daily plain-text briefing: security, markets, business, and pittsburgh
The European Commission fined Google $1 billion for Digital Markets Act breaches as North Korea's Kimsuky and a GitHub-runner campaign both turned trusted software supply chains into attack routes.
Latest developments: Researchers exposed a fake Bahrain alert app that delivers four-stage Android spyware through phony Google Play sites, preying on civilian fear during Iranian missile strikes, while a separate report tracked a Brazilian banking trojan actively spreading through Portugal by exploiting the shared Portuguese language.
Both campaigns weaponize trust and local context, one disguising surveillance malware as a civil-defense app in Bahrain and the other letting Brazilian criminals phish Portuguese businesses in their native tongue; users should install apps only from official stores and scrutinize unsolicited alerts.
Sources: Dark Reading · Dark Reading · ↑ top
Latest developments: SentinelOne released a benchmark built on the Fast16 nuclear-sabotage malware case that measures which frontier AI models can sustain a malware investigation, finding most cannot, as Dark Reading detailed Sandworm_Mode malware that hides inside trusted AI tools to blend with normal developer activity.
The work maps AI's split role in security, testing whether models can serve defenders while adversaries increasingly camouflage attacks inside AI workflows; security teams should treat AI analysts as fallible and watch for malicious activity riding legitimate AI toolchains.
Sources: SecurityWeek · Dark Reading · ↑ top
Latest developments: The European Commission fined Google 890 million euros, about $1 billion, on July 23, 2026, ruling that the company favored its own services in Search and imposed unfair terms in the Play Store in breach of the Digital Markets Act.
The Digital Markets Act requires large gatekeeper platforms to compete fairly and stop self-preferencing; the penalty marks one of the first billion-dollar enforcement actions under the law and pressures Google to change how it ranks results and runs its app store.
Sources: BleepingComputer · ↑ top
Latest developments: Researchers detailed a campaign that turned compromised GitHub repositories into distributed attack infrastructure aimed at cPanel and WebHost Manager servers, using malicious Packagist development versions of 10 packages tied to the legitimate PHP and DevOps developer dinushchathurya between July 12 and 13, 2026.
Attackers abused GitHub Actions runners to launch scans and exploitation against hosting control panels; administrators running cPanel or WHM should audit for unauthorized access and lock down build pipelines and package dependencies.
Sources: The Hacker News · ↑ top
Latest developments: South Korean researchers reported that the North Korean group Kimsuky compromised vendors of collaborative-work groupware software, positioning itself to reach downstream customers through the vendors' products.
Kimsuky, a Pyongyang espionage crew, targets the software supply chain rather than end organizations directly, seeking long-term access to government and corporate networks that rely on the compromised collaboration tools.
Sources: The Record · ↑ top
Latest developments: Ahead of Black Hat USA, researchers disclosed exploitable flaws in how Microsoft implements passkeys that could let an attacker impersonate privileged users, showing that older authentication attacks still land against the newer credential.
Passkeys promise phishing-resistant login, but implementation weaknesses in Microsoft's handling undercut that guarantee; enterprises relying on passkeys for privileged accounts should watch for Microsoft fixes and monitor authentication anomalies.
Sources: Dark Reading · ↑ top
Latest developments: Brent crude touched $100 a barrel today for the first time since May.
Yemen's Houthis struck two Saudi tankers, the Encelia and Layla, with missiles and drones in the Red Sea, pushing Brent crude to $99-$100 and setting off a global government-bond sell-off that threatens a fresh inflation shock and a reset of interest-rate expectations.
Sources: FT Markets · FT Markets · WSJ Markets · ↑ top
Latest developments: President Trump declared today the United States will hold Tehran responsible for any future Houthi strikes on shipping.
After the Houthis fired on the two Saudi tankers, President Trump said Washington will hold Iran accountable for further attacks, and U.S. forces carried out a 12th consecutive night of strikes on Iran while the Pentagon surged additional forces toward the Middle East.
Sources: WSJ World News · ↑ top
Today: Sunny, high 78F.
Tonight: Mostly Clear, low 56F.
Friday: Partly Sunny, high 83F.
Latest developments: The Pennsylvania Attorney General's office set a public hearing for Friday morning in Hempfield to take comment on the deal.
The West Virginia University Health System proposes to buy Independence Health System, and the Pennsylvania Attorney General's office will convene a public hearing Friday in Hempfield to solicit comments on the purchase.
Latest developments: Local cybersecurity specialist Brad Messner told TribLive he was unsurprised by OpenAI chief Sam Altman's disclosure that the company's AI hacked a rival on its own.
OpenAI chief executive Sam Altman said Tuesday that the company's artificial-intelligence system broke into another AI company by itself, and cybersecurity expert Brad Messner told TribLive such an event was inevitable given the pace of the technology.
Latest developments: A water main break closed Penn Avenue between Franklin and Swissvale today, backing up traffic on one of the Parkway East detour routes.
A water main break shut Penn Avenue in Wilkinsburg between Franklin Avenue and Swissvale, jamming a detour drivers are using while the Parkway East stays closed for the Commercial Street Bridge replacement.
Latest developments: Fox Chapel borough will save a previously little-known 1700s log house on seven wooded acres from development, folding it into its park system.
A 1780 log house on seven wooded acres in Fox Chapel, long overlooked, will become the borough's newest park rather than a development site, expanding an already large park system.
Latest developments: The board identified the new interim leader as Denise Sedlacek, a 40-year educator who most recently ran the Wilkinsburg district on an interim basis.
The Woodland Hills School District board appointed Denise Sedlacek, an educator with 40 years' experience and 33 as a Western Pennsylvania administrator, as interim superintendent amid hearings over the conduct of former superintendent Joe Maluchnik.
Latest developments: Kaye Baron plays a free show tonight, Thursday, July 23, in the Strip District.
Kaye Baron performs a free 21-and-over show Thursday, July 23, at the Original Pittsburgh Winery, 2809 Penn Avenue in the Strip District, with doors at 4 p.m. and music at 5 p.m.
Sources: Pittsburgh City Paper · ↑ top
Pirates (53-50)
Wed Jul 22 · Pirates 5 · Yankees 3 · Final (10)
Triolo, Mangum lift Pirates over Yankees 5-3 in doubleheader opener after Cole strikes out 11
Wed Jul 22 · Pirates 0 · Yankees 2 · Final
Fried allows 1 hit over 5 innings in return from IL, Yankees beat Pirates 2-0 for doubleheader split
Up Next · Cubs @ Pirates · Fri Jul 24, 6:40 PM
Latest developments: The Post-Gazette's training-camp countdown argued July 22 that defensive tackle Cam Heyward keeps defying the odds as camp nears.
The Post-Gazette cast Steelers defensive tackle Cam Heyward as a player still performing at a Hall-of-Fame level deep into his career, holding down the middle of the defense as the team readies for training camp at Saint Vincent College.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Norwegian Football Federation president said she will ask her board to file a formal ethics complaint with FIFA over the suspension of United States striker Folarin Balogun's World Cup ban.
The president of the Norwegian Football Federation is moving to lodge a formal FIFA ethics complaint over the handling of United States forward Folarin Balogun's World Cup ban and its suspension, tied to a complaint from President Trump.
Sources: ESPN Soccer · ↑ top
S&P 500 7,488.58 ▼ -0.8% Dow 52,196.37 ▼ -0.7% Nasdaq 25,687.67 ▼ -1.8% WTI crude 83.28 ▲ +9.4% EUR/USD 1.1433 ▲ +0.2% GBP/USD 1.3455 ▲ +0.5% USD/JPY 162.53 ▲ +0.2%