================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, July 19, 2026 - 6:05 AM EDT ================================================================ Public exploits for the wp2shell WordPress flaw and a released Windows LegacyHive zero-day put mass code execution within reach as administrators race to patch. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Public exploit code is outrunning patches, with working wp2shell proof-of-concepts hitting unpatched WordPress 6.9 and 7.0 while a fresh LegacyHive release grabs administrator rights on fully updated Windows. see: wp2shell WordPress Exploits Go Public; LegacyHive Windows Zero-Day Exploit Released * [TREND] Ransomware accountability is reaching named individuals as Armenia detains Russian tourist Aleksandr Ermakov on a U.S. extradition request tying him to the REvil gang. see: Armenia Detains Alleged REvil Hacker Ermakov * [TREND] Apple is warning iPhone and iPad users that scammers spoofing FaceTime caller IDs pose as banks to social-engineer credentials and drain accounts. see: Apple Warns of FaceTime Payment Scams * [TREND] Two wars intensified as U.S. Central Command struck back after an Iranian missile killed American troops in Jordan and Russia fired some 50 missiles at Kyiv. see: U.S.-Iran War Drains America's Oil Reserve; Russia-Ukraine Air War Escalates as Zelensky Faces Military Crisis * [UPDATE (new)] On defense, 7-Zip shipped version 26.02 to close an archive RCE flaw while the Pentagon suspended Phase 2 of its CMMC third-party audits. see: 7-Zip Patches Archive RCE Flaw; Pentagon Suspends CMMC Phase 2 * [TREND] Tech skepticism runs through the Reading list, with Zitron calling OpenAI the center of an AI bubble and Ben Thompson dissecting IBM's miss and mainframe moat. see: The OpenAI Bubble; IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems SECURITY ---------------------------------------------------------------- 1. WP2SHELL WORDPRESS EXPLOITS GO PUBLIC Vulnerabilities and Exploits · [rce, patch, wordpress] Latest developments: WordPress assigned the two wp2shell bugs CVE-2026-60137 and CVE-2026-63030 on July 18, 2026, and working public exploits appeared, letting anyone run code on unpatched 6.9 and 7.0 sites. wp2shell is a WordPress core flaw that runs code from a single anonymous HTTP request, so even a bare install with zero plugins is exploitable; Adam Kues of Assetnote reported the REST API batch-route confusion behind CVE-2026-63030, and administrators must apply 6.9.5 and 7.0.2 at once. - BleepingComputer: https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/18/wordpress-vulnerabilities-wp2shell-cve-2026-60137-cve-2026-60137/ - The Hacker News: https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html 2. 7-ZIP PATCHES ARCHIVE RCE FLAW Vulnerabilities and Exploits · [rce, patch] Latest developments: 7-Zip shipped version 26.02 on July 18, 2026, closing a remote code execution flaw that fires when a user opens a specially crafted compressed archive. 7-Zip is a widely used free file archiver for Windows; a booby-trapped archive runs attacker code on the opener's machine, so users should update to 26.02 immediately. - BleepingComputer: https://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/ 3. LEGACYHIVE WINDOWS ZERO-DAY EXPLOIT RELEASED Vulnerabilities and Exploits · [zero-day, privilege-escalation, windows] Latest developments: A researcher using the handle Nightmare Eclipse released a working LegacyHive exploit on July 17, 2026 that escalates privileges to administrator on fully patched Windows systems. LegacyHive abuses the Windows User Profile Service to hand a local attacker admin rights; Microsoft has no fix yet, so defenders should hunt for local privilege-escalation activity. