daily plain-text briefing: security, markets, business, and pittsburgh
Cl0p affiliates chain unauthenticated flaws in internet-exposed PTC Windchill and FlexPLM servers as industrial and enterprise software draw fresh remote-code-execution attacks.
Latest developments: Help Net Security's July 26, 2026 week-in-review flagged attackers exploiting a pre-authentication remote-code-execution flaw in ServiceNow's enterprise workflow platform in the wild.
ServiceNow, the widely deployed workflow and IT-service-management platform, carries a pre-authentication remote-code-execution flaw that attackers are actively exploiting; administrators should apply available fixes and hunt for compromise.
Sources: Help Net Security · ↑ top
Latest developments: The SANS Internet Storm Center reported on July 26, 2026 renewed scanning for ESAFENET's CDG document-management system, probing for SQL injection, cross-site scripting, and default passwords.
ESAFENET's CDG (Content Data Guard), a Chinese-market data-leakage-prevention and secure document product, carries basic flaws including SQL injection and default credentials that scanners are hunting; operators should change defaults and restrict internet exposure.
Sources: SANS Internet Storm Center · ↑ top
Latest developments: The Hacker News detailed on July 25, 2026 that Cl0p affiliates chain a pre-authentication information-disclosure flaw in the FlexPLM WSDL endpoint with a server-side flaw in the Windchill login servlet to run code without authentication.
Cl0p—also tracked as Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest—is stealing data from internet-exposed PTC Windchill and FlexPLM product-lifecycle-management systems for extortion; operators should pull these instances off the public internet and patch.
Sources: The Hacker News · ↑ top
Latest developments: CTM360 reported on July 25, 2026 that insurance-focused phishing operations now hijack accounts in real time, relaying a victim's stolen credentials and one-time codes to the attacker the moment the victim enters them.
Phishing crews targeting insurance customers now run live account takeover, passing credentials and multi-factor codes to attackers as victims type them; defenders should adopt phishing-resistant multi-factor authentication.
Sources: The Hacker News · ↑ top
Latest developments: Rockwell Automation patched code-execution vulnerabilities in its Arena Simulation software on July 25, 2026, after a researcher showed how an attacker could exploit them to target industrial organizations.
Arena Simulation, Rockwell's discrete-event modeling tool that manufacturers use to plan operations, contained flaws that let an attacker run code; industrial users should update to the fixed release.
Sources: SecurityWeek · ↑ top
Latest developments: The United States held off attacks for a second straight day and Iran reciprocated, while Oman pushed talks on a Strait of Hormuz transit deal and Pentagon officials weighed dwindling American air-defense stocks.
After nearly two weeks of intensifying bombing, President Trump shelved a campaign that officials said could have run two weeks, as mediators worked to steer the United States and Iran back toward an interim ceasefire and to calm oil markets rattled by threats to Gulf shipping and a collapsing Yemen truce.
Sources: FT World · WSJ World News · The Economist · ↑ top
This Afternoon: Partly Sunny, high 85F.
Tonight: Chance Showers And Thunderstorms then Partly Cloudy, low 66F.
Monday: Partly Sunny then Slight Chance Showers And Thunderstorms, high 88F.
Latest developments: The Allegheny County Jail began sampling its water system after concerns about legionella in two officer bathrooms, and officials said no one has fallen ill.
The Allegheny County Jail is testing its water to determine whether legionella bacteria reached two officer bathrooms; officials reported no known illnesses.
Latest developments: House Democratic leader Hakeem Jeffries launched the party's 100-days-to-the-midterms drive from a stage in battleground Pennsylvania, built around an affordability agenda.
House Minority Leader Hakeem Jeffries chose Pennsylvania to open Democrats' campaign for control of the U.S. House in the November midterm elections, pressing a message centered on the cost of living.
Latest developments: Pittsburgh International Airport said its FlyBy 5K and 2-Mile Fun Run/Walk returns September 19, 2026, again opening the airfield to participants.
The FlyBy 5K and 2-Mile Fun Run/Walk gives runners and walkers rare access to the taxiways and airfield at Pittsburgh International Airport on September 19, 2026.
Pirates (53-52)
Sat Jul 25 · Cubs 11 · Pirates 0 · Final
Crow-Armstrong powers the Cubs to an 11-0 rout of the Pirates
Sun Jul 26 · Cubs 7 · Pirates 8 · Top 9th (in progress at last update)
Up Next · Diamondbacks @ Pirates · Mon Jul 27, 6:40 PM
Latest developments: Pirates general manager Ben Cherington told the Post-Gazette on July 26 the club will stay 'open-minded' as the Major League Baseball trade deadline nears, flagging the bullpen as the clearest need.
Ben Cherington said Pittsburgh plans to weigh moves in both directions before the deadline, with a bullpen battered by injuries the area most likely to see additions.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Pirates officially signed outfielder Derek Curiel, the fifth overall pick in the 2026 draft, who said he is eager to 'make an impact.'
Pittsburgh added outfielder Derek Curiel, its first-round selection and the fifth choice overall in the 2026 First-Year Player Draft, bringing a highly rated bat into the farm system.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,454.34 ▼ -0.9% Dow 51,988.28 ▼ -0.9% Nasdaq 25,429.94 ▼ -1.9% WTI crude 87.29 ▲ +9.5% EUR/USD 1.1397 ▼ -0.3% GBP/USD 1.3389 ▼ -0.3% USD/JPY 163.02 ▲ +0.5%