daily plain-text briefing: security, markets, business, and pittsburgh
Ransomware crews and AI-powered attackers race defenders to weaponize freshly disclosed flaws, as Qilin turns a Palo Alto VPN bug into initial access and poisoned web pages hijack AI coding agents.
Latest developments: Intezer and Kodem Security showed that hidden text on a web page makes AWS's agentic IDE Kiro rewrite its own configuration file and run attacker code with no approval step, which AWS has patched, while separate researchers proved invisible on-screen text can drive five open-source Android agent frameworks, including AppAgent and AppAgentX, to run commands on the host PC.
Attackers hide instructions in ordinary web pages and app screens that AI coding and mobile agents faithfully execute, converting a routine summarize-this-page request into remote code execution. Developers running agentic tools should restrict what the agent can write and run.
Sources: The Hacker News · The Hacker News · Wired Security · BleepingComputer · ↑ top
Latest developments: Google DeepMind released Gemini 3.5 Flash Cyber, a model that discovers, validates, and patches flaws through CodeMender for governments and trusted partners, and Cisco shipped its open-weight Antares models for cheap vulnerability localization, even as Dark Reading detailed a Russian-speaking actor named Trim who stripped guardrails from frontier models and bolted them onto offensive security tools.
The same large language models now power vulnerability discovery for defenders and exploit development for attackers, with Google, Cisco, and Ivanti automating triage while criminal operators build jailbroken attack platforms. Security teams should weigh AI remediation gains against the accelerating offensive tooling.
Sources: The Hacker News · SecurityWeek · Dark Reading · Dark Reading · ↑ top
Latest developments: Attackers exploiting the WordPress wp2shell chain, CVE-2026-63030 and CVE-2026-60137, moved past scanning to install persistent webshells and malicious plugins on compromised servers, while Defused Cyber confirmed in-the-wild remote code execution against ServiceNow AI Platform sandbox-escape flaw CVE-2026-6875, rated 9.5.
Public proof-of-concept code now turns disclosure into mass compromise within hours, as vendor patch diffs hand attackers a map of what to hit. Administrators must patch WordPress, ServiceNow, and SharePoint on emergency timelines and hunt for webshells.
Sources: The Hacker News · BleepingComputer · SecurityWeek · The Hacker News · ↑ top
Latest developments: Arctic Wolf Labs tied multiple June 2026 intrusions to Qilin, also called Agenda, exploiting Palo Alto Networks PAN-OS authentication bypass CVE-2026-0257, rated 7.8, in the GlobalProtect portal and gateway to gain a foothold before deploying ransomware.
Qilin runs a ransomware-as-a-service operation that now uses the patched GlobalProtect flaw as its entry point. Organizations running PAN-OS should apply the fix and audit VPN portals for compromise.
Sources: The Hacker News · BleepingComputer · ↑ top
Latest developments: President Trump signed an executive order directing defense contractors to build end-to-end visibility into critical supply chains, covering software dependencies, foreign ownership, and cyber-related supplier risk, landing as Ars Technica reported that more than one-eighth of apps aimed at U.S. troops carry Chinese and Russian code.
The order pushes the defense industrial base toward full software and supplier transparency to root out hidden foreign risk. Contractors face new requirements to inventory dependencies and ownership across their supply chains.
Sources: SecurityWeek · Ars Technica Security · ↑ top
Latest developments: The Anubis ransomware gang publicly claimed the attack that suspended production at the Coca-Cola Company's Fairlife dairy subsidiary and threatened to publish stolen corporate data unless Fairlife pays.
Anubis, a ransomware-as-a-service crew that has battered healthcare targets, halted Fairlife dairy production across the United States earlier this month and now moves to extortion by leak threat.
Sources: BleepingComputer · ↑ top
Latest developments: President Trump vowed to strike Iran's Pickaxe Mountain nuclear site, Goldman Sachs warned crude could hit $120 a barrel if the Strait of Hormuz stays disrupted, and Kazakhstan halted oil shipments through the Caspian Pipeline Consortium terminal after Ukrainian tanker attacks.
The war between the United States and Iran has closed the Strait of Hormuz on and off for weeks and killed 18 American service members; oil futures rose a third straight session Tuesday, July 21, as Saudi tankers reversed course following Houthi threats to Red Sea shipping.
Sources: FT World · WSJ Markets · FT Markets · ↑ top
Latest developments: Prime Minister Mark Carney said he and President Trump agreed to accelerate trade talks to resolve friction and avoid the new 50% U.S. tariff Trump imposed Monday on Canadian goods.
