daily plain-text briefing: security, markets, business, and pittsburgh
Attackers handed a live intrusion to an autonomous AI agent inside Thailand's finance ministry as an eighteen-nation coalition finally pinned a CVE on Russia's Laundry Bear webmail espionage.
Latest developments: An intruder installed the Hermes AI assistant on a rented server, switched off its ask-before-running safeguard, and aimed it at Thailand's Ministry of Finance, where the agent probed hosts for root, searched file systems, and carried out post-exploitation on its own.
The case extends a run of AI-agent abuse—OpenAI's own cyber models breached Hugging Face days earlier—showing attackers now delegate live intrusions to commercial AI assistants, while Google counters with CodeMender, an agent that confirms exploitable flaws and writes patches. Restrict agent permissions and watch for unattended AI processes.
Sources: The Hacker News · SANS Internet Storm Center · SecurityWeek · Help Net Security · ↑ top
Latest developments: The July 24 joint advisory from the NSA, FBI, CISA, and agencies in the Netherlands, UK, Australia, Canada, and a dozen more countries pinned the campaign to Zimbra flaw CVE-2025-66376, which Laundry Bear has abused since July 2025.
The Russian state-backed group Laundry Bear, also tracked as Void Blizzard, CL-STA-1114, and TA488, sends half-click phishing that injects JavaScript into Zimbra webmail to steal each victim's last 90 days of email, the full organizational directory, browser-saved passwords, and two-factor recovery codes. Patch Zimbra Collaboration Suite now.
Sources: Help Net Security · Unit 42 (Palo Alto) · The Record · Dark Reading · ↑ top
Latest developments: Secretary of State Marco Rubio announced US visa restrictions on people tied to transnational cyber-scam operations, the same week Wired's satellite analysis found dozens of alleged scam compounds multiplying across Myanmar despite a claimed crackdown, and Europol flagged 4,340 URLs linked to the nihilistic violent network known as The Com.
US policy, European police, and open-source researchers moved in parallel against sprawling online crime: the State Department barred scam-operation figures from entry, Myanmar's compounds kept expanding, and Europol pushed platforms to pull thousands of The Com links. The actions target recruitment, revenue, and reach.
Sources: The Record · Wired Security · BleepingComputer · ↑ top
Latest developments: XBOW showed that a crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers and as root on the Linux machines in the same fleet, prompting Microsoft to issue critical CVE-2026-32194 and a companion identifier.
The flaw sat in Bing's image tier itself; XBOW reproduced code execution across different hosts and network ranges, marking server-side image parsers as a path to full compromise of cloud infrastructure. Microsoft has fixed it.
Sources: The Hacker News · ↑ top
Latest developments: The Golden Chickens malware-as-a-service crew resurfaced with four new families—TinyEgg, ChonkyChicken, a modularized ChonkyChicken variant, and a reworked web-browser credential stealer—pressing on despite years of public exposure of its operations.
Golden Chickens rents modular implants and loaders to financially motivated actors and has long backed the More_eggs backdoor. The fresh families signal the operators show no signs of stopping. Watch for spear-phishing that drops staged loaders.
Sources: The Hacker News · ↑ top
Latest developments: Dark Reading reported that a porous API endpoint in the Vatican's official prayer app exposed the names, email addresses, locations, and account status of more than 700,000 users worldwide to anyone with a browser.
The Vatican's official prayer platform leaked personally identifiable information for over 700,000 global users through an unauthenticated API that returned records on demand. Affected users should brace for targeted phishing while the Vatican locks the endpoint.
Sources: Dark Reading · ↑ top
Latest developments: Oil fell back below $100 a barrel Friday after the week's spike, even as Trump weighed a "massive attack" on Iran and Middle East fighting escalated.
The U.S.-Iran war ground on as Houthi attacks on Red Sea shipping threatened crude supplies; Brent had topped $100 Thursday before retreating Friday, and analysts at Julius Baer called the jump short-lived.
