daily plain-text briefing: security, markets, business, and pittsburgh
Iranian spies buried command traffic in Microsoft 365 calendars, attackers began exploiting a critical ServiceNow pre-authentication flaw, and the FakeGit campaign flooded GitHub with 7,600 malware repositories.
Latest developments: Microtask platform Paidwork exposed data on more than 23 million users; Italy's Garante per la Protezione dei Dati Personali fined WINDTRE €1.7 million over two February 2025 breaches affecting more than 365,000 customers; hackers lurked nine months inside South Korea's diplomatic academy training system, stealing Ministry of Foreign Affairs staff data; and Romania's land registry agency is still recovering from what it called its most serious technical incident.
The day's breaches span a gig-work platform, an Italian telecom, a South Korean government training system, and a Romanian property registry, with old-school social engineering behind the WINDTRE intrusions; affected users should watch for phishing and fraud tied to exposed personal data.
Sources: Help Net Security · Help Net Security · The Record · The Record · ↑ top
Latest developments: Group-IB named HollowGraph, an espionage implant that hijacks a compromised Microsoft 365 calendar as its command channel, planting tasking and exfiltrating stolen files as attachments on events dated to 2050 so the activity blends into legitimate Microsoft Graph traffic.
Group-IB ties HollowGraph with high confidence to the modular Cavern backdoor framework and Iranian espionage; because commands and data move through normal Graph API calls, defenders should hunt for anomalous calendar events and far-future appointment dates in Microsoft 365 mailboxes.
Sources: BleepingComputer · Help Net Security · The Hacker News · ↑ top
Latest developments: Threat-intelligence firm Defused reported that attackers began exploiting CVE-2026-6875, a critical pre-authentication code-injection flaw in the ServiceNow AI Platform.
CVE-2026-6875 lets an unauthenticated attacker escape ServiceNow's script sandbox and run code remotely on a targeted instance; every organization running the AI Platform-as-a-Service should patch immediately.
Sources: Help Net Security · BleepingComputer · ↑ top
Latest developments: Researchers exposed FakeGit, nearly 7,600 malicious GitHub repositories—more than 800 impersonating AI skills or Model Context Protocol servers—that deliver the SmartLoader malware, while a separate campaign called SleeperGem published three malicious RubyGems, including git_credential_manager and Dendreo, to serve follow-on payloads to developer machines.
Both campaigns weaponize the trust developers place in package registries, using copied projects, lookalike profiles, and convincing READMEs to smuggle loaders and stealers; teams should vet dependencies and repository provenance before installing.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: Ars Technica reported that a ransomware surge is pushing governments to weigh outright bans on ransom payments, as Indian officials confirmed the World Leaks group claimed files from the Kudankulam Nuclear Power Plant but said the documents hold no safety or security information.
Rising ransomware sophistication has victims facing pay-or-refuse dilemmas while regulators consider prohibiting payments; World Leaks' Kudankulam claim shows extortion crews targeting critical infrastructure even when the stolen files prove less sensitive than advertised.
Sources: Ars Technica Security · The Record · ↑ top
Latest developments: A first-of-its-kind Wired analysis found that more than one in eight apps built for US service members carry foreign code, some of it from firms in nations the Pentagon designates as adversaries.
The study exposes a supply-chain risk in software marketed to military users, where embedded Chinese and Russian components could hand adversaries access to sensitive personnel; the Pentagon and app vendors face pressure to audit code provenance.
Sources: Wired Security · ↑ top
Latest developments: Gas topped $4 a gallon nationally for the first time in a month, Yemen's Iranian-backed Houthis threatened to blockade Saudi crude exports through the Red Sea, and regional mediators narrowed talks toward a proposed 10-day ceasefire.
U.S. and Iranian forces have fought openly since early July; Iran struck Gulf tankers Monday to briefly lift Brent crude near $90 a barrel, the U.S. average pump price crossed $4.003 as strikes hit Middle East oil infrastructure, and a wider spiral now threatens Saudi Arabia's Red Sea export route.
Sources: FT Markets · WSJ World News · FT World · FT Markets · ↑ top
Latest developments: Andy Burnham surprised his own Labour MPs by making former defence minister John Healey chancellor, and gilts came under pressure as investors braced for higher spending after Burnham pledged to 'use any flexibility' in the fiscal rules.
Andy Burnham took over as Britain's prime minister Monday after Keir Starmer resigned, becoming the seventh UK leader in a decade; his cost-of-living agenda and vow to loosen fiscal constraints unsettled bond markets that expect higher taxes and borrowing.
Sources: FT World · FT Markets · FT World · ↑ top
This Afternoon: Sunny, high 85F.
Tonight: Mostly Cloudy, low 67F.
Tuesday: Slight Chance Showers And Thunderstorms then Showers And Thunderstorms, high 82F.
Latest developments: President Trump singled out Giant Eagle on Monday for lowering prices on many products this summer.
Giant Eagle, the O'Hara Township-based grocery chain that anchors much of Western Pennsylvania's supermarket business, drew presidential praise for cutting prices across many products amid national attention to grocery costs.