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-windows-legacyhive-zero-day-exploit-grants-hackers-admin-access/ 4. ARMENIA DETAINS ALLEGED REVIL HACKER ERMAKOV Ransomware and Cybercrime · [ransomware, law-enforcement] Latest developments: Armenia has held Russian tourist Aleksandr Ermakov since June 28, 2026 on a U.S. extradition request naming a REvil ransomware suspect of the same name, and his wife Maria Yurova told REN TV that border officers pulled him from the departure hall at Yerevan's Zvartnots airport off a VKontakte photo. REvil ran one of the most damaging ransomware operations before its 2022 disruption; Ermakov's lawyers insist Armenia seized the wrong man, testing the identification behind the U.S. case. - The Hacker News: https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html 5. APPLE WARNS OF FACETIME PAYMENT SCAMS Ransomware and Cybercrime · [scam, social-engineering, fraud] Latest developments: Apple warned iPhone and iPad users on July 17, 2026 that scammers pose as banks and trusted organizations over FaceTime calls, spoofing caller IDs to look like Apple itself and social-engineering victims into surrendering credentials, security codes, and money. The scheme leans on caller-ID spoofing and social engineering to impersonate Apple and banks; Apple never asks for security codes and urges users to hang up and verify through official channels. - Help Net Security: https://www.helpnetsecurity.com/2026/07/17/apple-facetime-calls-scams/ 6. PENTAGON SUSPENDS CMMC PHASE 2 Policy and Regulation · [policy, compliance, defense] Latest developments: The Pentagon suspended Phase 2 of its Cybersecurity Maturity Model Certification program, pausing third-party audits while leaving intact contractors' legal obligation to protect controlled unclassified information. CMMC requires defense contractors to prove they safeguard controlled unclassified information; the suspension halts outside audits, though industry professionals stress the underlying compliance duty stands. - SecurityWeek: https://www.securityweek.com/industry-reactions-to-pentagon-suspending-cmmc-phase-2-feedback-friday/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S.-Iran War Drains America's Oil Reserve Latest developments: U.S. Central Command launched fresh strikes after an Iranian missile attack in Jordan killed two American troops and left one missing, the U.S. Strategic Petroleum Reserve sank to its lowest level since 1983, and Iran hurried roughly $6 billion of oil to Asia during the brief truce. The United States and Iran keep trading strikes on military and infrastructure targets around the Persian Gulf and the Strait of Hormuz, a spiral that has drawn down the emergency U.S. oil reserve and kept crude markets on edge. - FT World: https://www.ft.com/content/e8e8adc5-7c56-45a8-99fc-bb5acfda263e?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/business/energy-oil/u-s-emergency-oil-reserve-hits-lowest-levels-since-1983-why-it-matters-a4ed79aa - WSJ World News: https://www.wsj.com/world/middle-east/iran-rushed-out-6-billion-of-oil-during-brief-truce-with-u-s-5a3d0818 * Russia-Ukraine Air War Escalates as Zelensky Faces Military Crisis Latest developments: Ukrainian drones struck warehouses of Wildberries, Russia's largest online retailer, and Russia answered with roughly 50 ballistic missiles at Kyiv in one of the war's biggest such barrages, while President Volodymyr Zelensky weighs firing his commander-in-chief. The four-year war has entered a sharper phase of deep strikes on each other's territory, and Zelensky faces swelling protests after dismissing his popular defense minister, deepening turmoil inside Ukraine's military command. - WSJ World News: https://www.wsj.com/world/ukraine-escalates-air-war-with-deadly-strikes-on-russias-amazon-163ba241 - FT World: https://www.ft.com/content/1b34caa6-d909-4df8-a90f-b928f2199261?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Partly Sunny, high 82F. Tonight: Mostly Clear, low 58F. Monday: Sunny, high 84F. Around town: * Tornadoes and Storms Batter Western Pennsylvania Latest developments: The National Weather Service confirmed two tornadoes touched down in Pennsylvania on Saturday, July 18, as severe storms downed trees, flooded roads, and knocked out power to thousands, with Derry Township in Westmoreland County among the hardest hit. A Severe Weather Alert Day brought two lines of thunderstorms across Western Pennsylvania, leaving cleanup crews clearing trees in Westmoreland County and thousands of homes without electricity. - WPXI: https://www.wpxi.com/news/local/nws-says-2-tornadoes-touched-down-pennsylvania-saturday/5VZ3TY35IRDVTNEFN23TTP5QCM/ - WPXI: https://www.wpxi.com/news/local/thousands-homes-without-power-following-severe-storms-saturday/QRBZYKUTMRGCHPV56EDVP7B2CA/ * Fetterman's Small-Donor Base Dries Up Latest developments: The Post-Gazette reported July 19 that Senator John Fetterman's small-dollar fundraising has collapsed, a fresh sign of his deepening estrangement from Democrats. Pennsylvania's junior U.S. senator, John Fetterman, has drawn party backlash over his support for Israel and his breaks with fellow Democrats, and his once-formidable grassroots donor base has now thinned. