infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Coca-Cola confirmed a data breach after the Anubis gang ransomed its Fairlife dairy unit, as hackers ran an autonomous AI agent to spy on Thailand's finance ministry and researchers shipped a working exploit for the Certighost Active Directory flaw.


Emerging Trends and Key Updates

Security

1. New Windows Malware Hides With Cruciferra and MedusaHVNC

Ransomware and Cybercrime · [malware, byovd]

Latest developments: Proofpoint detailed Cruciferra on July 27, 2026, a crypter service using bring-your-own-vulnerable-driver and process ghosting that a China-linked group aims at Indian taxpayers, the same day SecurityWeek profiled MedusaHVNC, a malware-as-a-service that runs browsers on hidden Windows desktops.

read more

Cruciferra is a crypter that multiple unrelated cybercrime clusters use to deliver remote access trojans, cloaking payloads with signed-driver abuse and process ghosting; its China-linked operators phish Indian taxpayers, tax professionals, and corporate finance teams with income-tax lures. MedusaHVNC rents covert, persistent remote access by launching legitimate browsers on an invisible Windows desktop.

Sources: The Hacker News · SecurityWeek · ↑ top

2. Nvidia Launches AI Security Alliance as Opus 5 Caps Cyber Skills

AI Security · [ai, policy]

Latest developments: Nvidia and fellow tech firms launched an AI security alliance on July 27, 2026 to give defenders open tools for testing and auditing AI models and agents, the same day SecurityWeek reported Anthropic's Opus 5 nears Mythos 5 at finding bugs while blocking binary vulnerability scanning, penetration testing, and exploit generation.

read more

The Nvidia-led coalition offers open tools to test, audit, and protect AI models and agents against abuse. Anthropic's Opus 5 matches rival Mythos 5 at finding bugs and refuses the riskiest offensive tasks, showing vendors racing to bound what their models will do for attackers.

Sources: SecurityWeek · SecurityWeek · ↑ top

3. Coca-Cola Confirms Fairlife Ransomware Breach

Data Breaches · [ransomware, breach]

Latest developments: Coca-Cola confirmed on July 27, 2026 that the Anubis cybercrime group breached its Fairlife dairy subsidiary and now threatens to leak the stolen data.

read more

Anubis, a ransomware crew, hit Fairlife, Coca-Cola's ultra-filtered milk brand, and took data the company confirmed as stolen; Anubis is pressuring for payment by threatening publication. Fairlife customers and staff should watch for fraud and targeted phishing.

Sources: SecurityWeek · ↑ top

4. Autonomous AI Agent Spies on Thailand's Finance Ministry

Nation-State Activity · [apt, ai]

Latest developments: Researchers disclosed on July 27, 2026 that hackers used an autonomous artificial intelligence agent to run a cyber-espionage campaign against Thailand's Ministry of Finance.

read more

Attackers pointed an autonomous AI agent at Thailand's Ministry of Finance, letting the software carry out the espionage tasks a human operator would normally run. The case marks another government network breached by an AI agent acting on its own.

Sources: The Record · ↑ top

5. Certighost AD CS Exploit Released (CVE-2026-54121)

Vulnerabilities and Exploits · [zero-day, patch, exploit]

Latest developments: The researchers who reported CVE-2026-54121, dubbed Certighost, published a proof-of-concept exploit and technical writeup on July 27, 2026 for the critical privilege-elevation flaw in Active Directory Certificate Services.

read more

Certighost, CVE-2026-54121, sits in Microsoft's Active Directory Certificate Services, the Windows Server role that runs an organization's certificate authority, and lets a low-privileged user escalate to full domain takeover. Administrators running AD CS should apply Microsoft's fix and lock down certificate enrollment.

Sources: Help Net Security · ↑ top

6. Hacked Wi-Fi Gateways Harvest Corporate Microsoft 365 Credentials

Ransomware and Cybercrime · [credential-theft, phishing]

Latest developments: SecurityWeek reported on July 27, 2026 that a threat actor compromised public Wi-Fi gateway appliances and used them to harvest the Microsoft 365 credentials of traveling corporate employees.

read more

Attackers seized public Wi-Fi gateway hardware and turned it into a credential trap for corporate staff logging in while on the road, capturing Microsoft 365 accounts. Enterprises should enforce phishing-resistant MFA and require VPN use on untrusted networks.

