daily plain-text briefing: security, markets, business, and pittsburgh
The Qilin ransomware gang is breaching corporate networks through a critical Palo Alto GlobalProtect flaw as fresh extortion schemes and AI-agent attacks surface across the industry.
Latest developments: Estée Lauder disclosed that attackers exploited an Oracle E-Business Suite zero-day to exfiltrate personal, financial, and health information from its human-resources system back in August 2025.
The cosmetics maker, one of the world's largest beauty companies, ran the vulnerable Oracle EBS instance for HR operations; affected individuals face exposure of Social Security and payment data and should watch for identity fraud.
Sources: SecurityWeek · Help Net Security · BleepingComputer · ↑ top
Latest developments: Kaspersky's Securelist detailed two recent cases in which attackers turned Windows' own BitLocker against victims, locking drives after entering through RDP, MSSQL, RMM tools, and web shells, then printing small ransom demands on the targets' office printers.
The scheme weaponizes native BitLocker encryption and low ransom figures to extract quiet payments; Kaspersky published the tactics and defenses as governments weigh outright bans on ransom payments amid a broader surge in attacks.
Sources: Securelist (Kaspersky) · Ars Technica Security · ↑ top
Latest developments: Zimbra shipped an update resolving critical command injection, cross-site scripting, restriction bypass, and SSRF flaws, while 0patch released free unofficial micropatches for the Windows LegacyHive zero-day that escalates privileges on fully updated systems.
Zimbra mail servers and up-to-date Windows machines both remain exposed until administrators apply the fixes; the LegacyHive privilege-escalation bug lacks an official Microsoft patch, making the free micropatch a stopgap for exposed hosts.
Sources: SecurityWeek · BleepingComputer · ↑ top
Latest developments: Arctic Wolf caught the Qilin ransomware gang exploiting a critical PAN-OS GlobalProtect authentication bypass to breach victims' networks, marking the flaw's shift from disclosure to active ransomware use.
Palo Alto Networks' GlobalProtect VPN carries an authentication bypass that lets attackers slip past login controls; Qilin now rides it into corporate networks, so operators running PAN-OS should patch and audit GlobalProtect portals immediately.
Sources: BleepingComputer · ↑ top
Latest developments: Researchers demonstrated that an Android app able to draw over other windows and write to shared storage can plant instructions no human eye will see, feed them to the AI agent driving the phone, and in two more steps run commands on the PC controlling that agent.
The chain, one of seven attacks shown against five open-source mobile agent frameworks including AppAgent and AppAgentX, exposes how autonomous phone agents trust on-screen text; developers should treat rendered content as untrusted input and isolate agent execution.
Sources: The Hacker News · ↑ top
Latest developments: Three Zhejiang University researchers unveiled Bit2Watt in a paper accepted to CHES 2026, showing that a cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the electrical grid feeding it.
Bit2Watt needs no exploit and no break-in, relying only on legitimate GPU workloads to modulate power; the finding pressures cloud providers to smooth and monitor data-center power dynamics against grid-destabilizing tenants.
Sources: The Hacker News · ↑ top
Latest developments: Defense Secretary Pete Hegseth and top commanders went to Capitol Hill on July 21 to ask Congress for $67 billion in war funding as the US launched a 10th consecutive night of strikes on Iran and Tehran struck a tanker in the Strait of Hormuz.
The United States and Iran appear to be sliding back toward full-scale war; 17 American troops have died, US forces are bombing Iran nightly to reopen the Strait of Hormuz, and Iran is firing on Gulf shipping, keeping Brent crude near $90 a barrel.
Sources: WSJ Politics · WSJ Markets · ↑ top
Latest developments: With the Supreme Court having thrown out his reciprocal duties, President Trump prepared a fresh tariff barrage on July 21, threatening an additional 50% on Canadian goods and letting broad 10% levies expire, as US petrol climbed back above $4 a gallon.
Trump is reigniting his global trade war, threatening 50% tariffs on a wide range of Canadian goods over autos, alcohol, and dairy after the US Supreme Court struck down the reciprocal duties that anchored his tariff regime.
Sources: FT World · FT World · ↑ top
Today: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 83F.
Tonight: Chance Showers And Thunderstorms, low 65F.
Wednesday: Slight Chance Rain Showers then Mostly Sunny, high 77F.
Latest developments: TribLive reported July 21 that a new event venue, Four Maples Place, has taken over the former Schramm Farms & Orchards market in Penn Township.
Four Maples Place, an event venue, now occupies the former Schramm Farms & Orchards market in Penn Township, Westmoreland County, reviving a site long known for fresh produce, a fall pumpkin patch, and a corn maze.
Latest developments: TribLive reported July 21 that the New York real estate firm owning the distressed Heights Plaza in Harrison says the property's prospects are improving.
The owners of Heights Plaza, a distressed 30-acre commercial property in Harrison Township, Allegheny County, say the long-struggling shopping plaza's fortunes are finally turning up.
Latest developments: PennDOT said July 21 the new Parkway East bridge is nearly in place on I-376, days after crews demolished the old span.
PennDOT's contractor finished sliding the new Commercial Street bridge into position over the Parkway East (I-376), completing the skid days after imploding the old span.
Latest developments: Allegheny County sent workers an apology note July 21 previewing new mental-health support for its 911 department after a high-profile employee's insensitive comments last week.
Allegheny County is rolling out added support for 911 dispatchers to address a mental-health crisis in the department, moving to contain the fallout from insensitive comments a prominent employee made last week.
Latest developments: Penn Hills set up a trash hotline July 21 after weeks of missed pickups and overflowing bins, blaming staffing shortages.
Penn Hills officials opened a hotline for residents after weeks of missed garbage collection left bins overflowing across the municipality, pointing to staffing shortages as the cause.
Latest developments: TribLive reported July 21 that Aspinwall's Big Night Out returns Thursday, Aug. 6.
Aspinwall holds its biggest annual event, the Big Night Out, on Thursday, Aug. 6, with a foam party, martial-arts demonstrations, live music, and games organized by borough volunteers.
Pirates (52-49)
Mon Jul 20 · Pirates 5 · Yankees 8 · Final
Jazz Chisholm Jr. homers twice and drives in 5 as Yankees sink Pirates 8-5 after benches clear
Up Next · Pirates @ Yankees · Tue Jul 21, 7:05 PM
Latest developments: The Post-Gazette's training-camp countdown, July 20, weighed whether center Zach Frazier can follow the Steelers' lineage of standout centers.
The Post-Gazette cast center Zach Frazier as a candidate to extend a Steelers tradition of quality play at the position as the team readies for training camp at Saint Vincent College in Latrobe.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Pirates reliever Dennis Santana and Yankees infielder Jose Caballero sparked a benches-clearing altercation during the Pirates-Yankees series, the Post-Gazette reported July 21.
A confrontation between Pirates reliever Dennis Santana and Yankees infielder Jose Caballero emptied both dugouts at Yankee Stadium during Pittsburgh's series in New York.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,510.15 ▼ -0.2% Dow 52,341.11 ▼ -0.5% Nasdaq 25,857.30 ▼ -0.6% WTI crude 80.72 ▲ +10.4% EUR/USD 1.1430 ▲ +0.1% GBP/USD 1.3442 ▲ +0.4% USD/JPY 162.32 = +0.0%