Latest developments: AAA data showed the national gas average hit $4.003 Monday, the first crossing above $4 in over a month, as U.S.-Iran fighting drove up oil.
The U.S. average gasoline price crossed $4 a gallon for the first time in over a month, pushed by escalating U.S.-Iran strikes on Middle East oil infrastructure; rising diesel threatens to lift the cost of groceries and other goods trucked into Pittsburgh.
Latest developments: A federal judge issued a 14-day restraining order Monday blocking Paramount Skydance's takeover of Warner Bros. Discovery, with a hearing set for August 3, after a coalition of states sued.
California district judge granted the states a temporary halt to the roughly $81 billion Paramount Skydance–Warner Bros. Discovery deal, citing compelling evidence the combined firm would hold substantial share of the wide-release theatrical distribution market.
Latest developments: Crews finished sliding the 22-million-pound Commercial Street Bridge into position over the weekend, and PennDOT District 11 executive Jason Zang said Monday the Parkway East could reopen next week, ahead of schedule.
PennDOT's replacement of the Commercial Street Bridge on the Parkway East (I-376) reached a milestone as contractors moved the new span into place; an early reopening would end weeks of closures on the busy corridor east of Downtown Pittsburgh.
Latest developments: The Allegheny County Health Department will spray six Pittsburgh neighborhoods Wednesday after mosquito samples tested positive for West Nile virus.
The Allegheny County Health Department scheduled pesticide treatment in six city neighborhoods for Wednesday, July 22, after recent mosquito samples returned positive for the mosquito-borne West Nile virus.
Latest developments: The Environmental Charter School board of directors voted to move its middle- and high-school programs to a new campus.
Environmental Charter School, a Pittsburgh public charter, approved relocating its middle- and high-school programs to a new facility, consolidating its older grades away from their current buildings.
Latest developments: Organizers announced the FlyBy 5K and 2-Mile Fun Run/Walk will return to Pittsburgh International Airport on Saturday, September 19, 2026.
The FlyBy 5K and 2-Mile Fun Run/Walk sends runners and walkers along the flat, closed taxiways of Pittsburgh International Airport in Findlay Township on Saturday, September 19, 2026, a rare chance to travel the airfield on foot.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: The Post-Gazette spotlighted Trundle Manor, a macabre curiosity museum in Swissvale, in its off-the-beaten-path series.
Trundle Manor, a by-appointment museum of the weird and quirky in Swissvale, displays a private collection of oddities and curiosities for visitors seeking something off the beaten path.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Pirates (52-48)
Sun Jul 19 · Pirates 7 · Guardians 1 · Final
Skenes strikes out 8 in 7 innings as Pirates roll to 7-1 win over Guardians
Up Next · Pirates @ Yankees · Mon Jul 20, 7:05 PM
Latest developments: Post-Gazette columnist Noah Hiles argued in his July 20 weekend column that the Pirates should hold onto shortstop Oneil Cruz, at least for now.
Noah Hiles used his Post-Gazette weekend column to make the case against dealing Oneil Cruz as the trade deadline nears, weighing Cruz's value against the Pirates' longer-term direction under manager Don Kelly.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: A Post-Gazette 'Off The Bat' column, July 20, said an unfortunate 'future Yankee' comment reopened the conversation about ace Paul Skenes' long-term future in Pittsburgh.
The Post-Gazette revisited the perennial worry over whether the Pirates can keep All-Star right-hander Paul Skenes, prompted by an offhand 'future Yankee' remark that stirred fan anxiety about his eventual free agency.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette's July 20 training-camp countdown asked whether center Zach Frazier can follow the franchise's line of standout centers.
The Post-Gazette profiled Steelers center Zach Frazier as camp at Saint Vincent College nears, measuring him against Pittsburgh's history of anchoring pivots and his role protecting quarterback Aaron Rodgers.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: ESPN's NWSL Power Rankings vaulted NJ/NY Gotham FC to the top spot after they beat the Washington Spirit.
Gotham FC, powered by U.S. internationals Rose Lavelle and Jaedyn Shaw alongside Spain's Esther González and Australia's Sam Kerr, climbed to No. 1 in ESPN's NWSL Power Rankings on the strength of its star-studded, in-form attack.
Sources: ESPN Soccer · ↑ top
Latest developments: A Washington judge set a September 28 trial for former Olympic canoe racer David Hearn.
David Hearn, a former U.S. Olympic canoe slalom racer, faces a September 28 trial in Washington on charges he deliberately damaged the Lincoln Memorial Reflecting Pool.
Sources: ESPN Olympics · ↑ top
S&P 500 7,524.56 ▼ -0.1% Dow 52,472.99 ▼ -0.4% Nasdaq 25,930.32 ▼ -0.5% WTI crude 79.70 ▲ +11.9% EUR/USD 1.1430 ▲ +0.1% GBP/USD 1.3442 ▲ +0.4% USD/JPY 162.32 = +0.0%