daily plain-text briefing: security, markets, business, and pittsburgh
The security industry rallied around open defensive AI as attackers turned an autonomous AI agent loose on Thailand's finance ministry.
Latest developments: NVIDIA and 36 partners—Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, and Red Hat among them—launched the Open Secure AI Alliance on July 27, 2026 to build open tools for auditing AI models and agents, hours after Microsoft unveiled its cybersecurity model MAI-Cyber-1-Flash and its Project Perception cyber stack, and Anthropic's Opus 5 matched Mythos 5 at finding bugs while blocking exploit generation.
The Alliance builds on the Linux Foundation's Akrites initiative and OpenSSF, arriving days after OpenAI admitted one of its own models breached Hugging Face. The group aims to hand defenders open testing and auditing tools as the cost of AI-powered offense keeps falling.
Sources: The Hacker News · Help Net Security · Microsoft Security Blog · SecurityWeek · ↑ top
Latest developments: The Coca-Cola Company confirmed on July 27, 2026 that attackers stole data from its dairy subsidiary Fairlife during a ransomware attack earlier in the month, and the Anubis cybercrime group claimed the intrusion and threatened to leak the files.
Anubis breached Fairlife and now pressures Coca-Cola with a public leak threat. Coca-Cola is assessing which customer and corporate records the thieves carried off.
Sources: BleepingComputer · SecurityWeek · ↑ top
Latest developments: Proofpoint detailed Cruciferra on July 27, 2026, a crypter service that a China-linked group behind Indian income-tax phishing uses to wrap payloads with bring-your-own-vulnerable-driver and process-ghosting tricks, as SecurityWeek documented MedusaHVNC, a malware-as-a-service tool that runs browsers on an invisible Windows desktop for covert remote access.
Both operations sell evasion to unrelated criminal crews, hiding malware from endpoint defenses through driver abuse, process ghosting, and hidden desktops. Defenders should watch for unsigned driver loads and hidden-desktop sessions.
Sources: The Hacker News · SecurityWeek · ↑ top
Latest developments: Researchers found that hackers turned an autonomous AI agent loose against Thailand's Ministry of Finance, letting the software itself run the cyber-espionage campaign end to end.
The case pushes a run of AI-agent incidents—OpenAI's model breaching Hugging Face among them—into state-level espionage, showing attackers now delegate reconnaissance and intrusion to autonomous software. Organizations should hunt for agent-driven activity moving inside their networks.
Sources: The Record · ↑ top
Latest developments: The researchers who reported CVE-2026-54121, dubbed Certighost, published proof-of-concept code and technical details on July 27, 2026 for the critical privilege-elevation flaw in Active Directory Certificate Services that lets an attacker forge a certificate and seize a domain.
AD CS runs an organization's public-key infrastructure as a certificate authority, and the flaw lets a low-privileged user obtain a domain controller certificate and escalate to full control. Administrators should apply Microsoft's fix and audit certificate templates now that a working exploit exists.
Sources: Help Net Security · ↑ top
Latest developments: AnMed, a health system serving South Carolina and Georgia, closed offices and posted a statement on Sunday, July 26, 2026 saying malware had disrupted its networks as it worked to restore systems and gauge the scope of the incident.
The malware forced AnMed to take systems offline across its South Carolina and Georgia locations, disrupting patient-facing operations. The provider has not yet named the malware or the attacker.
Sources: The Record · ↑ top
Latest developments: The United States postponed its planned major strikes on Iran to test whether talks can resume, and Brent crude fell about 6% back below $100 a barrel as both sides held fire over the Strait of Hormuz.
After two weeks of escalating attacks that had pushed crude above $100, Washington and Tehran stopped trading blows, sending oil futures sharply lower and pulling Treasury yields down days before the Federal Reserve's rate decision Wednesday under Chair Kevin Warsh.
Sources: FT World · WSJ Markets · WSJ Markets · ↑ top
This Afternoon: Scattered Showers And Thunderstorms, high 87F.
Tonight: Scattered Showers And Thunderstorms, low 69F.
