daily plain-text briefing: security, markets, business, and pittsburgh
Autonomous AI agents found and exploited zero-days in Redis and NodeBB within hours, and Google answered with CodeMender, an agent that writes patches for the flaws it finds.
Latest developments: Redis shipped seven security releases on July 23 after researchers drove Moonshot's Kimi K3 agents to find memory-corruption flaws and publish authenticated RCE proof-of-concepts against stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0, while Aikido Security's AI pentest agents found eight high-severity flaws in NodeBB during a six-hour source review and Google previewed CodeMender, an agent that confirms exploitability and writes fixes.
AI systems now discover and weaponize software flaws at machine speed, forcing vendors like Redis and NodeBB to patch and prompting defenders such as Google to automate remediation; administrators should move to Redis 6.2.23, 7.2.15, or 7.4.10 and NodeBB 4.14.2.
Sources: The Hacker News · The Hacker News · Help Net Security · SecurityWeek · ↑ top
Latest developments: Origin Energy confirmed that an unauthorized party accessed and leaked customer data online, as a hacker claimed to hold the personal information of 2 million Origin customers and threatened to publish it.
Origin Energy, one of Australia's largest energy suppliers, disclosed a breach exposing customer personally identifiable information and is still counting how many Australians the theft touched; affected customers should watch for fraud and phishing.
Sources: SecurityWeek · BleepingComputer · The Record · ↑ top
Latest developments: Ukraine's CERT-UA warned that the Russia-aligned cluster UAC-0099 now ships an archive bundling the legitimate Notepad++ application with a malicious utility called LunchPoke, disguised as a plugin, to establish persistence and deliver the MATCHBOIL.V2 payload on Windows systems.
UAC-0099, a Russia-aligned group that previously weaponized WinRAR flaws against Ukrainian targets, hides its malware inside a trusted editor's plugin directory; defenders should scrutinize unexpected Notepad++ archives and plugin utilities.
Sources: The Hacker News · BleepingComputer · ↑ top
Latest developments: BleepingComputer reported the Clop ransomware gang, also tracked as Cl0p, is hunting Internet-exposed PTC Windchill and FlexPLM product-lifecycle-management instances in a new data-theft extortion campaign.
Clop, the crew known for mass-exploiting managed file-transfer and enterprise software, now steals data from exposed PTC Windchill and FlexPLM servers and threatens to leak it; organizations running those systems should restrict Internet exposure and hunt for intrusion.
Sources: BleepingComputer · ↑ top
Latest developments: BleepingComputer tied the Russian state-sponsored group Laundry Bear to the alias Void Blizzard, and The Hacker News detailed the Zimbra webmail payload harvesting each victim's last 90 days of email, the full organizational directory, the browser-saved password, and the two-factor recovery codes, with Unit 42 mapping the JavaScript injection behind the credential theft.
Laundry Bear, a Kremlin-backed espionage group, has read Western government and commercial mailboxes since July 2025 through a zero-click Zimbra Collaboration Suite flaw that a victim triggers merely by previewing a message; the NSA, CISA, and partner agencies urge patching in advisory AA26-204A.
Sources: CISA Advisories · The Hacker News · Unit 42 (Palo Alto) · BleepingComputer · ↑ top
Latest developments: BleepingComputer detailed RefluXFS, tracked as CVE-2026-64600, a nine-year-old race condition in the Linux kernel's XFS filesystem that lets a local attacker overwrite protected files and escalate to root.
The long-dormant XFS flaw affects Linux systems using the widely deployed filesystem and hands local users full root control; administrators should apply kernel updates as distributions ship fixes.
Sources: BleepingComputer · ↑ top
Latest developments: Brent crude settled above $100 a barrel Thursday, heading for a weekly gain of more than 12% and pushing Treasury yields to the highest levels of President Trump's second term.
Red Sea attacks by Yemen's Houthis on oil shipping have spurred a surge in Brent crude that lifted the 2-year and 10-year Treasury yields, dragged equities lower, and stoked bets the Federal Reserve will raise rates—a squeeze that tightens financial conditions worldwide and threatens Republican midterm hopes.
Sources: WSJ Markets · FT Markets · ↑ top
Latest developments: The Houthis fired on two Saudi oil tankers in the Red Sea, and Trump vowed 'major military punishment,' saying he will hold Iran responsible for future Houthi attacks.
Yemen's Houthi militants have opened a new front in the U.S.-Iran war by threatening Red Sea oil shipments through one of the world's most vital waterways, and with the conflict in its fifth month Trump has grown skeptical of diplomacy and, per a senior administration official, entered 'revenge mode' against Tehran.
