================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, July 19, 2026 - 9:04 PM EDT ================================================================ A previously undocumented actor exploited SonicWall SMA VPN zero-days for root access weeks before disclosure, while F5 rushed a patch for a critical, unauthenticated nginx flaw. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Critical remote-code-execution keeps hitting ubiquitous infrastructure, from SonicWall VPN appliances exploited as zero-days since June to F5's nginx heap overflow and an archive-triggered 7-Zip flaw. see: SonicWall SMA Zero-Days Exploited for Root Access; Critical nginx RCE Flaw CVE-2026-42533; 7-Zip Patches Archive-Triggered RCE * [TREND] State-backed operators lean on trust abuse, as Sandworm's UAC-0145 baits Ukrainians with fake CAPTCHA ClickFix lures while another actor subverts ViPNet's update channel to hit Russian agencies. see: UAC-0145 Baits Ukraine With ClickFix CAPTCHAs; ViPNet Update Channel Abused Against Russian Agencies * [UPDATE (new)] The U.S.-Iran war deepened as Central Command works to identify remains at a struck Jordan base, expecting the American military death toll past 17 to climb further. see: U.S.-Iran War Deepens as Jordan Base Toll Rises * [UPDATE (new)] Around Pittsburgh, PennDOT slid the new Commercial Street Bridge into place, former congressman Tim Murphy died at 73, and two tornadoes were confirmed in Westmoreland and Jefferson counties. see: New Commercial Street Bridge Slides Into Place; Former Congressman Tim Murphy Dies at 73; Two Tornadoes Confirmed in Westmoreland and Jefferson Counties * [TREND] In commentary, Ben Thompson probes IBM's mainframe moat and AI headaches while Ed Zitron argues OpenAI anchors an unsustainable artificial-intelligence bubble. see: IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems; The OpenAI Bubble SECURITY ---------------------------------------------------------------- 1. SONICWALL SMA ZERO-DAYS EXPLOITED FOR ROOT ACCESS Vulnerabilities and Exploits · [zero-day, exploit, vpn] Latest developments: Volexity revealed July 19, 2026 that a previously undocumented actor it tracks as UTA0533 has exploited the SonicWall Secure Mobile Access 1000 series VPN appliances as zero-days since June 22, 2026, weeks ahead of public disclosure, to gain root. The SonicWall SMA 1000 series VPN appliances carry zero-day flaws that hand attackers root-level control. Organizations running SMA 1000 gear should apply SonicWall's patches and hunt their networks for intrusion dating to late June. - The Hacker News: https://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.html - Help Net Security: https://www.helpnetsecurity.com/2026/07/19/week-in-review-oauth-client-ids-spoofed-sonicwall-sma-appliances-targeted-in-zero-day-attacks/ 2. CRITICAL NGINX RCE FLAW CVE-2026-42533 Vulnerabilities and Exploits · [patch, rce] Latest developments: F5 disclosed July 19, 2026 that it patched CVE-2026-42533 on July 15, a critical heap buffer overflow that lets a remote, unauthenticated attacker crash nginx worker processes with crafted HTTP requests and potentially run code. The flaw affects nginx before 1.30.4 stable and 1.31.3 mainline, plus NGINX Plus before 37.0.3.1, powering a vast share of the world's web servers. Administrators on earlier builds should upgrade immediately to avoid denial of service or code execution. - The Hacker News: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html 3. UAC-0145 BAITS UKRAINE WITH CLICKFIX CAPTCHAS Nation-State Activity · [apt, sandworm, clickfix] Latest developments: Ukraine's CERT-UA attributed a fresh ClickFix campaign July 19, 2026 to UAC-0145, a sub-cluster of the GRU-affiliated Sandworm unit, that dresses malware installation as a CAPTCHA check and tricks Ukrainian targets into infecting their own machines. The operators use fake CAPTCHA prompts to get victims to paste and run commands that drop data-stealing malware. Ukrainian users should treat any CAPTCHA that asks them to copy text into a run dialog or terminal as an attack. - The Hacker News: https://thehackernews.com/2026/07/uac-0145-uses-clickfix-captchas-to.html 4. VIPNET UPDATE CHANNEL ABUSED AGAINST RUSSIAN AGENCIES Nation-State Activity · [apt, supply-chain] Latest developments: BleepingComputer reported July 19, 2026 that an advanced threat actor is subverting the update mechanism of the ViPNet private-networking suite to target Russian organizations, including government agencies, extending the HelloNet campaign Kaspersky exposed. ViPNet secures network traffic for many Russian enterprises and agencies, and the attacker pushes malicious modules through its trusted update channel. ViPNet operators should verify update integrity and inspect deployed modules for tampering. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-abuse-vipnet-software-to-target-russian-govt-agencies/ 5. 7-ZIP PATCHES ARCHIVE-TRIGGERED RCE Vulnerabilities and Exploits · [patch, rce] Latest developments: BleepingComputer reported July 18, 2026 that 7-Zip 26.02, released June 25, fixes a remote code execution flaw that attackers trigger by convincing users to open a specially crafted compressed file. The widely used file-archiving tool ran malicious code from a booby-trapped archive on vulnerable versions. Users should update to 7-Zip 26.02 and avoid opening archives from untrusted sources. - BleepingComputer: https://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/ BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S.