================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, July 28, 2026 - 9:06 AM EDT ================================================================ A twenty-year-old management-interface flaw leaves more than 24,000 servers handing out password hashes, while Teams-based voice phishing keeps feeding ransomware crews their first foothold. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] More than 24,000 exposed baseboard management controllers leak password hashes over a 2004-era IPMI handshake even as Ron Wyden presses CISA to purge obsolete federal VPNs. see: Exposed Server BMCs Leak Password Hashes; Wyden Pushes to Purge Obsolete Federal VPNs * [TREND] Sophos and Cisco Talos both flagged voice phishing over Microsoft Teams paired with remote-access tools as the fastest route into corporate networks, ending in Chaos ransomware. see: Teams Vishing and Phishing Drive Ransomware * [UPDATE (updated)] Newport and Ben Thompson each revisited OpenAI's accidental intrusion into Hugging Face's infrastructure, arguing the 'rogue model' alarm has a more mundane and even reassuring explanation. see: Did OpenAI's New Model "Go Rogue"?; OpenAI Hacks Hugging Face, What Happened, Alignment and Paper Clips * [UPDATE (updated)] The AI and chip selloff ran to a third session as Micron, Intel and Sandisk slid premarket while the Bank for International Settlements warned the boom looks stretched. see: AI and Chip Selloff Widens as Central Banks Warn * [TREND] Popular Hugging Face image-editing models readily generate nonconsensual deepfakes, researchers found, spotlighting how freely hosted AI tools are being weaponized against real people. see: Hugging Face Image Models Generate Nonconsensual Deepfakes SECURITY ---------------------------------------------------------------- 1. EXPOSED SERVER BMCS LEAK PASSWORD HASHES Vulnerabilities and Exploits · [vulnerability, exposure] Latest developments: New research disclosed July 28, 2026 found more than 24,000 internet-exposed baseboard management controllers that hand out a user's password hash over UDP port 623 before any login, abusing a weakness baked into the IPMI 2.0 authentication handshake since 2004. A baseboard management controller runs beneath the host operating system and can power-cycle the server, mount virtual media, open a remote console, and flash firmware, so an attacker who cracks a leaked hash gains control that host security tools never see; administrators should pull IPMI interfaces off the public internet and lock down port 623. - BleepingComputer: https://www.bleepingcomputer.com/news/security/over-24-000-exposed-server-bmcs-leak-password-hash-via-decades-old-flaw/ - Help Net Security: https://www.helpnetsecurity.com/2026/07/28/exposed-bmc-ipmi-vulnerability-research/ 2. TEAMS VISHING AND PHISHING DRIVE RANSOMWARE Ransomware and Cybercrime · [ransomware, phishing, social-engineering] Latest developments: Sophos detailed a campaign in which attackers phoned employees through Microsoft Teams, ran custom malware and remote-access tools, and deployed Chaos ransomware, while Cisco Talos's second-quarter incident-response report logged a surge in phishing-based initial access and the weaponization of legitimate remote-management software. Voice phishing and abused IT tools give ransomware crews a foothold that resembles ordinary help-desk activity; organizations should verify Teams callers, restrict remote-management installs, and hunt for unexpected RMM agents. - Sophos News: https://www.sophos.com/en-us/blog/chaos-in-teams-vishing - Cisco Talos: https://blog.talosintelligence.com/ir-trends-q2-2026/ 3. HUGGING FACE IMAGE MODELS GENERATE NONCONSENSUAL DEEPFAKES AI Security · [ai, abuse, deepfake] Latest developments: Researchers tested the most popular image-editing models hosted on Hugging Face and found they readily produce explicit nonconsensual deepfakes, backing the finding with 1,000 real prompts that show how people wield the tools, Wired reported July 28, 2026. The open model repository distributes image editors that generate sexual imagery of real people without consent, exposing Hugging Face to the same abuse that plagues commercial generators and raising pressure to police model uploads and prompts. - Wired Security: https://www.wired.com/story/hugging-face-has-a-nonconsensual-deepfakes-problem/ 4. FAKE APP STORE WALLET STEALS $1.8 MILLION IN BITCOIN Ransomware and Cybercrime · [fraud, cryptocurrency, mobile] Latest developments: Three people sued Apple on July 27, 2026, claiming a fraudulent Sparrow Wallet app they downloaded from the App Store drained roughly $1.8 million in Bitcoin from their holdings. The counterfeit cryptocurrency wallet passed App Store review and impersonated the legitimate Sparrow Wallet, and the plaintiffs contend Apple's vetting failed to catch