daily plain-text briefing: security, markets, business, and pittsburgh
A previously undocumented actor exploited SonicWall SMA VPN zero-days for root access weeks before disclosure, while F5 rushed a patch for a critical, unauthenticated nginx flaw.
Latest developments: Volexity revealed July 19, 2026 that a previously undocumented actor it tracks as UTA0533 has exploited the SonicWall Secure Mobile Access 1000 series VPN appliances as zero-days since June 22, 2026, weeks ahead of public disclosure, to gain root.
The SonicWall SMA 1000 series VPN appliances carry zero-day flaws that hand attackers root-level control. Organizations running SMA 1000 gear should apply SonicWall's patches and hunt their networks for intrusion dating to late June.
Sources: The Hacker News · Help Net Security · ↑ top
Latest developments: F5 disclosed July 19, 2026 that it patched CVE-2026-42533 on July 15, a critical heap buffer overflow that lets a remote, unauthenticated attacker crash nginx worker processes with crafted HTTP requests and potentially run code.
The flaw affects nginx before 1.30.4 stable and 1.31.3 mainline, plus NGINX Plus before 37.0.3.1, powering a vast share of the world's web servers. Administrators on earlier builds should upgrade immediately to avoid denial of service or code execution.
Sources: The Hacker News · ↑ top
Latest developments: Ukraine's CERT-UA attributed a fresh ClickFix campaign July 19, 2026 to UAC-0145, a sub-cluster of the GRU-affiliated Sandworm unit, that dresses malware installation as a CAPTCHA check and tricks Ukrainian targets into infecting their own machines.
The operators use fake CAPTCHA prompts to get victims to paste and run commands that drop data-stealing malware. Ukrainian users should treat any CAPTCHA that asks them to copy text into a run dialog or terminal as an attack.
Sources: The Hacker News · ↑ top
Latest developments: BleepingComputer reported July 19, 2026 that an advanced threat actor is subverting the update mechanism of the ViPNet private-networking suite to target Russian organizations, including government agencies, extending the HelloNet campaign Kaspersky exposed.
ViPNet secures network traffic for many Russian enterprises and agencies, and the attacker pushes malicious modules through its trusted update channel. ViPNet operators should verify update integrity and inspect deployed modules for tampering.
Sources: BleepingComputer · ↑ top
Latest developments: BleepingComputer reported July 18, 2026 that 7-Zip 26.02, released June 25, fixes a remote code execution flaw that attackers trigger by convincing users to open a specially crafted compressed file.
The widely used file-archiving tool ran malicious code from a booby-trapped archive on vulnerable versions. Users should update to 7-Zip 26.02 and avoid opening archives from untrusted sources.
Sources: BleepingComputer · ↑ top
Latest developments: U.S. Central Command said Sunday, July 19, it is working to identify human remains at a base in Jordan that a missile struck over the weekend, and it expects the military death toll, now 17, to climb further.
The war between the United States and Iran, which reignited after last month's interim truce collapsed, has largely halted Strait of Hormuz shipping and lifted oil prices; another American service member died in Iraq during a controlled detonation of an Iranian drone, and Iran fired missiles toward Jordan that Israel warns are landing near its own territory, threatening to widen the fight.
Sources: WSJ World News · FT World · ↑ top
Tonight: Mostly Clear, low 58F.
Monday: Sunny, high 84F.
Monday Night: Mostly Cloudy, low 66F.
Latest developments: The Pennsylvania Public Utility Commission voted 4-1 Thursday to grant Pennsylvania American Water an overall annual revenue increase of $74.9 million, WPXI reported July 19.
The order raises bills for Pennsylvania American Water customers while directing the utility to improve customer service and strengthen consumer protections.
Latest developments: PennDOT began skidding the new Commercial Street Bridge into position on the Parkway East on Sunday, July 19, days after crews imploded the old span.
The Parkway East, Interstate 376, stays closed through August 3 during the 25-day bridge replacement, sending drivers onto detours as the new structure moves into place.
Sources: Pittsburgh Post-Gazette · WTAE · ↑ top
Latest developments: Tim Murphy, the Upper St. Clair Republican who long represented Western Pennsylvania, died Sunday, July 19, at 73, the Republican Committee of Allegheny County announced.
Murphy served in the U.S. House for Pennsylvania's 18th congressional district from 2003 until his resignation in 2017, and in the Pennsylvania state Senate from 1996 to 2003.
Sources: Pittsburgh Post-Gazette · TribLive · ↑ top
Latest developments: The National Weather Service confirmed Sunday, July 19, that two tornadoes touched down in Saturday's storms, one in Westmoreland County and one in Jefferson County.
Severe storms and flooding damaged parts of Western Pennsylvania on Saturday, July 18, and forecasters later verified the two twisters.
Pirates (52-48)
Sat Jul 18 · Pirates 7 · Guardians 1 · Final
Sat Jul 18 · Pirates 3 · Guardians 5 · Final
Bazzana hits 2-run homer in 9th to rally Guardians to 5-3 victory over Pirates
Sun Jul 19 · Pirates 7 · Guardians 1 · Final
Skenes strikes out 8 in 7 innings as Pirates roll to 7-1 win over Guardians
Up Next · Pirates @ Yankees · Mon Jul 20, 7:05 PM
Latest developments: The Post-Gazette's training-camp countdown, July 19, cast defensive lineman Derrick Harmon as a candidate for a sharp jump in sack production.
The piece argued Harmon's untapped pass-rushing ability could translate into far more sacks for the Steelers as they open camp at Saint Vincent College in Latrobe.
Sources: Post-Gazette Steelers · ↑ top
S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1426 = -0.0% GBP/USD 1.3430 ▲ +0.4% USD/JPY 162.19 = +0.0%