================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Saturday, July 18, 2026 - 4:06 PM EDT ================================================================ Ready-to-run public exploits for a WordPress core flaw and a fresh 7-Zip archive bug hand attackers unauthenticated code execution across millions of installs. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Ready-to-run wp2shell exploits and a fresh 7-Zip archive flaw both deliver remote code execution, pressing teams to patch WordPress and desktop tools they rarely auto-update. see: wp2shell WordPress Exploits Go Public; 7-Zip Archive Remote Code Execution * [TREND] Defenders are weaponizing context bombing, a prompt-injection tactic that floods malicious AI hacking agents' context windows until they abort their own attacks. see: Defenders Turn Prompt Injection on AI Hacking Agents * [UPDATE (new)] An Iranian missile strike on a U.S. base in Jordan killed two American servicemembers, the first U.S. combat deaths as the war widens to Saudi Arabia. see: U.S. Troops Killed as Iran War Escalates * [UPDATE (new)] Local food-safety alerts stack up as the county flags The Yard Gastropub for unsafe temperatures and Taylor Farms recalls iceberg lettuce tied to a cyclospora outbreak. see: Health Department Flags The Yard Gastropub; Taylor Farms Recalls Iceberg Lettuce * [TREND] AI-era tech skepticism sharpens as Ben Thompson dissects IBM's earnings miss and mainframe moat while Ed Zitron argues the OpenAI valuation is an unsustainable bubble. see: IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems; The OpenAI Bubble * [UPDATE (new)] A Monroeville man was charged after screeners found an unlicensed gun in his carry-on at Pittsburgh International Airport. see: Gun Found in Carry-On at Pittsburgh International SECURITY ---------------------------------------------------------------- 1. WP2SHELL WORDPRESS EXPLOITS GO PUBLIC Vulnerabilities and Exploits · [zero-day, patch, exploit] Latest developments: BleepingComputer, Help Net Security, and The Hacker News report that ready-to-run public exploits for both flaws now circulate: SQL injection CVE-2026-60137 and REST API batch-route confusion CVE-2026-63030, which chains to remote code execution and which WordPress 7.0.2 fixes. WordPress core versions 6.9 through 7.0.1 let an unauthenticated attacker run code from a single HTTP request. Adam Kues of Assetnote and Searchlight Cyber plus researchers TF1T, dtro, and haongo reported the bugs; WordPress shipped 7.0.2 and 6.9.5 and pushed auto-updates, so administrators should confirm the patch landed. - BleepingComputer: https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/18/wordpress-vulnerabilities-wp2shell-cve-2026-60137-cve-2026-60137/ - The Hacker News: https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html 2. 7-ZIP ARCHIVE REMOTE CODE EXECUTION Vulnerabilities and Exploits · [patch, rce] Latest developments: 7-Zip released version 26.02 on July 18, 2026 to fix a remote code execution flaw that runs attacker code when a victim opens a specially crafted compressed archive. 7-Zip, the free archiver installed across most Windows enterprises, carried a flaw that executes code from a booby-trapped archive file. 7-Zip lacks an auto-updater, so users and IT teams must install version 26.02 manually. - BleepingComputer: https://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/ 3. DEFENDERS TURN PROMPT INJECTION ON AI HACKING AGENTS AI Security · [ai, prompt-injection] Latest developments: Wired on July 18, 2026 detailed context bombing, a technique that floods a malicious AI hacking agent's context window until the agent aborts, extending the defensive prompt-injection tactic Ars Technica first reported on July 13. Context bombing turns prompt injection—the flaw that plagues AI assistants—against attackers, feeding their autonomous hacking agents enough instructions to make the agents shut down before striking. Security teams see it as an early countermeasure to offensive AI automation. - Wired Security: https://www.wired.com/story/prompt-injection-attacks-are-thwarting-ai-hacking-agents/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Troops Killed as Iran War Escalates Latest developments: An Iranian missile strike on a U.S. base in Jordan killed two American servicemembers and left one missing Saturday, July 18, the first U.S. combat deaths of the war, and Tehran hit Saudi Arabia for the first time in months. The United States and Iran have traded escalating strikes across the Persian Gulf in a widening war over control of the Strait of Hormuz, a waterway that once carried a fifth of the world's crude oil; the deaths in Jordan and the strike on Saudi Arabia sharply raise the risk of a broader regional spiral. - WSJ World News: https://www.wsj.com/world/middle-east/two-u-s-servicemembers-killed-one-missing-in-iran-missile-attack-on-jordan-a59f9699 - FT World: https://www.ft.com/content/e8e8adc5-7c56-45a8-99fc-bb5acfda263e?