it; users should confirm wallet apps against the developer's official channels before entering seed phrases. - BleepingComputer: https://www.bleepingcomputer.com/news/apple/apple-sued-over-fake-app-store-crypto-wallet-app-stealing-18m-in-bitcoin/ 5. WYDEN PUSHES TO PURGE OBSOLETE FEDERAL VPNS Policy and Regulation · [policy, vpn] Latest developments: Senate Intelligence Committee member Ron Wyden wrote to CISA, the Office of Management and Budget, and NIST on July 27, 2026, urging them to lead a government-wide effort to rip obsolete virtual private network products out of federal agencies. Wyden argues that outdated VPN appliances, a repeated entry point for nation-state and criminal intruders, still sit across federal networks; he wants the three agencies to inventory and retire them. - The Record: https://therecord.media/federal-purge-outdated-vpns-wyden-letter 6. UK COURT REJECTS BAHRAIN SPYWARE IMMUNITY CLAIM Nation-State Activity · [spyware, surveillance, legal] Latest developments: A United Kingdom court rejected the Kingdom of Bahrain's claim of state immunity on July 27, 2026, clearing the way for a lawsuit alleging Bahraini officials planted spyware that exfiltrated files, intercepted communications, and switched on the microphones and cameras of the targets' computers. The ruling lets exiled critics pursue Bahrain in British courts over state-sponsored hacking, a precedent that narrows the immunity governments invoke to escape spyware suits. - The Record: https://therecord.media/uk-court-rejects-bahrain-immunity-claim-spyware-case BUSINESS AND POLITICS ---------------------------------------------------------------- * AI and Chip Selloff Widens as Central Banks Warn Latest developments: The retreat ran to a third session Tuesday with South Korea's Kospi leading Asian losses and Micron, Intel, and Sandisk falling premarket, while Bank for International Settlements economists and Singapore's central bank warned the AI boom itself now raises the risk of monetary-policy errors and financial-stability and cybersecurity threats. A flight from artificial-intelligence and semiconductor stocks that has erased hundreds of billions in Big Tech value keeps spreading through global markets ahead of this week's earnings from the largest U.S. hyperscalers, testing whether the trillions committed to data centers will pay off. - FT World: https://www.ft.com/content/f8c03b5b-e194-4236-82c3-389b6f5dd7ae?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/stocks/oil-extends-fall-on-hopes-of-hormuz-reopening-but-chip-selloff-deepens-331d84a1?mod=rss_markets_main - FT World: https://www.ft.com/content/c73bed01-2386-41a8-8db8-88069b558797?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Chance Showers And Thunderstorms, high 82F. Tonight: Chance Showers And Thunderstorms, low 64F. Wednesday: Slight Chance Rain Showers then Slight Chance Showers And Thunderstorms, high 79F. Business: * Haitians Leave Charleroi as Protected Status Ends Latest developments: Haitian residents are leaving the Mon Valley borough of Charleroi in Washington County as their federal Temporary Protected Status expires. Charleroi drew national attention two years ago for a fast-growing Haitian population that filled jobs and storefronts in the small Washington County town; the end of Temporary Protected Status is now prompting an exodus that reshapes the borough's workforce and economy. - TribLive: https://triblive.com/local/regional/haitians-leaving-charleroi-as-temporary-protected-status-ends/ * Little Debbie Driver Charged in $17,000 Invoice Fraud Latest developments: The City of Washington police charged James Powell, 39, of Valley Grove, West Virginia, with multiple felonies after an investigation that began in May. Police say Powell, a route driver for Stewart Snacks, LLC, an independent Little Debbie distributor, sold his snack inventory for cash at Washington County flea markets, then filed roughly $17,000 in fake invoices to make it appear Giant Eagle, Shop 'n Save, and other stores had bought the product. - KDKA: https://www.cbsnews.com/pittsburgh/news/little-debbie-snack-delivery-driver-fraud-scheme/ - WPXI: https://www.wpxi.com/news/local/little-debbie-snack-delivery-driver-charged-alleged-fraud-scheme-washington-county/LMGAAOIPORBNRDYJPN4WCE2MHE/ Around town: * Cognetti Ad Targets Data Centers in Swing House Race Latest developments: Democrat Paige Cognetti launched a television ad attacking data centers in her challenge to freshman Republican Representative Rob Bresnahan in a northeastern Pennsylvania swing congressional district. Cognetti, the mayor of Scranton, uses the spot's line "we're not for sale" to make sprawling data-center development a wedge issue against Bresnahan, one of the most competitive U.S. House races in Pennsylvania. - WPXI: