daily plain-text briefing: security, markets, business, and pittsburgh
Extortion crews cash in fresh breaches at Ernst & Young and DentaQuest while public exploits arm attackers against vBulletin, n8n, and PTC Windchill.
Latest developments: The ShinyHunters extortion gang claimed the Ernst & Young breach on July 27, 2026, saying a supply-chain attack handed it credentials to the accounting firm's systems, as DentaQuest disclosed that a May 2026 intrusion exposed personal and dental health data on more than 23 million people.
Ernst & Young, the Big Four accounting firm, faces ShinyHunters extortion after intruders reached its systems through a vendor, while dental-benefits administrator DentaQuest is notifying over 23 million people whose records thieves stole. Affected customers should watch for fraud and reset any exposed credentials.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: SSD Secure Disclosure published a working exploit on July 27, 2026 for a pre-authentication remote-code-execution flaw in vBulletin 6.2.1 and earlier and 6.1.6 and earlier that routes an unauthenticated request into PHP's eval(), the same day n8n patched an expression-sandbox escape that lets an authenticated workflow editor run operating-system commands on the automation server.
vBulletin powers online discussion forums, and n8n is a self-hosted workflow-automation platform; both flaws hand attackers code execution on the host. Operators should upgrade immediately—vBulletin past 6.2.1 and 6.1.6, n8n to 2.31.5 or 2.32.1.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: The Hacker News detailed Operation BlueDash on July 27, 2026, a Microsoft Teams-themed campaign that ZeroBEC found steering victims through a counterfeit Microsoft Store page to install Level RMM and ScreenConnect, as Check Point's Q2 2026 report named ChatGPT a newly impersonated phishing brand trailing Microsoft's 23% share.
Attackers abuse trusted brands to plant remote-management tools and steal logins, cloning Microsoft Teams update prompts and ChatGPT Plus billing pages. Employees should distrust unexpected software-update pages and verify RMM installs.
Sources: The Hacker News · Help Net Security · ↑ top
Latest developments: Bruce Schneier publicized on July 27, 2026 that Israeli firm Cognyte sells its FalcoNet cell-site simulator, concealable in a van, backpack, or on-foot rig, to the state of Texas, while 404 Media detailed how broker Mike Yeagley bought phone-location data from around the world.
Cognyte's FalcoNet mimics a cell tower to force nearby phones to connect, letting Texas police track any device in range, and the commercial location-data trade lets brokers like Mike Yeagley buy global movement records. Both underscore how easily bystanders' phones become surveillance targets.
Sources: Schneier on Security · 404 Media · ↑ top
Latest developments: SecurityWeek reported on July 27, 2026 that ransomware operators now exploit a critical unauthenticated unsafe-deserialization flaw in PTC Windchill to execute code remotely, escalating the earlier Clop data-theft extortion into full ransomware deployment.
PTC Windchill is product-lifecycle-management software that manufacturers run to manage engineering data, and the flaw lets unauthenticated attackers execute arbitrary code on internet-exposed servers. Administrators should patch Windchill and FlexPLM instances at once.
Sources: SecurityWeek · ↑ top
Latest developments: Zscaler ThreatLabz disclosed on July 27, 2026 that an East Asia-linked threat actor struck Middle East government entities with three previously unreported malware families—TELESHIM, MIXEDKEY, and BINDCLOAK—that abuse Telegram for command-and-control.
An East Asia-linked espionage actor breached government targets across the Middle East in a campaign Zscaler detected earlier this month, using Telegram-based malware to hide its command channel. Defenders should hunt for anomalous Telegram traffic and the named implants.
Sources: The Hacker News · ↑ top
This Afternoon: Scattered Showers And Thunderstorms, high 88F.
Tonight: Chance Showers And Thunderstorms, low 69F.
Tuesday: Showers And Thunderstorms Likely then Chance Showers And Thunderstorms, high 82F.
Latest developments: On its quarterly earnings call, chief executive Rafael Santana disclosed a billion-dollar order spanning several of the company's divisions.
Wabtec Corp., the North Shore rail conglomerate, booked a $1 billion order from an unnamed Australian customer that touches multiple of its business lines, chief executive Rafael Santana told analysts.
Latest developments: The state formally awarded the Union Hotel redevelopment a Redevelopment Assistance Capital Program grant, among a round of Pittsburgh-region awards.
The historic Union Hotel in the center of Etna won a state Redevelopment Assistance Capital Program grant to fund its redevelopment, one of several projects across the region drawing significant grant money in recent days.
Latest developments: The jail rolled out Overwatch monitoring devices that track incarcerated people's health.
The Allegheny County Jail deployed new devices that track the health of incarcerated people, aiming to flag medical problems early and intervene before they become crises.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Allegheny County courts can now order outpatient mental health treatment instead of incarceration or hospitalization.
A new Allegheny County program lets courts order treatment for people in mental health crisis; from 2015 through 2022 the county evaluated more than 5,000 people a year for involuntary hospitalization and committed roughly 3,700, fewer than half of whom got follow-up outpatient care.
Sources: NEXTpittsburgh · ↑ top
Latest developments: Forecasters flagged an alert for storms Monday night, July 27, into Tuesday morning.
The Storm Prediction Center placed western Pennsylvania at a level 2 of 5 severe-weather risk overnight Monday into Tuesday, with strong mid-level winds fueling storms that could bring damaging winds, torrential rain, and flash flooding.
Latest developments: NEXTpittsburgh previewed the tour ahead of its August 1 date.
The Observatory Hill House Tour runs Saturday, August 1, opening private homes in the North Side neighborhood of Observatory Hill, including a house steeped in local lore said to have been won in a card game.
Sources: NEXTpittsburgh · ↑ top
Pirates (54-52)
Sun Jul 26 · Cubs 7 · Pirates 8 · Final
Ryan O'Hearn hits a grand slam on his 33rd birthday to lead Pirates to 8-7 victory over Cubs
Up Next · Diamondbacks @ Pirates · Mon Jul 27, 6:40 PM
Latest developments: General manager Ben Cherington said the Pirates will stay open-minded on moves.
Ben Cherington said the Pirates will keep an open mind as the trade deadline nears, with the club hunting bullpen help while hanging in the National League wild-card race as Arizona visits PNC Park for a key series.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Post-Gazette columnist Noah Hiles published the argument.
Noah Hiles argued the 2026 Steelers, built around new coach Mike McCarthy and quarterback Aaron Rodgers under Mike Tomlin, have become the NFL's most boring team.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's MiLB Monday reported Hernandez will likely land on the injured list.
Seth Hernandez, the Pirates' top pitching prospect, is likely bound for the minor-league injured list, the Post-Gazette reported.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: The Guardian recapped standout runs at the championships.
At the U.S. track and field championships, a lower-stakes year with no Olympics or world championships, Nikki Hiltz, Sha'Carri Richardson, and teenage 800-meter runner Cooper Lutkenhaus delivered performances the Guardian cast as a dress rehearsal for the 2028 Los Angeles Olympics.
Sources: Guardian Olympics · ↑ top
S&P 500 7,454.34 ▼ -0.9% Dow 51,988.28 ▼ -0.9% Nasdaq 25,429.94 ▼ -1.9% WTI crude 87.29 ▲ +9.5% EUR/USD 1.1408 ▼ -0.2% GBP/USD 1.3389 ▼ -0.3% USD/JPY 163.02 ▲ +0.5%