strike on Saudi Arabia sharply raise the risk of a broader regional spiral.
Sources: WSJ World News · FT World · ↑ top
This Afternoon: Showers And Thunderstorms Likely, high 87F.
Tonight: Showers And Thunderstorms then Chance Showers And Thunderstorms, low 66F.
Sunday: Mostly Sunny, high 82F.
Latest developments: The Allegheny County Health Department posted a consumer alert Thursday, July 16, for The Yard Gastropub on Fifth Avenue in Downtown Pittsburgh after finding food held at unsafe temperatures.
The Yard Gastropub, a bar and restaurant on Fifth Avenue in Downtown Pittsburgh, drew the consumer alert for holding food at the wrong temperatures, a violation the county health department treats as a hazard to diners.
Latest developments: Taylor Farms recalled iceberg lettuce shipped to 27 states Friday, July 17, formalizing the pullback tied to the multistate cyclospora outbreak.
Taylor Farms, a major California-based salad supplier to restaurants and retailers, recalled Mexican-grown iceberg lettuce distributed to 27 states after U.S. authorities linked it to a cyclospora parasite outbreak that has sickened thousands across more than 30 states, including confirmed cases in Allegheny County.
Latest developments: Forecasters placed all of Western Pennsylvania under a Severe Thunderstorm Watch for Saturday, July 18, and air-quality alerts lifted before 10 a.m. as a line of storms carrying damaging winds, hail, and possible tornadoes pushed through after midday.
The National Weather Service warned of widespread damaging winds and isolated tornadoes across the Pittsburgh region Saturday, prompting Duquesne Light Company to add crews; the same storms cleared the Canadian wildfire smoke that had fouled the region's air all week.
Latest developments: A Monroeville man faces charges after screeners found an unlicensed gun in his carry-on bag at Pittsburgh International Airport, police said Saturday, July 18.
Transportation Security Administration officers stopped the firearm at the checkpoint at Pittsburgh International Airport in Findlay Township; anyone caught bringing a gun to an airport checkpoint can face federal civil fines up to $10,000.
Latest developments: Tim McGraw's concert at The Pavilion at Star Lake will go on as planned Saturday night, July 18, with the amphitheater adding air-quality safety measures as wildfire smoke lingers.
Country singer Tim McGraw plays The Pavilion at Star Lake in Burgettstown on Saturday, July 18; the venue said it is taking proactive steps to keep concertgoers safe through the week's poor air quality.
Pirates (51-47)
Fri Jul 17 · Pirates @ Guardians · Postponed
Sat Jul 18 · Pirates 7 · Guardians 1 · Final
Up Next · Pirates @ Guardians · Sat Jul 18, 7:10 PM
S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1434 ▲ +0.1% GBP/USD 1.3430 ▲ +0.4% USD/JPY 162.28 = +0.0%