-Iran War Deepens as Jordan Base Toll Rises Latest developments: U.S. Central Command said Sunday, July 19, it is working to identify human remains at a base in Jordan that a missile struck over the weekend, and it expects the military death toll, now 17, to climb further. The war between the United States and Iran, which reignited after last month's interim truce collapsed, has largely halted Strait of Hormuz shipping and lifted oil prices; another American service member died in Iraq during a controlled detonation of an Iranian drone, and Iran fired missiles toward Jordan that Israel warns are landing near its own territory, threatening to widen the fight. - WSJ World News: https://www.wsj.com/world/middle-east/u-s-servicemember-killed-in-iraq-as-troop-death-toll-in-jordan-likely-to-rise-fb59b6cc - FT World: https://www.ft.com/content/e8e8adc5-7c56-45a8-99fc-bb5acfda263e?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Mostly Clear, low 58F. Monday: Sunny, high 84F. Monday Night: Mostly Cloudy, low 66F. Business: * PUC Approves Pennsylvania American Water Rate Increase Latest developments: The Pennsylvania Public Utility Commission voted 4-1 Thursday to grant Pennsylvania American Water an overall annual revenue increase of $74.9 million, WPXI reported July 19. The order raises bills for Pennsylvania American Water customers while directing the utility to improve customer service and strengthen consumer protections. - WPXI: https://www.wpxi.com/news/local/puc-approves-modified-rate-change-pennsylvania-american-water/ANH5NLW5UREWBCYEANIMYYLPK4/ Around town: * New Commercial Street Bridge Slides Into Place Latest developments: PennDOT began skidding the new Commercial Street Bridge into position on the Parkway East on Sunday, July 19, days after crews imploded the old span. The Parkway East, Interstate 376, stays closed through August 3 during the 25-day bridge replacement, sending drivers onto detours as the new structure moves into place. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/07/19/commercial-street-bridge-parkway-east-1/stories/202607190073 - WTAE: https://www.wtae.com/article/penndot-new-parkway-east-bridge-being-slid/73179332 * Former Congressman Tim Murphy Dies at 73 Latest developments: Tim Murphy, the Upper St. Clair Republican who long represented Western Pennsylvania, died Sunday, July 19, at 73, the Republican Committee of Allegheny County announced. Murphy served in the U.S. House for Pennsylvania's 18th congressional district from 2003 until his resignation in 2017, and in the Pennsylvania state Senate from 1996 to 2003. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-local/2026/07/19/congressman-tim-murphy-dies/stories/202607190075 - TribLive: https://triblive.com/news/politics-election/tim-murphy-former-u-s-congressman-and-state-senator-dies-at-73/ * Two Tornadoes Confirmed in Westmoreland and Jefferson Counties Latest developments: The National Weather Service confirmed Sunday, July 19, that two tornadoes touched down in Saturday's storms, one in Westmoreland County and one in Jefferson County. Severe storms and flooding damaged parts of Western Pennsylvania on Saturday, July 18, and forecasters later verified the two twisters. - WTAE: https://www.wtae.com/article/westmoreland-jefferson-counties-tornadoes-saturday-storms/73179582 SPORTS ---------------------------------------------------------------- Pirates (52-48) Sat Jul 18 · Pirates 7 · Guardians 1 · Final https://plaintextsports.com/mlb/2026-07-18/pit-cle Sat Jul 18 · Pirates 3 · Guardians 5 · Final Bazzana hits 2-run homer in 9th to rally Guardians to 5-3 victory over Pirates https://plaintextsports.com/mlb/2026-07-18/pit-cle Sun Jul 19 · Pirates 7 · Guardians 1 · Final Skenes strikes out 8 in 7 innings as Pirates roll to 7-1 win over Guardians https://plaintextsports.com/mlb/2026-07-19/pit-cle Up Next · Pirates @ Yankees · Mon Jul 20, 7:05 PM https://plaintextsports.com/mlb/2026-07-20/pit-nyy Around the Teams: * Steelers See Harmon as a Pass-Rush Breakout Latest developments: The Post-Gazette's training-camp countdown, July 19, cast defensive lineman Derrick Harmon as a candidate for a sharp jump in sack production. The piece argued Harmon's untapped pass-rushing ability could translate into far more sacks for the Steelers as they open camp at Saint Vincent College in Latrobe. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/19/training-camp-countdown-derrick-harmon-defensive-lineman/stories/202607190035 READING ---------------------------------------------------------------- * Stratechery -- IBM Misses, IBM's Mainframe Moat, IBM's Many AI Problems Ben Thompson examines IBM's preliminary results, which rattled the software market, and argues the company's real story is its mainframe franchise and the many problems artificial intelligence poses to it. https://stratechery.com/2026/ibm-misses-ibms-mainframe-moat-ibms-many-ai-problems/ * Ed Zitron -- The OpenAI Bubble Ed Zitron argues that OpenAI sits at the center of an unsustainable financial bubble in artificial intelligence. https://www.wheresyoured.at/the-openai-bubble/ * Cal Newport -- Why Reading Matters Responding to Rose Horowitch's Atlantic article 'The End of Reading Is Here,' Cal Newport defends the enduring cognitive value of sustained deep reading. https://calnewport.com/why-reading-matters/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1426 = -0.0% GBP/USD 1.3430 ▲ +0.4% USD/JPY 162.19 = +0.0% ================================================================ Generated 2026-07-19 21:04 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================