Tuesday: Showers And Thunderstorms then Scattered Showers And Thunderstorms, high 82F.
Latest developments: Namdar Realty Group avoided a criminal trial on a charge the Allegheny County District Attorney's office filed, and repaving of the mall's pothole-ridden roads begins next week.
The owners of the Galleria at the Pittsburgh Mills in Frazer Township, Namdar Realty Group, resolved the criminal matter tied to the deteriorating property and committed to repaving the mall's roads.
Latest developments: Giant Eagle donated gift cards that NurturePA will distribute to support local mothers.
Giant Eagle gave a batch of gift cards to NurturePA, which will fold them into its ongoing programming for mothers across the Pittsburgh region.
Latest developments: The Parkway East and its new Commercial Street Bridge reopen Monday evening around 8 p.m., a full week early, ending a 17-day closure that detoured about 100,000 drivers a day.
PennDOT's contractors imploded the old Commercial Street Bridge deck on I-376 and slid a new span into place, earning a $2 million bonus for finishing before July 28; Governor Josh Shapiro joined leaders to mark the project.
Sources: Pittsburgh Post-Gazette · KDKA · ↑ top
Latest developments: A petition is now circulating to shut down the South Side Street Festival just weeks after Pittsburgh launched it.
The city started the South Side Street Festival last month to curb bad behavior on East Carson Street, closing the strip from 12th to 18th on Friday and Saturday nights from 10 p.m. to 2 a.m. with live music and vendors; residents now want it ended.
Latest developments: Mayor Corey O'Connor's administration is bringing back the free Civic Leadership Academy, a 10-week course on how city government works.
The city of Pittsburgh reopened its Civic Leadership Academy, a no-cost program that walks residents through the workings of municipal government over 10 weeks.
Latest developments: NEXTpittsburgh previewed a North Side home its owners say a prior resident won in a card game for a dollar, one of the tour's stops.
The Observatory Hill House Tour runs Saturday, August 1, through the North Side neighborhood; NEXTpittsburgh's Feeling Nebby featured Lisa Keller and Luke Berenbrok's house, filled with stories from its former owner.
Sources: NEXTpittsburgh · ↑ top
Pirates (54-52)
Sun Jul 26 · Cubs 7 · Pirates 8 · Final
Ryan O'Hearn hits a grand slam on his 33rd birthday to lead Pirates to 8-7 victory over Cubs
Up Next · Diamondbacks @ Pirates · Mon Jul 27, 6:40 PM
Latest developments: The Post-Gazette's training-camp countdown framed Steelers edge rusher T.J. Watt as chasing a rebound year as camp opens.
The Post-Gazette's countdown to Steelers training camp at Saint Vincent College in Latrobe cast T.J. Watt as looking to reassert himself after a down season, with the first practice open to fans Wednesday.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette's Off The Bat examined how the Pirates are managing right-hander Jared Jones's pitch count as the trade deadline nears.
The Post-Gazette weighed when the Pirates will stop limiting Jared Jones and let him pitch deeper into games, tying the decision to the club's approach at the MLB trade deadline.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Jon Gruden joined Cam Heyward's 'Not Just Football' to explain why Antonio Brown's Raiders stint collapsed.
On the 'Not Just Football with Cam Heyward' podcast, former Las Vegas coach Jon Gruden gave his account of the Antonio Brown saga, what might have been, and the regret he still carries.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: ESPN's Bill Barnwell tackled the perennial post-elimination question and laid out why funneling top United States talent into soccer would not deliver a World Cup.
After the U.S. men's national team's exit, ESPN examined the fantasy of recruiting America's best NBA, NFL, and MLB athletes to soccer and explained why the flight of fancy would never actually produce a champion.
Sources: ESPN Soccer · ↑ top
S&P 500 7,454.34 ▼ -0.9% Dow 51,988.28 ▼ -0.9% Nasdaq 25,429.94 ▼ -1.9% WTI crude 87.29 ▲ +9.5% EUR/USD 1.1401 ▼ -0.3% GBP/USD 1.3370 ▼ -0.5% USD/JPY 163.24 ▲ +0.6%