================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, July 21, 2026 - 9:05 AM EDT ================================================================ The Qilin ransomware gang is breaching corporate networks through a critical Palo Alto GlobalProtect flaw as fresh extortion schemes and AI-agent attacks surface across the industry. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Freshly disclosed flaws keep becoming extortion footholds, with Qilin abusing Palo Alto GlobalProtect, an Oracle E-Business Suite zero-day exposing Estée Lauder HR data, and attackers weaponizing BitLocker itself. see: Qilin Ransomware Exploits Palo Alto GlobalProtect VPN; Estée Lauder Oracle EBS Breach; BitLocker Extortion via Office Printers * [TREND] Researchers keep opening new attack surfaces, showing invisible text can hijack an Android phone's AI agent while Bit2Watt swings cloud GPU power draw enough to threaten the grid. see: Invisible Text Hijacks Android AI Agents; Bit2Watt Turns Cloud GPUs Against the Power Grid * [TREND] Washington escalated on two fronts as Hegseth sought $67 billion for a widening war on Iran and Trump readied a fresh tariff barrage after the Supreme Court voided his reciprocal duties. see: US-Iran War Nears Full Scale as Hegseth Seeks $67 Billion; Trump Renews Trade War After Supreme Court Voids Reciprocal Tariffs * [UPDATE (new)] Defenders got fresh fixes as Zimbra patched critical command injection and SSRF flaws and 0patch shipped free micropatches for the Windows LegacyHive privilege-escalation zero-day. see: Fresh Patches for Zimbra and Windows LegacyHive * [UPDATE (new)] Locally, PennDOT slid the new Parkway East bridge into place, Penn Hills opened a trash hotline after missed pickups, and Allegheny County pledged 911 operator support. see: New Parkway East Bridge Slid Into Place; Penn Hills Opens Trash Hotline After Missed Pickups; Allegheny County Pledges 911 Operator Support SECURITY ---------------------------------------------------------------- 1. ESTÉE LAUDER ORACLE EBS BREACH Data Breaches · [breach, zero-day] Latest developments: Estée Lauder disclosed that attackers exploited an Oracle E-Business Suite zero-day to exfiltrate personal, financial, and health information from its human-resources system back in August 2025. The cosmetics maker, one of the world's largest beauty companies, ran the vulnerable Oracle EBS instance for HR operations; affected individuals face exposure of Social Security and payment data and should watch for identity fraud. - SecurityWeek: https://www.securityweek.com/estee-lauder-discloses-impact-from-oracle-ebs-zero-day-hack/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw/ 2. BITLOCKER EXTORTION VIA OFFICE PRINTERS Ransomware and Cybercrime · [ransomware, extortion] Latest developments: Kaspersky's Securelist detailed two recent cases in which attackers turned Windows' own BitLocker against victims, locking drives after entering through RDP, MSSQL, RMM tools, and web shells, then printing small ransom demands on the targets' office printers. The scheme weaponizes native BitLocker encryption and low ransom figures to extract quiet payments; Kaspersky published the tactics and defenses as governments weigh outright bans on ransom payments amid a broader surge in attacks. - Securelist (Kaspersky): https://securelist.com/new-extortion-scheme-printers-bitlocker/120718/ - Ars Technica Security: https://arstechnica.com/security/2026/07/pay-up-or-not-ransomware-surge-has-victims-facing-tough-choices/ 3. FRESH PATCHES FOR ZIMBRA AND WINDOWS LEGACYHIVE Vulnerabilities and Exploits · [patch, zero-day] Latest developments: Zimbra shipped an update resolving critical command injection, cross-site scripting, restriction bypass, and SSRF flaws, while 0patch released free unofficial micropatches for the Windows LegacyHive zero-day that escalates privileges on fully updated systems. Zimbra mail servers and up-to-date Windows machines both remain exposed until administrators apply the fixes; the LegacyHive privilege-escalation bug lacks an official Microsoft patch, making the free micropatch a stopgap for exposed hosts. - SecurityWeek: https://www.securityweek.com/zimbra-update-patches-critical-vulnerabilities/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/windows-legacyhive-zero-day-flaw-gets-free-unofficial-patches/ 4. QILIN RANSOMWARE EXPLOITS PALO ALTO GLOBALPROTECT VPN Ransomware and Cybercrime · [ransomware, vulnerability, vpn] Latest developments: Arctic Wolf caught the Qilin ransomware gang exploiting a critical PAN-OS GlobalProtect authentication bypass to breach victims' networks, marking the flaw's shift from disclosure to active ransomware use. Palo