Trump slapped an additional 50% tariff on a wide range of Canadian goods Monday, July 20, accusing Ottawa of unfair practices in autos, alcohol, and dairy; a deal in the accelerated talks would head off the levy.
Sources: WSJ World News · ↑ top
This Afternoon: Showers And Thunderstorms Likely, high 83F.
Tonight: Showers And Thunderstorms Likely, low 64F.
Wednesday: Partly Sunny, high 76F.
Latest developments: Union representatives for employees of Humane Animal Rescue of Pittsburgh are entering contract negotiations with management after years of pushback.
Workers at Humane Animal Rescue of Pittsburgh, which runs shelters and a wildlife rehabilitation center, voted to unionize and will begin bargaining with management, TribLive reported July 21.
Latest developments: Dough Daddy Brewery in Gibsonia took the gold medal in the pumpkin beer category at the U.S. Open Beer Championships.
Dough Daddy Brewery, in Gibsonia, won gold for its pumpkin beer at the U.S. Open Beer Championships, KDKA reported July 21.
Latest developments: The National Weather Service issued a severe thunderstorm watch through 8 p.m. Tuesday for Allegheny, Beaver, Fayette, Greene, Washington, and Westmoreland counties, and Kennywood, Sandcastle, and Idlewild & Soak Zone closed early at 2 p.m. as damaging winds, hail, and a possible tornado approached.
Two waves of strong to severe storms carrying damaging winds, heavy rain, flash flooding, and a tornado threat moved across Western Pennsylvania on Tuesday, July 21.
Latest developments: The Department of Public Works' Forestry Division launched its annual search for the City of Pittsburgh's official Christmas tree, inviting residents to submit evergreens of any variety for the City-County Building display.
Pittsburgh sources the tree that stands at the City-County Building each holiday season from local residents; submissions opened this week, five months before Christmas.
Sources: Pittsburgh Magazine · KDKA · ↑ top
Latest developments: Beth Huston will lead the Deer Lakes School District as its new superintendent, part of a broader administrative shake-up, TribLive reported July 21.
The Deer Lakes School District, serving West Deer, East Deer, Frazer, and Fawn townships in northern Allegheny County, named Beth Huston superintendent amid changes to its administrative team.
Latest developments: OpenStreetsPgh holds its final 2026 event Sunday, July 26, turning three miles of the Strip District and Lawrenceville into car-free public space.
OpenStreetsPgh, which opens city streets for walking, biking, and community activities, clears three miles through the Strip District and Lawrenceville of traffic on Sunday, July 26; the event is free and open to all.
Pirates (52-49)
Mon Jul 20 · Pirates 5 · Yankees 8 · Final
Jazz Chisholm Jr. homers twice and drives in 5 as Yankees sink Pirates 8-5 after benches clear
Tue Jul 21 · Pirates @ Yankees · Postponed
Up Next · Pirates @ Yankees · Wed Jul 22, 1:05 PM
Latest developments: Pirates reliever Dennis Santana explained why tempers flared and both benches cleared during the loss at Yankee Stadium, pointing to a confrontation involving the Yankees' José Caballero.
The Post-Gazette reported July 21 on the bench-clearing dust-up in the Pirates-Yankees series opener in New York, with reliever Dennis Santana detailing what set it off.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette's training-camp countdown asked whether center Zach Frazier can follow the Steelers' line of great centers as camp opens at Saint Vincent College.
The July 20 countdown cast second-year center Zach Frazier as an anchor of the Steelers' offensive line under coach Mike McCarthy.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's Off The Bat column revisited speculation about ace Paul Skenes' future after a 'future Yankee' comment resurfaced during the Yankees series.
The column weighed whether the small-market Pirates can keep two-time All-Star Paul Skenes long term amid recurring talk he could eventually land with a big-market club.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: With the 2026 World Cup across the United States, Canada, and Mexico now finished, the Guardian reported an American bid for the 2038 tournament is gaining traction, spurred by President Trump urging FIFA's Gianni Infantino to bring it back while he is still around.
Booming ticketing and hospitality revenue from the 2026 tournament, plus FIFA's drive to recoup lost television income, make another United States hosting run plausible for 2038.
Sources: Guardian World Cup 2026 · ↑ top
S&P 500 7,510.15 ▼ -0.2% Dow 52,341.11 ▼ -0.5% Nasdaq 25,857.30 ▼ -0.6% WTI crude 80.72 ▲ +10.4% EUR/USD 1.1430 ▲ +0.1% GBP/USD 1.3442 ▲ +0.4% USD/JPY 162.32 = +0.0%