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Showers And Thunderstorms Likely, high 87F. Tonight: Showers And Thunderstorms then Chance Showers And Thunderstorms, low 66F. Sunday: Mostly Sunny, high 82F. Business: * Health Department Flags The Yard Gastropub Latest developments: The Allegheny County Health Department posted a consumer alert Thursday, July 16, for The Yard Gastropub on Fifth Avenue in Downtown Pittsburgh after finding food held at unsafe temperatures. The Yard Gastropub, a bar and restaurant on Fifth Avenue in Downtown Pittsburgh, drew the consumer alert for holding food at the wrong temperatures, a violation the county health department treats as a hazard to diners. - WPXI: https://www.wpxi.com/news/local/downtown-pittsburgh-restaurant-issued-consumer-alert-over-food-held-wrong-temperatures/W33XSDHGXREVTDZV3X4NLURHKI/ * Taylor Farms Recalls Iceberg Lettuce Latest developments: Taylor Farms recalled iceberg lettuce shipped to 27 states Friday, July 17, formalizing the pullback tied to the multistate cyclospora outbreak. Taylor Farms, a major California-based salad supplier to restaurants and retailers, recalled Mexican-grown iceberg lettuce distributed to 27 states after U.S. authorities linked it to a cyclospora parasite outbreak that has sickened thousands across more than 30 states, including confirmed cases in Allegheny County. - WPXI: https://www.wpxi.com/news/local/taylor-farms-recalls-iceberg-lettuce-27-states-over-possible-cyclospora-contamination/XFZPHXAWGNCMRK32R2PKOUUDAQ/ Around town: * Severe Storms and Flash Flooding Hit the Region Latest developments: Forecasters placed all of Western Pennsylvania under a Severe Thunderstorm Watch for Saturday, July 18, and air-quality alerts lifted before 10 a.m. as a line of storms carrying damaging winds, hail, and possible tornadoes pushed through after midday. The National Weather Service warned of widespread damaging winds and isolated tornadoes across the Pittsburgh region Saturday, prompting Duquesne Light Company to add crews; the same storms cleared the Canadian wildfire smoke that had fouled the region's air all week. - WTAE: https://www.wtae.com/article/severe-weather-alerts-saturday-july-18-2026/73176132 * Gun Found in Carry-On at Pittsburgh International Latest developments: A Monroeville man faces charges after screeners found an unlicensed gun in his carry-on bag at Pittsburgh International Airport, police said Saturday, July 18. Transportation Security Administration officers stopped the firearm at the checkpoint at Pittsburgh International Airport in Findlay Township; anyone caught bringing a gun to an airport checkpoint can face federal civil fines up to $10,000. - WPXI: https://www.wpxi.com/news/local/monroeville-man-charged-after-gun-found-carry-on-pittsburgh-international-airport-police-say/KMAF3ZA5U5G6NBEUPNSUSIUOEQ/ Events: * Tim McGraw at The Pavilion at Star Lake Latest developments: Tim McGraw's concert at The Pavilion at Star Lake will go on as planned Saturday night, July 18, with the amphitheater adding air-quality safety measures as wildfire smoke lingers. Country singer Tim McGraw plays The Pavilion at Star Lake in Burgettstown on Saturday, July 18; the venue said it is taking proactive steps to keep concertgoers safe through the week's poor air quality. - WTAE: https://www.wtae.com/article/star-lake-air-quality-safety-measures-tim-mcgraw-concert/73176528 SPORTS ---------------------------------------------------------------- Pirates (51-47) Fri Jul 17 · Pirates @ Guardians · Postponed https://plaintextsports.com/mlb/2026-07-17/pit-cle Sat Jul 18 · Pirates 7 · Guardians 1 · Final https://plaintextsports.com/mlb/2026-07-18/pit-cle Up Next · Pirates @ Guardians · Sat Jul 18, 7:10 PM https://plaintextsports.com/mlb/2026-07-18/pit-cle READING ---------------------------------------------------------------- * Stratechery -- IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems Ben Thompson argues that IBM's preliminary earnings miss spooked the broader software market, then unpacks how the company's mainframe franchise remains a durable moat even as AI creates deep problems for the rest of its business. https://stratechery.com/2026/ibm-misses-ibms-mainframe-moat-ibms-many-ai-problems/ * Ed Zitron -- The OpenAI Bubble Ed Zitron argues that OpenAI's soaring valuation, spending, and revenue promises add up to an unsustainable bubble he expects to burst. https://www.wheresyoured.at/the-openai-bubble/ * Cal Newport -- Why Reading Matters Responding to Rose Horowitch's Atlantic piece declaring 'the end of reading,' Cal Newport makes the case for why sustained, deep reading still matters. https://calnewport.com/why-reading-matters/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1434 ▲ +0.1% GBP/USD 1.3430 ▲ +0.4% USD/JPY 162.28 = +0.0% ================================================================ Generated 2026-07-18 16:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================