daily plain-text briefing: security, markets, business, and pittsburgh
Russia's Laundry Bear drew a multinational government advisory for zero-click Zimbra webmail espionage as Check Point rushed a patch for an actively exploited firewall-management zero-day.
Latest developments: The NSA, CISA, and partner agencies published joint advisory AA26-204A on July 23, 2026, formally documenting the Russian state-supported group Laundry Bear compromising Western government and commercial organizations running Zimbra Collaboration Suite since at least July 2025, while Palo Alto's Unit 42 detailed the JavaScript injection and Dark Reading described the half-click emails that require a victim only to open or preview a message.
Laundry Bear, also tracked as Void Blizzard, exploits a now-patched Zimbra webmail flaw to lift the last 90 days of mail, the full organizational email directory, browser-saved passwords, and two-factor recovery codes from targets across the US and Ukraine. Zimbra administrators should apply the patch and hunt for the injected JavaScript.
Sources: CISA Advisories · Unit 42 (Palo Alto) · The Hacker News · Dark Reading · ↑ top
Latest developments: Check Point released updates for its Security Management and Multi-Domain Management products fixing CVE-2026-16232, a 9.3-rated authentication bypass in the SmartConsole login process that attackers already exploit in the wild against customers with certain configurations to obtain an application login token and log in with full admin rights.
The flaw lets an unauthenticated attacker seize the management servers that push policy to Check Point firewalls, then alter security policy and configuration. Administrators should patch immediately and review policy changes for tampering.
Sources: SecurityWeek · BleepingComputer · Help Net Security · The Hacker News · ↑ top
Latest developments: Cisco Talos detailed msaRAT, a Rust implant it attributes to the Chaos ransomware group that never opens its own outbound connection but instead launches Chrome or Edge in headless mode, drives them through the Chrome DevTools Protocol, and tunnels command-and-control over a WebRTC channel that hides the attacker's IP from the victim.
Found on a compromised Windows machine ahead of the encryptor, msaRAT enables arbitrary command execution while its traffic blends into ordinary browser activity. Defenders should watch for unexpected headless browser processes and DevTools debugging activity.
Sources: Cisco Talos · The Hacker News · BleepingComputer · ↑ top
Latest developments: OpenAI fixed AgentForger, a ChatGPT Agent flaw that let an attacker create, insert, and remotely control an invisible autonomous AI agent inside a victim organization, while Accomplish AI disclosed a sandbox escape in Anthropic's Claude Cowork that lets the agent break out of its Linux virtual machine to read or write files anywhere on roughly 500,000 users' Macs, and BleepingComputer profiled Dolphin X, a remote access trojan that uses AI profiling to score and rank infected victims.
The disclosures show AI agents serving as both attack surface and attack tool, with forged AI insiders, escaped sandboxes, and malware that uses AI to prioritize high-value targets. Organizations deploying agentic AI should enforce least-privilege access, isolate agent execution, and monitor for unauthorized agent creation.
Sources: SecurityWeek · The Hacker News · BleepingComputer · ↑ top
Latest developments: Huntress researchers disclosed that a threat actor abused Anthropic's Claude Artifacts feature to host a fake Claude desktop download on the genuine claude.ai domain, then promoted it through sponsored Bing ads that compromised employees at at least 29 organizations over two days in July, redirecting them to a spoofed site serving SectopRAT.
The campaign trades on the trust of a legitimate domain and a real search ad to slip a remote access trojan past users hunting for the Claude desktop app. Organizations should treat sponsored search results for software downloads with suspicion and verify vendor download pages directly.
Sources: Help Net Security · BleepingComputer · ↑ top
Latest developments: US federal agencies issued an updated advisory warning that Iranian hackers are targeting programmable logic controllers from Siemens, Schneider Electric, and Rockwell Automation, detailing the techniques the actors use against the industrial control systems that run critical infrastructure.
The advisory adds fresh technical detail on how Iranian operators reach and manipulate PLCs across critical manufacturing, energy, and water sectors. Operators should segment control networks, change default credentials, and restrict internet exposure of these devices.
Sources: SecurityWeek · ↑ top
Latest developments: Earnings from Alphabet and Tesla reignited fears that hyperscalers are overspending on AI, and the Magnificent Seven shed roughly $890 billion in market value Thursday, deepening a broad selloff.
U.S. stocks fell sharply July 23 as investors dumped technology shares over runaway AI data-center spending; Tesla dropped about 15% on a weak quarter, the slide compounded a rout in chip stocks, and it landed atop a jump in oil and Treasury yields, denting the trade that has carried the market.
Sources: WSJ Markets · WSJ US Business · ↑ top
Latest developments: Trump imposed new double-digit tariffs on 60 trading partners July 23 as his stopgap 10% levies expire Friday, pinning them to a forced-labor probe to survive the legal challenges that sank his blanket levies at the Supreme Court.
After the Supreme Court struck down his across-the-board tariffs, President Trump rebuilt the wall with country-by-country duties tied to a forced-labor investigation, hitting dozens of nations and structuring the measures to withstand court review, reshaping U.S. trade policy.
Sources: FT World · WSJ US Business · ↑ top
Tonight: Mostly Clear, low 57F.
Friday: Partly Sunny, high 83F.
Friday Night: Partly Cloudy, low 64F.
Latest developments: An investment group that includes Mt. Lebanon native Mark Cuban bought a stake in Major League Baseball's Athletics ahead of the club's move to Las Vegas.
Mark Cuban, the Mt. Lebanon-born entrepreneur, joined an ownership group taking a piece of the Athletics as the franchise prepares to relocate from its temporary home to Las Vegas, WTAE reported July 23.