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/07/19/fetterman-campaign-fundraising-israel-congress/stories/202607160077 * Taylor Farms Expands Lettuce Recall to 27 States Latest developments: Taylor Farms expanded its voluntary recall of iceberg lettuce shipped to 27 states, with the FDA traceback pointing to a single central-Mexico farm behind the multistate cyclospora outbreak. California-based Taylor Farms, a major supplier to restaurants and retailers, pulled iceberg lettuce sourced from central Mexico after health officials linked it to one of the largest recent U.S. cyclosporiasis outbreaks, which has sickened people across dozens of states including in Allegheny County. - WPXI: https://www.wpxi.com/news/local/taylor-farms-recalls-lettuce-shipped-27-states-over-cyclospora-risk/6LLOKHCL2NEKZHRDAEU52VCB3U/ SPORTS ---------------------------------------------------------------- Pirates (51-48) Sat Jul 18 · Pirates 7 · Guardians 1 · Final https://plaintextsports.com/mlb/2026-07-18/pit-cle Sat Jul 18 · Pirates 3 · Guardians 5 · Final Bazzana hits 2-run homer in 9th to rally Guardians to 5-3 victory over Pirates https://plaintextsports.com/mlb/2026-07-18/pit-cle Up Next · Pirates @ Guardians · Sun Jul 19, 1:40 PM https://plaintextsports.com/mlb/2026-07-19/pit-cle Around the Teams: * Steelers Bank on Derrick Harmon's Pass Rush Latest developments: A Post-Gazette training-camp countdown, July 19, argued defensive lineman Derrick Harmon's untapped ability as a pass rusher could sharply lift his sack total this season. The Steelers count on second-year lineman Derrick Harmon to grow into a disruptive interior rusher as camp opens in Latrobe, a jump the beat writers see as pivotal to the front seven. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/19/training-camp-countdown-derrick-harmon-defensive-lineman/stories/202607190035 Team USA: * ESPN Revisits the USMNT's Home World Cup Latest developments: ESPN published a photo retrospective July 19 of the U.S. men's national team's 2026 World Cup, a run that ended with a round-of-16 loss to Belgium. The United States co-hosted the 2026 World Cup with Canada and Mexico, and ESPN's time capsule collects the images from the USMNT's monthlong run that captured the country's attention before its exit. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49352246/2026-world-cup-capsule-images-usmnt-remember-forever READING ---------------------------------------------------------------- * Ed Zitron -- The OpenAI Bubble Zitron argues OpenAI's soaring valuation rests on unsustainable spending and revenue that cannot justify the hype, framing the company as the center of an AI bubble poised to deflate. https://www.wheresyoured.at/the-openai-bubble/ * Stratechery -- IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems Ben Thompson dissects IBM's disappointing preliminary results, contending that its durable mainframe franchise still anchors the business even as the company struggles to find a defensible place in the AI era. https://stratechery.com/2026/ibm-misses-ibms-mainframe-moat-ibms-many-ai-problems/ * Cal Newport -- Why Reading Matters Responding to an Atlantic piece on the decline of reading, Newport makes the case that deep reading builds cognitive capacities screens cannot, and that its erosion carries real intellectual costs. https://calnewport.com/why-reading-matters/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.56 ▲ +11.7% EUR/USD 1.1434 ▲ +0.1% GBP/USD 1.3430 ▲ +0.4% USD/JPY 162.28 = +0.0% ================================================================ Generated 2026-07-19 06:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================