Alto Networks' GlobalProtect VPN carries an authentication bypass that lets attackers slip past login controls; Qilin now rides it into corporate networks, so operators running PAN-OS should patch and audit GlobalProtect portals immediately. - BleepingComputer: https://www.bleepingcomputer.com/news/security/critical-globalprotect-vpn-bug-now-exploited-in-ransomware-attacks/ 5. INVISIBLE TEXT HIJACKS ANDROID AI AGENTS AI Security · [ai, prompt-injection, mobile] Latest developments: Researchers demonstrated that an Android app able to draw over other windows and write to shared storage can plant instructions no human eye will see, feed them to the AI agent driving the phone, and in two more steps run commands on the PC controlling that agent. The chain, one of seven attacks shown against five open-source mobile agent frameworks including AppAgent and AppAgentX, exposes how autonomous phone agents trust on-screen text; developers should treat rendered content as untrusted input and isolate agent execution. - The Hacker News: https://thehackernews.com/2026/07/open-source-android-ai-agents-could-let.html 6. BIT2WATT TURNS CLOUD GPUS AGAINST THE POWER GRID Vulnerabilities and Exploits · [research, infrastructure, cloud] Latest developments: Three Zhejiang University researchers unveiled Bit2Watt in a paper accepted to CHES 2026, showing that a cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the electrical grid feeding it. Bit2Watt needs no exploit and no break-in, relying only on legitimate GPU workloads to modulate power; the finding pressures cloud providers to smooth and monitor data-center power dynamics against grid-destabilizing tenants. - The Hacker News: https://thehackernews.com/2026/07/new-bit2watt-attack-could-let-cloud.html BUSINESS AND POLITICS ---------------------------------------------------------------- * US-Iran War Nears Full Scale as Hegseth Seeks $67 Billion Latest developments: Defense Secretary Pete Hegseth and top commanders went to Capitol Hill on July 21 to ask Congress for $67 billion in war funding as the US launched a 10th consecutive night of strikes on Iran and Tehran struck a tanker in the Strait of Hormuz. The United States and Iran appear to be sliding back toward full-scale war; 17 American troops have died, US forces are bombing Iran nightly to reopen the Strait of Hormuz, and Iran is firing on Gulf shipping, keeping Brent crude near $90 a barrel. - WSJ Politics: https://www.wsj.com/politics/hegseth-heads-to-capitol-hill-as-iran-war-drums-beat-louder-40c166b3 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-edges-lower-amid-hopes-of-new-u-s-iran-ceasefire-892b1c0a?mod=rss_markets_main * Trump Renews Trade War After Supreme Court Voids Reciprocal Tariffs Latest developments: With the Supreme Court having thrown out his reciprocal duties, President Trump prepared a fresh tariff barrage on July 21, threatening an additional 50% on Canadian goods and letting broad 10% levies expire, as US petrol climbed back above $4 a gallon. Trump is reigniting his global trade war, threatening 50% tariffs on a wide range of Canadian goods over autos, alcohol, and dairy after the US Supreme Court struck down the reciprocal duties that anchored his tariff regime. - FT World: https://www.ft.com/content/c346e82e-4d2c-4a2a-b4c3-64a4aa47d4e4?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/c31cdab6-b2cf-4754-9c84-73c3c848bcb3?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 83F. Tonight: Chance Showers And Thunderstorms, low 65F. Wednesday: Slight Chance Rain Showers then Mostly Sunny, high 77F. Business: * Four Maples Place Opens in Former Schramm Market Latest developments: TribLive reported July 21 that a new event venue, Four Maples Place, has taken over the former Schramm Farms & Orchards market in Penn Township. Four Maples Place, an event venue, now occupies the former Schramm Farms & Orchards market in Penn Township, Westmoreland County, reviving a site long known for fresh produce, a fall pumpkin patch, and a corn maze. - TribLive: https://triblive.com/local/westmoreland/four-maples-place-event-venue-brings-new-life-to-former-schramm-farms-orchards-market/ * Owners See New Hope for Harrison's Heights Plaza Latest developments: TribLive reported July 21 that the New York real estate firm owning the distressed Heights Plaza in Harrison says the property's prospects are improving. The owners of Heights Plaza, a distressed 30-acre commercial property in Harrison Township, Allegheny County, say the long-struggling shopping plaza's fortunes are finally turning up. - TribLive: https://triblive.com/local/valley-news-dispatch/new-hope-for-heights-plaza-in-harrison-owners-say/ Around town: * New Parkway East Bridge Slid Into Place Latest developments: PennDOT said July 21 the new Parkway East bridge is nearly in place on I-376, days after crews demolished the old span. PennDOT's contractor finished sliding the new Commercial Street bridge into position over the Parkway East (I-376), completing the skid days after imploding the old span. - WTAE: https://www.wtae.com/article/penndot-new-parkway-east-bridge-being-slid/73179332 * Allegheny County Pledges 911 Operator Support Latest developments: Allegheny County sent workers an apology note July 21 previewing new mental-health support for its 911 department after a high-profile employee's insensitive comments last week. Allegheny County is rolling out added support for 911 dispatchers to address a mental-health crisis in the department, moving to contain the fallout from insensitive comments a prominent employee made last week. - WPXI: https://www.wpxi.com/news/local/apology-note-allegheny-county-previews-more-support-911-operators/IDVSDDYO6NEPRO4TLZQUAEICYU/ * Penn Hills Opens Trash Hotline After Missed Pickups Latest developments: Penn Hills set up a trash hotline July 21 after weeks of missed pickups and overflowing bins, blaming staffing shortages. Penn Hills officials opened a hotline for residents after weeks of missed garbage collection left bins overflowing across the municipality, pointing to staffing shortages as the cause. - WTAE: https://www.wtae.com/article/penn-hills-sets-up-trash-hot-line-after-missed-pick-ups/73197483 Events: * Aspinwall's Big Night Out Set for Aug. 6 Latest developments: TribLive reported July 21 that Aspinwall's Big Night Out returns Thursday, Aug. 6. Aspinwall holds its biggest annual event, the Big Night Out, on Thursday, Aug. 6, with a foam party, martial-arts demonstrations, live music, and games organized by borough volunteers. - TribLive: https://triblive.com/local/valley-news-dispatch/aspinwalls-big-night-out-is-set-for-aug-6/ SPORTS ---------------------------------------------------------------- Pirates (52-49) Mon Jul 20 · Pirates 5 · Yankees 8 · Final Jazz Chisholm Jr. homers twice and drives in 5 as Yankees sink Pirates 8-5 after benches clear https://plaintextsports.com/mlb/2026-07-20/pit-nyy Up Next · Pirates @ Yankees · Tue Jul 21, 7:05 PM https://plaintextsports.com/mlb/2026-07-21/pit-nyy Around the Teams: * Can Zach Frazier Join the Steelers' Great Centers? Latest developments: The Post-Gazette's training-camp countdown, July 20, weighed whether center Zach Frazier can follow the Steelers' lineage of standout centers. The Post-Gazette cast center Zach Frazier as a candidate to extend a Steelers tradition of quality play at the position as the team readies for training camp at Saint Vincent College in Latrobe. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/20/training-camp-countdown-zach-frazier-center-offensive-lineman/stories/202607200003 * Pirates, Yankees Clear Benches in New York Latest developments: Pirates reliever Dennis Santana and Yankees infielder Jose Caballero sparked a benches-clearing altercation during the Pirates-Yankees series, the Post-Gazette reported July 21. A confrontation between Pirates reliever Dennis Santana and Yankees infielder Jose Caballero emptied both dugouts at Yankee Stadium during Pittsburgh's series in New York. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/21/mlb-pirates-yankees-altercation-dennis-santana-jose-caballero-new-york/stories/202607200058 READING ---------------------------------------------------------------- * Stratechery -- Netflix Earnings, Is Netflix Washed?, Additional Notes Ben Thompson reads Netflix's latest earnings as solid but unremarkable, arguing the streamer now behaves like a mature company whose most exciting growth days sit behind it. https://stratechery.com/2026/netflix-earnings-is-netflix-washed-additional-notes/ * Ed Zitron -- The OpenAI Bubble Zitron argues that OpenAI's finances and hype amount to an unsustainable bubble, contending the company's spending and revenue math do not add up. https://www.wheresyoured.at/the-openai-bubble/ * Cal Newport -- Why Reading Matters Responding to an Atlantic piece on declining reading, Newport defends deep reading as essential cognitive training that skimming and screens cannot replace. https://calnewport.com/why-reading-matters/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,510.15 ▼ -0.2% Dow 52,341.11 ▼ -0.5% Nasdaq 25,857.30 ▼ -0.6% WTI crude 80.72 ▲ +10.4% EUR/USD 1.1430 ▲ +0.1% GBP/USD 1.3442 ▲ +0.4% USD/JPY 162.32 = +0.0% ================================================================ Generated 2026-07-21 09:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================