Latest developments: Namdar Realty Group committed to repaving the pothole-ridden roads at the Galleria at Pittsburgh Mills, Frazer Township officials said.
Namdar Realty Group, owner of the struggling Galleria at Pittsburgh Mills, promised Frazer Township officials it will repave the complex's roads, ending the bumpy rides and flat tires that have plagued the shopping center, TribLive reported July 23.
Latest developments: More than two dozen states, with Governor Josh Shapiro among the plaintiffs, sued FEMA and the Department of Homeland Security July 23 over conditions attached to disaster grants.
A coalition of 25 states sued the Federal Emergency Management Agency and Department of Homeland Security, challenging new conditions—verifying voter citizenship through a federal database and aiding immigration enforcement—that the Trump administration attached to hundreds of millions in disaster-preparedness and homeland-security funding; Pennsylvania Governor Josh Shapiro is a plaintiff.
Latest developments: PennDOT begins utility work on the Boulevard of the Allies (Route 2208) in Pittsburgh on Sunday, July 26, bringing overnight lane restrictions that run through late September.
PennDOT will start utility work on the Boulevard of the Allies Sunday, July 26, weather permitting, imposing overnight lane restrictions on the Pittsburgh route into late September, WPXI reported.
Latest developments: A drone flight camp at South Fayette High School trained young girls this week to pilot drones and earn certification for a growing profession.
Girls from across southwestern Pennsylvania, among them Ember Tomlinson, gathered at South Fayette High School this week for a drone flight camp that teaches them to fly drones and pursue certification, TribLive reported July 23.
Latest developments: The Pittsburgh Caribbean Carnival returns Friday and Saturday, July 24-25, with two days of Caribbean culture and celebration.
The Pittsburgh Caribbean Carnival, a celebration of Caribbean pride and culture, runs Friday and Saturday, July 24-25, in Pittsburgh, KDKA reported.
Latest developments: The 'Very Eric Carle' exhibit, built from the picture books of 'The Very Hungry Caterpillar' author-illustrator Eric Carle, opened at the Children's Museum of Pittsburgh.
The Children's Museum of Pittsburgh, on the North Side, is showing 'Very Eric Carle,' an exhibit drawn from the work of children's author and illustrator Eric Carle, KDKA reported.
Latest developments: Phipps hosts Adiós Agave Night on Friday, July 24, from 5 to 10 p.m., marking the towering agave rising through its glasshouse.
Phipps Conservatory and Botanical Gardens in Oakland holds Adiós Agave Night on Friday, July 24, from 5 to 10 p.m., built around the agave that has climbed through the historic glasshouse, per NEXTpittsburgh's weekend guide.
Sources: NEXTpittsburgh Events · ↑ top
Pirates (53-50)
Wed Jul 22 · Pirates 5 · Yankees 3 · Final (10)
Triolo, Mangum lift Pirates over Yankees 5-3 in doubleheader opener after Cole strikes out 11
Wed Jul 22 · Pirates 0 · Yankees 2 · Final
Fried allows 1 hit over 5 innings in return from IL, Yankees beat Pirates 2-0 for doubleheader split
Up Next · Cubs @ Pirates · Fri Jul 24, 6:40 PM
Latest developments: The Pirates traded for right-handed reliever Ron Marinaccio from the San Diego Padres on July 23 and designated Dennis Santana for assignment.
The Pirates picked up reliever Ron Marinaccio from the San Diego Padres to reinforce a bullpen chasing a wild-card berth, clearing a roster spot by designating reliever Dennis Santana for assignment, the Post-Gazette reported July 23.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette's training-camp countdown argued July 23 that Steelers outside linebacker Alex Highsmith has quietly become a dominant defender opposite T.J. Watt.
As the Steelers near training camp in Latrobe, the Post-Gazette made the case that edge rusher Alex Highsmith, working across from T.J. Watt, has grown into one of the league's most effective defenders without drawing the attention.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Former Steelers first-round pick Bud Dupree joined Cam Heyward and Hayden on 'Not Just Football' to relive draft night, the locker-room brotherhood, and the injuries that derailed a Super Bowl run.
On Cam Heyward's 'Not Just Football' podcast, ex-Steelers edge rusher Bud Dupree recounted his draft night in Pittsburgh, friendships in the Steel City locker room, the injuries that hampered his career, and life after football.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: Sha'Carri Richardson and Noah Lyles cruised through their first-round 100-meter heats Thursday at the U.S. track and field championships.
American sprinters Sha'Carri Richardson and Noah Lyles opened the U.S. track and field championships by breezing through the first round of the 100 meters, ESPN reported.
Sources: ESPN Olympics · ↑ top
Latest developments: Norway's football federation said its board will consider filing a FIFA ethics complaint over President Trump's role in clearing U.S. striker Folarin Balogun of a mandatory World Cup ban.
The Norwegian Football Federation, whose president called FIFA's handling a 'slippery slope,' will weigh a formal ethics complaint around August 6 after Trump phoned FIFA chief Gianni Infantino to review the red card that would have banned USMNT forward Folarin Balogun for a World Cup match.
Sources: Guardian World Cup 2026 · ESPN Soccer · ↑ top
S&P 500 7,463.49 ▼ -1.1% Dow 52,028.11 ▼ -1.0% Nasdaq 25,538.82 ▼ -2.1% WTI crude 83.28 ▲ +9.4% EUR/USD 1.1421 = -0.0% GBP/USD 1.3422 = +0.0% USD/JPY 162.73 ▲ +0.3%