================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, July 29, 2026 - 12:06 PM EDT ================================================================ A coordinated cyberattack knocked operational controls offline at more than 30 Minnesota community water systems, forcing a statewide response as federal agencies pressed critical-infrastructure operators to rehearse isolating vital systems. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Intruders hit operational technology at more than 30 Minnesota water systems and knocked out Angola's largest telco Unitel, widening an assault on essential services. see: Coordinated Cyberattack on Minnesota Water Systems; Cyberattack Cripples Angola's Unitel * [TREND] Anthropic's Claude Mythos derived a key-recovery attack on the HAWK-256 post-quantum scheme and sped a seven-round AES-128 break hundreds of times over. see: Claude Mythos Breaks Crypto and Outpaces Patching * [TREND] Maximum-severity remote-code-execution flaws landed in a single day across VMware vCenter, Gitea, and the Ruflo AI harness, handing unauthenticated attackers fresh footholds. see: Critical VMware and Gitea RCEs Patched; RufRoot Flaw in Ruflo AI Harness * [UPDATE (new)] Laundry Bear, the Russia-linked group, began exploiting a Microsoft Outlook Web Access bug to extend its webmail espionage campaign with fresh malware. see: Laundry Bear Turns to Outlook Web Access * [TREND] Newport and Ben Thompson each argue the panic that OpenAI's model went rogue overstates what was really an accidental hack of Hugging Face. see: Did OpenAI's New Model "Go Rogue"?; OpenAI Hacks Hugging Face, What Happened, Alignment and Paper Clips * [UPDATE (new)] Iran's ballistic-missile strikes on U.S. bases drove Brent and WTI up more than 7% and pushed Procter & Gamble to warn of a $1 billion cost hit. see: Iran Missile Barrage on U.S. Bases Sends Oil Up 7% SECURITY ---------------------------------------------------------------- 1. COORDINATED CYBERATTACK ON MINNESOTA WATER SYSTEMS Critical Infrastructure Security · [critical-infrastructure, ot, incident] Latest developments: Hackers struck operational technology at more than 30 Minnesota community water systems on July 26 and 27, taking Braham's water plant offline and disrupting automated controls and communications in Plymouth, South St. Paul, and Maple Plain, which pushed the Minnesota IT Services agency to activate a statewide incident response. The Minnesota IT Services (MNIT) agency is coordinating with state and federal partners after intrusions hit municipal water and wastewater controls; the US and Australian governments separately urged critical-infrastructure operators to prepare to isolate vital OT systems and run them disconnected for extended periods. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-target-over-30-minnesota-water-utilities-in-coordinated-ot-attack/ - The Hacker News: https://thehackernews.com/2026/07/coordinated-cyberattack-targets-30.html - SecurityWeek: https://www.securityweek.com/dozens-of-minnesota-water-utilities-targeted-in-coordinated-ot-attacks/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-shares-advice-on-isolating-vital-systems-during-cyberattacks/ 2. CLAUDE MYTHOS BREAKS CRYPTO AND OUTPACES PATCHING AI Security · [ai, cryptanalysis, exploit] Latest developments: Anthropic said its Claude Mythos Preview derived an end-to-end key-recovery attack against the HAWK-256 post-quantum signature scheme and produced a 200- to 800-fold speedup against seven-round AES-128, while Microsoft races behind the scenes to patch the vulnerabilities the same class of models surfaces faster than its engineers can fix them. Frontier models now generate novel cryptanalytic attacks and working exploits, compressing the window defenders have to respond; a new CryptanalysisBench benchmark found Anthropic's model discovering fresh attacks, and vendors including Contrast Security are shipping runtime shields aimed at AI-generated exploits. - The Hacker News: https://thehackernews.com/2026/07/claude-ai-just-cracked-post-quantum.html - Schneier on Security: https://www.schneier.com/blog/archives/2026/07/measuring-llms-ability-to-perform-cryptanalysis.html - Ars Technica Security: https://arstechnica.com/security/2026/07/anthropic-is-finding-bugs-faster-than-microsoft-can-fix-them/ - The Hacker News: https://thehackernews.com/2026/07/mythos-asks-right-question-it-doesnt.html 3. CRITICAL VMWARE AND GITEA RCES PATCHED Vulnerabilities and Exploits · [patch, rce, vulnerability] Latest developments: Broadcom patched three critical VMware flaws, led by CVE-2026-59309, a 9.8-rated vCenter authentication bypass, alongside a virtual-machine escape, while Gitea fixed CVE-2026-60004, a 9.8-rated bug that lets any user with repository write access plant a Git hook and run shell commands as the Gitea service account. Both flaws hit widely deployed self-hosted infrastructure; administrators should apply the VMware ESX, vCenter, Workstation, and Fusion updates and upgrade Gitea to 1.27.1. Rapid7 also published a proof-of-concept for the actively exploited Check Point SmartConsole bypass CVE-2026-16232. - The Hacker News: https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html - SecurityWeek: https://www.securityweek.com/critical-vm-escape-vulnerability-patched-in-vmware-esxi/ - The Hacker News: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html - The Hacker News: https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html 4. RUFROOT FLAW IN RUFLO AI HARNESS AI Security · [ai, rce, vulnerability] Latest developments: Noma Security disclosed CVE-2026-59726, a CVSS 10.0 unauthenticated remote-code-execution flaw it codenamed RufRoot in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that lets attackers seize the system