Latest developments: With the Federal Reserve meeting Wednesday, traders now weigh the once-unthinkable prospect of a rate hike after the week's bond selloff drove Treasury yields to the highest of Trump's second term.
Gold fell below $4,100 and the dollar held near multi-day highs Friday as rate-hike bets firmed; the Fed's July decision lands Wednesday amid the sharpest tightening of financial conditions in 2026.
Today: Partly Sunny, high 83F.
Tonight: Mostly Cloudy then Slight Chance Rain Showers, low 64F.
Saturday: Slight Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 84F.
Latest developments: Dick's Diner in Murrysville will mark 80 years in business, and manager Erik Retzer moved this week to knock down social-media rumors that the diner is closing.
Dick's Diner, a fixture in Murrysville, Westmoreland County, has served customers for eight decades; manager Erik Retzer says the family-run restaurant has no plans to shut its doors.
Latest developments: Crews began site work this week at the long-vacant former Royer's department store on Main Street in downtown Greensburg, though the timing of the actual demolition remains unclear.
The former Royer's department store, empty for years on Main Street in downtown Greensburg, Westmoreland County, is headed for teardown as crews started preparing the site.
Latest developments: Franklin Park Council added a data center district overlay to its zoning ordinances at its June 17 meeting, moving to control any future facility before an applicant shows up.
Franklin Park, an Allegheny County borough north of Pittsburgh, wrote detailed zoning rules for data centers ahead of demand, a preemptive step as power-hungry computing facilities spread across Pennsylvania.
Latest developments: The National Weather Service has confirmed 21 tornadoes in the Pittsburgh area so far in 2026, more than double the usual annual average of about 10, KDKA reported July 24.
KDKA First Alert meteorologists tie the surge to a warmer, more humid climate and to better detection technology that now confirms twisters once missed across western Pennsylvania.
Latest developments: The New Hazlett Theater named Melissa Cardello-Linton its first artistic director and launched a program to develop local, original work.
The New Hazlett Theater, on Pittsburgh's North Side, will stake its future on homegrown productions under Cardello-Linton after a rough year for the city's larger theater companies.
Sources: Pittsburgh City Paper · ↑ top
Latest developments: Tekko 2026, the region's premier anime convention, opened Thursday, July 23, at the David L. Lawrence Convention Center, drawing costumed fans downtown.
Tekko 2026 fills the David L. Lawrence Convention Center in downtown Pittsburgh with cosplay, gaming, fashion, and Japanese pop culture, with attendees dressed as characters from Power Rangers, One Punch Man, and Cowboy Bebop.
Sources: Pittsburgh City Paper · ↑ top
Pirates (53-50)
Up Next · Cubs @ Pirates · Fri Jul 24, 6:40 PM
Latest developments: The Post-Gazette revisited July 24 one of the most infamous calls in Pirates history, umpire Jerry Meals's safe call that ended a 19-inning marathon.
On July 26, 2011, umpire Jerry Meals ruled Atlanta's Julio Lugo safe at the plate in the 19th inning, handing the Braves a 4-3 win over the Pirates and turning broadcaster Greg Brown's outraged call into a lasting piece of franchise lore.
Sources: Post-Gazette · ↑ top
Latest developments: With one year left until the 2027 Women's World Cup final, ESPN weighed whether the U.S. women's national team will reach it, laying out five reasons for and against.
The USWNT, chasing the title it last won in 2019, faces questions about form and depth as the 2027 Women's World Cup approaches; ESPN marked the one-year countdown July 24.
S&P 500 7,463.49 ▼ -1.1% Dow 52,028.11 ▼ -1.0% Nasdaq 25,538.82 ▼ -2.1% WTI crude 85.93 ▲ +10.9% EUR/USD 1.1421 = -0.0% GBP/USD 1.3422 = +0.0% USD/JPY 162.73 ▲ +0.3%