daily plain-text briefing: security, markets, business, and pittsburgh
A multinational advisory unmasked Russia's Laundry Bear running a zero-click Zimbra webmail campaign that lifted mail and two-factor codes from Western governments, as ransomware crews squeezed a Swiss rail maker and Japan's frozen-food supply.
Latest developments: Researchers and CISA named the Russian group Laundry Bear, also tracked as Void Blizzard, and detailed a zero-click technique in which opening a booby-trapped message triggers JavaScript that lifts the last 90 days of mail, the full organizational email directory, browser-saved passwords, and two-factor recovery codes.
Russian state-supported actors have compromised Western government and commercial organizations running Zimbra Collaboration Suite since at least July 2025. Administrators should apply the Zimbra patch and reset exposed passwords and 2FA recovery codes.
Sources: The Hacker News · The Record · Unit 42 (Palo Alto) · BleepingComputer · ↑ top
Latest developments: Swiss rail manufacturer Stadler Rail rejected a 10-million-Swiss-franc ($12.3 million) demand from the Everest gang, which stole technical data through a supplier's file-sharing platform using compromised credentials, while a ransomware attack on a Japanese food-and-logistics firm choked frozen-food deliveries to thousands of clients, including Kentucky Fried Chicken franchises.
Ransomware crews keep hitting manufacturing and food supply chains through third-party file-sharing and logistics systems. Firms should harden supplier credentials and segment shared platforms.
Sources: Help Net Security · The Record · Dark Reading · ↑ top
Latest developments: Researchers found attackers turned compromised GitHub repositories into distributed attack infrastructure, pushing malicious development versions of 10 Packagist packages tied to developer dinushchathurya between July 12 and 13, 2026 to hijack GitHub Actions runners and hit cPanel and WebHost Manager servers, while Ukraine's CERT caught LunchPoke, malware disguised as a Notepad++ plugin and bundled with the genuine editor to establish persistence.
Attackers keep hiding inside trusted developer and desktop software so malicious code looks like ordinary activity. Teams should pin package versions, audit CI runners, and vet third-party plugins.
Sources: The Hacker News · BleepingComputer · ↑ top
Latest developments: The European Commission fined Google 890 million euros ($1 billion) for favoring its own services in search and the Play Store in breach of the Digital Markets Act, and Secretary of State Marco Rubio imposed U.S. visa restrictions on individuals tied to transnational cyber-scam operations.
Regulators pressed platform gatekeepers and cybercrime networks on the same day, one through antitrust penalties and the other through travel bans. Companies and scam operators alike face rising legal and financial exposure.
Sources: BleepingComputer · The Record · ↑ top
Latest developments: Group-IB exposed JadeProx, a China-nexus cluster it uncovered on an exposed Alibaba Cloud server in the Singapore region in mid-April 2026, deploying a previously undocumented Windows loader called TriBack Loader against government, healthcare, and education organizations across Asia and Latin America.
JadeProx is a newly disclosed Chinese espionage operation whose TriBack Loader delivers follow-on malware to public-sector and healthcare targets. Defenders should hunt for the loader's indicators and lock down exposed cloud servers.
Sources: The Hacker News · ↑ top
Latest developments: Ahead of Black Hat USA 2026, researchers disclosed exploitable flaws in how Microsoft handles passkeys that let attackers impersonate privileged users, showing that older attack techniques still defeat the login method sold as phishing-resistant.
Weaknesses in Microsoft's passkey implementation undercut a control organizations increasingly trust for high-privilege accounts. Administrators should track Microsoft's fix and reinforce passkey enrollment and recovery paths.
Sources: Dark Reading · ↑ top
Latest developments: Brent crude settled above $100 a barrel on July 23 for the first time in two months after Iran-backed Houthis said they struck two Saudi tankers in the Red Sea and Trump warned the United States weighs a "massive attack" on Iran, touching off a global bond sell-off that lifted the 10-year Treasury yield to its highest level since January 2025.
The Houthi strikes threaten the Bab al-Mandeb Strait, the main alternative to the Strait of Hormuz, and the resulting oil surge revived inflation fears, dragged U.S. stocks lower, and tightened financial conditions worldwide as investors reset interest-rate expectations ahead of next week's Federal Reserve meeting.
Sources: FT Markets · WSJ Markets · FT Markets · WSJ Markets · ↑ top
This Afternoon: Sunny, high 78F.
Tonight: Mostly Clear, low 57F.
Friday: Partly Sunny, high 83F.
Latest developments: Bank of America, the second-largest U.S. bank, will open a retail branch in Greensburg, pushing its Pittsburgh-area footprint into Westmoreland County, WPXI reported July 23.