Sources: WSJ World News · WSJ World News · ↑ top
Today: Partly Sunny, high 83F.
Tonight: Mostly Cloudy then Slight Chance Rain Showers, low 64F.
Saturday: Slight Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 84F.
Latest developments: Health insurers on Pennsylvania's Affordable Care Act marketplace have requested 2027 premium increases averaging 17.1%, the Post-Gazette reported July 24.
The proposed increases, filed with Pennsylvania's insurance department for individual-market plans, would raise premiums for marketplace enrollees across the commonwealth heading into 2027.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Badamo's will expand with a sandwich shop and market in Dormont, the Post-Gazette reported July 24.
Badamo's plans a new sandwich shop and market in the South Hills borough of Dormont, extending the brand into a fresh retail format beyond its existing operations.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The cyclosporiasis outbreak tied to Taylor Farms lettuce has driven Pittsburgh-area shoppers toward local produce, farmers markets told KDKA July 24.
After the Allegheny County Health Department reported 11 county residents sickened by cyclospora linked to Taylor Farms iceberg lettuce, shoppers such as Jim Goliwas have turned to farmers markets like the one in the borough of Green Tree for locally grown produce.
Latest developments: The state budget quietly relaxed the standard for lead reporting in Pennsylvania schools, and the Post-Gazette reported July 24 that the law's problems run deeper still.
A provision in the new state budget loosened the threshold at which Pennsylvania schools must report lead in drinking water, a change the Post-Gazette found compounds longstanding weaknesses in the commonwealth's school lead-testing law.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: PublicSource reported July 24 that Washington's crackdown on surprise medical bills left out ground ambulances, exposing Southwestern Pennsylvania patients to large out-of-network charges.
When Congress barred most surprise medical bills, it exempted ground ambulance rides, so a Southwestern Pennsylvania patient can still face a bill topping $400 for an unplanned trip, a gap that hits rural residents hardest.
Sources: PublicSource · ↑ top
Latest developments: Pittsburgh's weekend of July 24-26 brings GoatFest, DanceAfrica, and OpenStreetsPGH, NEXTpittsburgh's guide reported July 23.
NEXTpittsburgh's guide lists more than a dozen things to do across Pittsburgh the weekend of July 24-26, among them GoatFest, the DanceAfrica celebration, and OpenStreetsPGH, which opens city streets to walkers and cyclists.
Sources: NEXTpittsburgh Events · ↑ top
Latest developments: Country singer Jake Owen will perform at Rivers Casino in Pittsburgh next month, TribLive reported July 24 as Owen discussed his new album.
Jake Owen, the country musician, has a show set for next month at Rivers Casino on Pittsburgh's North Shore, tied to promotion of his new album.
Pirates (53-50)
Up Next · Cubs @ Pirates · Fri Jul 24, 6:40 PM
Latest developments: The Post-Gazette's training-camp countdown, July 24, framed cornerback Joey Porter Jr. as chasing both a lucrative contract and elite status.
Porter Jr., the Steelers cornerback whose contract talks have stalled, aims to prove he belongs among the NFL's top corners and command a payday matching the position's rising market as training camp opens.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: On 'Footbahlin' Episode 133, July 21, Ben Roethlisberger laid out what to watch when Steelers training camp opens and what makes a franchise quarterback.
Roethlisberger, the retired Steelers quarterback, used his 'Footbahlin' podcast to preview the real competitions and first hints of the team's new era once practices begin, roughly a week out from camp.
Sources: Ben Roethlisberger / Channel Seven (YouTube) · ↑ top
Latest developments: The Post-Gazette's training-camp countdown, July 22, argued defensive tackle Cam Heyward keeps defying his age to play at an elite level.
Heyward, the veteran Steelers defensive lineman and captain, continues to perform like a top interior defender, the Post-Gazette wrote, casting him as a Hall-of-Fame-caliber anchor of the defense.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Norway's football federation president said she will ask the board to file a FIFA ethics complaint at its next meeting, likely August 6, over Trump's role in lifting U.S. striker Folarin Balogun's World Cup ban.
President Trump called FIFA's Gianni Infantino to seek review of a mandatory one-game ban on United States forward Folarin Balogun, and Norway's federation, warning FIFA is on a 'slippery slope,' now moves toward a formal ethics complaint.
Sources: Guardian World Cup 2026 · ESPN Soccer · ↑ top
S&P 500 7,463.49 ▼ -1.1% Dow 52,028.11 ▼ -1.0% Nasdaq 25,538.82 ▼ -2.1% WTI crude 85.93 ▲ +10.9% EUR/USD 1.1421 = -0.0% GBP/USD 1.3422 = +0.0% USD/JPY 162.73 ▲ +0.3%