Sources: SecurityWeek · ↑ top

Business and Politics

Oil Plunges as U.S.-Iran Strike Pause Holds

Latest developments: The pause held a third straight night, Brent crude fell about 8% to near $87 a barrel, and mediators reported progress toward halting the five-month war.

read more

The United States and Iran refrained from attacks for a third consecutive night while negotiators worked to sustain a fragile ceasefire, easing fears over the Strait of Hormuz; oil, Treasury yields, and the dollar all slid as stock futures jumped ahead of the Federal Reserve's rate decision on Wednesday.

Sources: FT Markets · WSJ Markets · ↑ top

Pittsburgh

Weather

Today: Partly Sunny then Scattered Showers And Thunderstorms, high 88F.

Tonight: Chance Showers And Thunderstorms, low 69F.

Tuesday: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, high 82F.

Business

Valley Dairy Adds a North Huntingdon Restaurant

Latest developments: Valley Dairy Restaurants will open its newest location in September at Norwin Hills Plaza along Route 30 in North Huntingdon.

read more

The regional diner chain Valley Dairy Restaurants is expanding its 13-restaurant footprint with a new eatery at Norwin Hills Plaza on Route 30 in North Huntingdon, expected to open in September.

Sources: TribLive · ↑ top

Pennsylvania Budget Tightens Data-Center Rules

Latest developments: The new Pennsylvania budget adds transparency requirements for data centers while leaving a roughly $2 billion sales-tax exemption for the industry untouched.

read more

Pennsylvania lawmakers increased disclosure requirements on data centers in the state budget but kept intact a sales-tax exemption worth about $2 billion that benefits the power-hungry industry, Spotlight PA reported.

Sources: TribLive · ↑ top

Around Town

New Law to Inventory Pennsylvania School Buildings

Latest developments: A new state law will catalog the age and condition of Pennsylvania's public school facilities as districts across the region reconfigure or close aging buildings.

read more

Pennsylvania will take a statewide inventory of public school building conditions under a new law meant to help officials plan renovations and closures as western Pennsylvania districts shutter aging schools.

Sources: TribLive · ↑ top

Gilpin Township Weighs Data-Center Zoning

Latest developments: Gilpin Township supervisors postponed a vote on a zoning amendment aimed at future data centers to their August meeting.

read more

Gilpin Township supervisors are weighing a zoning ordinance amendment that would regulate where future data centers can go, pushing the decision to their next voting meeting in August.

Sources: TribLive · ↑ top

American Red Cross Declares Blood Crisis

Latest developments: The American Red Cross declared a national blood crisis on July 27, only the second such declaration in its history, deepening a severe summer shortage.

read more

The American Red Cross declared a national blood crisis for just the second time ever, urging donors across the country as summer supplies ran critically low.

Sources: WPXI · ↑ top

Events

August Food Events Fill the Calendar

Latest developments: The Post-Gazette previewed August food happenings around Pittsburgh, led by Pittsburgh Restaurant Week and Little Italy Days in Bloomfield.

read more

The Post-Gazette rounded up food events coming to Pittsburgh in August, headlined by Pittsburgh Restaurant Week and Bloomfield's Little Italy Days.

Sources: Pittsburgh Post-Gazette · ↑ top

Sports

Pirates (54-52)

Sun Jul 26 · Cubs 7 · Pirates 8 · Final

Ryan O'Hearn hits a grand slam on his 33rd birthday to lead Pirates to 8-7 victory over Cubs

Up Next · Diamondbacks @ Pirates · Mon Jul 27, 6:40 PM

Around the Teams

Watt Eyes a Bounce-Back Season

Latest developments: The Post-Gazette's camp countdown cast edge rusher T.J. Watt as chasing a rebound as camp opens at Saint Vincent.

read more

The Post-Gazette's training-camp countdown argued Steelers outside linebacker T.J. Watt is looking for a bounce-back season, with camp at Saint Vincent College in Latrobe opening Wednesday.

Sources: Post-Gazette Steelers · ↑ top

When the Pirates Unleash Jared Jones

Latest developments: The Post-Gazette's Off The Bat asked when the Pirates will lift the pitch-count limits on right-hander Jared Jones as the trade deadline nears.

read more

The Post-Gazette's Off The Bat column weighed when the Pirates will let starter Jared Jones stretch past his pitch-count restrictions, a question bound up with the club's trade-deadline direction.

Sources: Post-Gazette Pirates · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,454.34  ▼ -0.9%
Dow        51,988.28  ▼ -0.9%
Nasdaq     25,429.94  ▼ -1.9%
WTI crude      87.29  ▲ +9.5%
EUR/USD       1.1408  ▼ -0.2%
GBP/USD       1.3389  ▼ -0.3%
USD/JPY       163.02  ▲ +0.5%