The new location extends Bank of America's regional retail network into an adjacent county as the bank builds out its physical presence around Pittsburgh.
Latest developments: Walmart is weighing a shuttered Walgreens in the Mon Valley for one of its "Spark Shop" last-mile delivery depots, WPXI reported July 23.
Walmart's Spark Shops turn former drug stores into hubs where gig workers pick up and deliver e-commerce orders to nearby customers, and the Mon Valley site would be among the first of its kind in the Pittsburgh area.
Latest developments: The Post-Gazette reported July 23 that some Allegheny County homeowners found county property records listing their houses as sold when they never sold them, the signature of forged-deed fraud.
Fraudulent deeds transferred ownership of Allegheny County homes without the owners' knowledge, leaving residents to discover the theft only when official records showed their property had changed hands.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: A large water main break shut down a stretch of Penn Avenue in Wilkinsburg on July 23, WTAE reported.
The closure backed up traffic on a bridge detour that already funnels vehicles along Penn Avenue through the borough.
Latest developments: The Post-Gazette reported July 23 that the Allegheny County Jail found possible byproducts of Legionella bacteria in employee bathrooms.
Legionella bacteria can cause Legionnaires' disease, a serious form of pneumonia, making the finding in staff restrooms at the downtown lockup a health concern for jail workers.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: KDKA reported July 23 that North Strabane and Peters township police made hundreds of stops over recent weeks cracking down on aggressive driving along Waterdam Road.
A North Strabane Township Police traffic study found Waterdam Road, which straddles the two Washington County townships, heavily traveled and widely speed-driven, prompting the joint enforcement push.
Latest developments: The weekend guides from NEXTpittsburgh and the Post-Gazette list a full slate of Pittsburgh happenings July 24-26, from Goat Fest and Dance Africa to OpenStreetsPGH, the Caribbean Carnival, and a Dave Matthews Band concert.
The roundups gather the weekend's arts and outdoor events across the city, including OpenStreetsPGH's car-free routes, the Dance Africa cultural celebration, Goat Fest, and the Caribbean Carnival; the guides carry the times, venues, and ticket details.
Sources: NEXTpittsburgh Events · Post-Gazette Music · ↑ top
Pirates (53-50)
Wed Jul 22 · Pirates 5 · Yankees 3 · Final (10)
Triolo, Mangum lift Pirates over Yankees 5-3 in doubleheader opener after Cole strikes out 11
Wed Jul 22 · Pirates 0 · Yankees 2 · Final
Fried allows 1 hit over 5 innings in return from IL, Yankees beat Pirates 2-0 for doubleheader split
Up Next · Cubs @ Pirates · Fri Jul 24, 6:40 PM
Latest developments: The Post-Gazette's training-camp countdown argued July 22 that Steelers defensive tackle Cam Heyward keeps defying his age, playing at an elite level and strengthening a Hall-of-Fame case as camp nears.
Heyward, the veteran anchor of Pittsburgh's defensive line and host of the "Not Just Football" podcast, has stayed among the league's best interior linemen deep into his career.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: On "Footbahlin" Episode 133, posted July 21, Ben Roethlisberger broke down what to watch when the Steelers open training camp a week out, from real position battles to the first signs of the Aaron Rodgers era, and debated what makes a franchise quarterback.
Roethlisberger, the retired Steelers quarterback, hosts the weekly show and framed camp at Saint Vincent College as the moment offseason rumor finally gives way to on-field competition.
Sources: Ben Roethlisberger / Channel Seven (YouTube) · ↑ top
Latest developments: The Post-Gazette's Off The Bat wrote July 20 that an offhand "future Yankee" comment during the Pirates-Yankees series reopened the long-running conversation about ace Paul Skenes' future in Pittsburgh.
Skenes, the Pirates' All-Star ace, stays under club control for several seasons, yet every brush with a big-market team revives speculation about whether small-market Pittsburgh can keep its best pitcher.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: ESPN detailed July 23 how rapper Flavor Flav's four-day SHE Weekend in Las Vegas honored Team USA women, leaving Olympic and Paralympic athletes feeling seen and celebrated.
Flavor Flav, a booster of United States women's sports, staged the inaugural SHE Weekend as a celebration of American female Olympians and Paralympians, part of a broader effort to spotlight women athletes.
Sources: ESPN Olympics · ↑ top
S&P 500 7,488.58 ▼ -0.8% Dow 52,196.37 ▼ -0.7% Nasdaq 25,687.67 ▼ -1.8% WTI crude 83.28 ▲ +9.4% EUR/USD 1.1433 ▲ +0.2% GBP/USD 1.3455 ▲ +0.5% USD/JPY 162.53 ▲ +0.2%