https://www.wpxi.com/news/local/democrats-tv-ad-targets-data-centers-drive-oust-republican-swing-pennsylvania-house-seat/BVITTLSSRBH5BAQOTM2S72LCDM/ * Mayes Runs Hair-Care Drive Under New CROWN Act Latest developments: With Pennsylvania's CROWN Act now law barring discrimination based on natural and protective hairstyles, state Representative La'Tasha Mayes is holding a natural hair-care product drive for foster youth, accepting donations through July 31. Mayes, who represents Pittsburgh, is collecting natural hair-care products for young people in foster care to mark passage of the CROWN Act, which prohibits race-based hair discrimination in Pennsylvania schools and workplaces. - Pittsburgh City Paper: https://www.pghcitypaper.com/news-2/social-justice/after-passing-crown-act-pa-rep-mayes-holds-natural-hair-care-drive-for-foster-youth/ SPORTS ---------------------------------------------------------------- Pirates (55-52) Mon Jul 27 · Diamondbacks 2 · Pirates 3 · Final (10) Brandon Lowe’s 10th-inning hit rallies the Pirates over the Diamondbacks 3-2 https://plaintextsports.com/mlb/2026-07-27/ari-pit Up Next · Diamondbacks @ Pirates · Tue Jul 28, 6:40 PM https://plaintextsports.com/mlb/2026-07-28/ari-pit Around the Teams: * T.J. Watt Chases a Bounce-Back Season Latest developments: The Post-Gazette's training-camp countdown cast edge rusher T.J. Watt as a player looking to rebound in 2026 after a down year by his standards. Watt, the Steelers' star outside linebacker, opens camp at Saint Vincent College in Latrobe aiming to return to elite form and anchor a defense that leans on his pass rush opposite Alex Highsmith and Nick Herbig. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/27/steelers-training-camp-countdown-tj-watt/stories/202607260060 * Cherington Says Pirates Will Be 'Open-Minded' at Deadline Latest developments: Pirates general manager Ben Cherington said the club will stay "open-minded" on moves ahead of the July 31 trade deadline as it hunts bullpen help. With the Pirates hovering around the National League's third wild-card spot, Cherington signaled the front office could add rather than sell, weighing bullpen upgrades against trade interest in players like shortstop Oneil Cruz. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/26/pirates-trade-deadline-ben-cherington-bullpen/stories/202607260084 * First-Rounder Derek Curiel Signs With Pirates Latest developments: The Pirates officially signed their 2026 first-round draft pick, outfielder Derek Curiel, who said he is excited to "make an impact." Curiel joins the organization as a headline addition to a farm system the Pirates are counting on to reshape the roster, formalizing his entry after being selected in the first round of the 2026 MLB draft. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/26/derek-curiel-pirates-mlb-draft/stories/202607250045 Team USA: * Pochettino's USMNT Future Unresolved After the World Cup Latest developments: ESPN reports U.S. Soccer needs a prompt answer on whether Mauricio Pochettino stays as United States men's national team head coach following the 2026 World Cup. Pochettino's status is the lingering question for U.S. Soccer as the federation turns toward the 2030 World Cup cycle, leaving planning for the national team on hold until the coach's decision comes. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49468665/united-states-usmnt-mauricio-pochettino-future-2030-world-cup READING ---------------------------------------------------------------- * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Newport examines the intrusion into Hugging Face's production infrastructure and the claim that an OpenAI model acted autonomously, arguing the episode has a more mundane explanation than a rogue AI breaking loose. https://calnewport.com/did-openais-new-model-go-rogue/ * Stratechery -- OpenAI Hacks Hugging Face, What Happened, Alignment and Paper Clips Ben Thompson reconstructs how OpenAI accidentally hacked Hugging Face and argues the alignment takeaways are more encouraging than the alarmed reaction suggests. https://stratechery.com/2026/openai-hacks-hugging-face-what-happened-alignment-and-paper-clips/ * Ed Zitron -- Premium: The Hater's Guide To Oracle (Part 2) Zitron dismantles Oracle's reputation as an incredibly profitable, fast-growing company, arguing the popular mythology around the firm does not hold up under scrutiny. https://www.wheresyoured.at/premium-the-haters-guide-to-oracle-part-2/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,448.32 ▼ -0.8% Dow 52,062.44 ▼ -0.5% Nasdaq 25,314.74 ▼ -2.1% WTI crude 87.17 ▲ +8.0% EUR/USD 1.1401 ▼ -0.3% GBP/USD 1.3370 ▼ -0.5% USD/JPY 163.24 ▲ +0.6% ================================================================ Generated 2026-07-28 09:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================