daily plain-text briefing: security, markets, business, and pittsburgh
Coca-Cola confirmed a data breach after the Anubis gang ransomed its Fairlife dairy unit, as hackers ran an autonomous AI agent to spy on Thailand's finance ministry and researchers shipped a working exploit for the Certighost Active Directory flaw.
Latest developments: Proofpoint detailed Cruciferra on July 27, 2026, a crypter service using bring-your-own-vulnerable-driver and process ghosting that a China-linked group aims at Indian taxpayers, the same day SecurityWeek profiled MedusaHVNC, a malware-as-a-service that runs browsers on hidden Windows desktops.
Cruciferra is a crypter that multiple unrelated cybercrime clusters use to deliver remote access trojans, cloaking payloads with signed-driver abuse and process ghosting; its China-linked operators phish Indian taxpayers, tax professionals, and corporate finance teams with income-tax lures. MedusaHVNC rents covert, persistent remote access by launching legitimate browsers on an invisible Windows desktop.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Nvidia and fellow tech firms launched an AI security alliance on July 27, 2026 to give defenders open tools for testing and auditing AI models and agents, the same day SecurityWeek reported Anthropic's Opus 5 nears Mythos 5 at finding bugs while blocking binary vulnerability scanning, penetration testing, and exploit generation.
The Nvidia-led coalition offers open tools to test, audit, and protect AI models and agents against abuse. Anthropic's Opus 5 matches rival Mythos 5 at finding bugs and refuses the riskiest offensive tasks, showing vendors racing to bound what their models will do for attackers.
Sources: SecurityWeek · SecurityWeek · ↑ top
Latest developments: Coca-Cola confirmed on July 27, 2026 that the Anubis cybercrime group breached its Fairlife dairy subsidiary and now threatens to leak the stolen data.
Anubis, a ransomware crew, hit Fairlife, Coca-Cola's ultra-filtered milk brand, and took data the company confirmed as stolen; Anubis is pressuring for payment by threatening publication. Fairlife customers and staff should watch for fraud and targeted phishing.
Sources: SecurityWeek · ↑ top
Latest developments: Researchers disclosed on July 27, 2026 that hackers used an autonomous artificial intelligence agent to run a cyber-espionage campaign against Thailand's Ministry of Finance.
Attackers pointed an autonomous AI agent at Thailand's Ministry of Finance, letting the software carry out the espionage tasks a human operator would normally run. The case marks another government network breached by an AI agent acting on its own.
Sources: The Record · ↑ top
Latest developments: The researchers who reported CVE-2026-54121, dubbed Certighost, published a proof-of-concept exploit and technical writeup on July 27, 2026 for the critical privilege-elevation flaw in Active Directory Certificate Services.
Certighost, CVE-2026-54121, sits in Microsoft's Active Directory Certificate Services, the Windows Server role that runs an organization's certificate authority, and lets a low-privileged user escalate to full domain takeover. Administrators running AD CS should apply Microsoft's fix and lock down certificate enrollment.
Sources: Help Net Security · ↑ top
Latest developments: SecurityWeek reported on July 27, 2026 that a threat actor compromised public Wi-Fi gateway appliances and used them to harvest the Microsoft 365 credentials of traveling corporate employees.
Attackers seized public Wi-Fi gateway hardware and turned it into a credential trap for corporate staff logging in while on the road, capturing Microsoft 365 accounts. Enterprises should enforce phishing-resistant MFA and require VPN use on untrusted networks.
Sources: SecurityWeek · ↑ top
Latest developments: The pause held a third straight night, Brent crude fell about 8% to near $87 a barrel, and mediators reported progress toward halting the five-month war.
The United States and Iran refrained from attacks for a third consecutive night while negotiators worked to sustain a fragile ceasefire, easing fears over the Strait of Hormuz; oil, Treasury yields, and the dollar all slid as stock futures jumped ahead of the Federal Reserve's rate decision on Wednesday.
Sources: FT Markets · WSJ Markets · ↑ top
Today: Partly Sunny then Scattered Showers And Thunderstorms, high 88F.
Tonight: Chance Showers And Thunderstorms, low 69F.
Tuesday: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, high 82F.
Latest developments: Valley Dairy Restaurants will open its newest location in September at Norwin Hills Plaza along Route 30 in North Huntingdon.
The regional diner chain Valley Dairy Restaurants is expanding its 13-restaurant footprint with a new eatery at Norwin Hills Plaza on Route 30 in North Huntingdon, expected to open in September.
Latest developments: The new Pennsylvania budget adds transparency requirements for data centers while leaving a roughly $2 billion sales-tax exemption for the industry untouched.
Pennsylvania lawmakers increased disclosure requirements on data centers in the state budget but kept intact a sales-tax exemption worth about $2 billion that benefits the power-hungry industry, Spotlight PA reported.
Latest developments: A new state law will catalog the age and condition of Pennsylvania's public school facilities as districts across the region reconfigure or close aging buildings.
Pennsylvania will take a statewide inventory of public school building conditions under a new law meant to help officials plan renovations and closures as western Pennsylvania districts shutter aging schools.
Latest developments: Gilpin Township supervisors postponed a vote on a zoning amendment aimed at future data centers to their August meeting.
Gilpin Township supervisors are weighing a zoning ordinance amendment that would regulate where future data centers can go, pushing the decision to their next voting meeting in August.
Latest developments: The American Red Cross declared a national blood crisis on July 27, only the second such declaration in its history, deepening a severe summer shortage.
The American Red Cross declared a national blood crisis for just the second time ever, urging donors across the country as summer supplies ran critically low.
Latest developments: The Post-Gazette previewed August food happenings around Pittsburgh, led by Pittsburgh Restaurant Week and Little Italy Days in Bloomfield.
The Post-Gazette rounded up food events coming to Pittsburgh in August, headlined by Pittsburgh Restaurant Week and Bloomfield's Little Italy Days.
Sources: Pittsburgh Post-Gazette · ↑ top
Pirates (54-52)
Sun Jul 26 · Cubs 7 · Pirates 8 · Final
Ryan O'Hearn hits a grand slam on his 33rd birthday to lead Pirates to 8-7 victory over Cubs
Up Next · Diamondbacks @ Pirates · Mon Jul 27, 6:40 PM
Latest developments: The Post-Gazette's camp countdown cast edge rusher T.J. Watt as chasing a rebound as camp opens at Saint Vincent.
The Post-Gazette's training-camp countdown argued Steelers outside linebacker T.J. Watt is looking for a bounce-back season, with camp at Saint Vincent College in Latrobe opening Wednesday.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's Off The Bat asked when the Pirates will lift the pitch-count limits on right-hander Jared Jones as the trade deadline nears.
The Post-Gazette's Off The Bat column weighed when the Pirates will let starter Jared Jones stretch past his pitch-count restrictions, a question bound up with the club's trade-deadline direction.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,454.34 ▼ -0.9% Dow 51,988.28 ▼ -0.9% Nasdaq 25,429.94 ▼ -1.9% WTI crude 87.29 ▲ +9.5% EUR/USD 1.1408 ▼ -0.2% GBP/USD 1.3389 ▼ -0.3% USD/JPY 163.02 ▲ +0.5%