and corrupt its memory so malicious behavior persists after patching. The flaw affects all Ruflo versions before 3.16.3 and can unleash malicious AI agent swarms; operators should upgrade immediately and inspect agent memory for corruption. - The Hacker News: https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html - Dark Reading: https://www.darkreading.com/cyber-risk/patch-resistant-rufroot-flaw-malicious-ai-agent-swarms 5. CYBERATTACK CRIPPLES ANGOLA'S UNITEL Critical Infrastructure Security · [telecom, outage, incident] Latest developments: A cyberattack hit Unitel, Angola's largest telecommunications operator, hours before its landmark stock debut, cutting voice, mobile data, and internet access for millions across the country. Unitel carries the majority of Angola's mobile subscribers, and the nationwide outage struck as the company prepared a high-profile market listing, underscoring the exposure of national telecom infrastructure. - The Record: https://therecord.media/angola-unitel-cyberattack-outage 6. LAUNDRY BEAR TURNS TO OUTLOOK WEB ACCESS Nation-State Activity · [apt, espionage, russia] Latest developments: Researchers reported the Russian state-linked group Laundry Bear recently began exploiting a bug in Microsoft Outlook Web Access, extending a webmail espionage campaign that kept running with fresh malware after the group's February activity. Laundry Bear, tied to earlier compromises of Western government and commercial Zimbra deployments, targets webmail to steal correspondence; organizations running OWA should watch for the group's injection techniques and patch promptly. - The Record: https://therecord.media/russia-hackers-outlook-webmail-malware BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran Missile Barrage on U.S. Bases Sends Oil Up 7% Latest developments: Washington confirmed Iran fired ballistic missiles at U.S. military installations, driving Brent and West Texas Intermediate up more than 7% and prompting Procter & Gamble to warn of a $1 billion cost hit for its new fiscal year. President Trump vowed to deliver a "beating" to Tehran after Iran launched a surprise ballistic-missile attack on U.S. forces in the Middle East, disrupting two of the world's most critical oil-shipping routes; U.S. commercial crude stockpiles fell 7.2 million barrels in the week ended July 24. - WSJ: https://www.wsj.com/economy/oil-surges-as-fresh-middle-east-strikes-threaten-fragile-diplomacy-7fd2d4e8?mod=pls_whats_news_us_business_f - FT: https://www.ft.com/content/b2fe912f-01ef-4daa-874e-a180dfeb728c?syn-25a6b1a6=1 - WSJ: https://www.wsj.com/world/middle-east/iran-gambles-on-escalation-with-surprise-attack-on-u-s-forces-72cfd422 * China Chip Shock Deepens, Seoul Curbs Leveraged Funds Latest developments: South Korean regulators moved to restrict retail access to leveraged exchange-traded funds after the Kospi fell by a third this month, and SK Hynix shares dropped nearly 10% despite a record $64 billion quarterly profit. A rout in semiconductor stocks tied to doubts over the artificial-intelligence buildout has erased value across Asian and global markets and driven rotation out of technology; the Federal Reserve releases a rate decision today that economists expect will hold rates steady. - FT: https://www.ft.com/content/38420819-2073-42d6-a14f-2c9a28e5970d?syn-25a6b1a6=1 - WSJ: https://www.wsj.com/tech/even-64-billion-in-quarterly-profit-is-a-disappointment-for-chip-investors-91dcb5c4?mod=rss_markets_main - WSJ: https://www.wsj.com/finance/stocks/china-shock-just-came-for-your-portfolio-367eb097?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Slight Chance Rain Showers, high 80F. Tonight: Mostly Clear, low 59F. Thursday: Sunny, high 82F. Business: * Howard Hanna Expands Into New England Latest developments: Howard Hanna Real Estate Services announced Friday a national partnership with Portside Real Estate Group that pushes the O'Hara Township firm into Maine, New Hampshire, and Massachusetts. Howard Hanna Real Estate Services, one of Pittsburgh's largest home brokerages and based in O'Hara Township, will extend its reach across three New England states through a tie-up with Portside Real Estate Group. - WPXI: https://www.wpxi.com/news/local/howard-hanna-announces-plans-expand-new-england/WPAZVANSTJGXBEHMCVOVJT6F4E/ * Allegheny County Weighs Paid Parental Leave Mandate Latest developments: The Allegheny County Health Department's proposal to require employers to fund up to 18 weeks of paid leave for new parents has drawn formal feedback from more than 1,400 residents. The Allegheny County Health Department has proposed a regulation requiring businesses to pay for up to 18 weeks of leave when an employee has or adopts a child. - NEXTpittsburgh: https://nextpittsburgh.com/health/allegheny-countys-paid-parental-leave-proposal-13-questions-answered/ * Diamonte Walker Leads Rising Tide Partners' Housing Push Latest developments: Diamonte Walker, after five years acquiring properties, now leads Rising Tide Partners with a plan to rebuild disinvested Pittsburgh neighborhoods. Rising Tide Partners, a Pittsburgh community-development organization, is led by Hill District native Diamonte Walker, who aims to acquire and redevelop properties in historically disenfranchised neighborhoods. - WPXI: https://www.wpxi.com/news/local/how-diamonte-walkers-hill-district-roots-shape-her-housing-mission-rising-tide-partners/JKZ4SP72BNGCXM6AXKCN6OVNYE/ Around town: * Garrity and Shapiro Split on Energy and Environment Latest developments: The Post-Gazette laid out where Governor Josh Shapiro and Republican challenger Stacy Garrity stand on energy costs and the environment heading into the 2026 election. State Treasurer Stacy Garrity, the Republican nominee, and Governor Josh Shapiro, the Democratic incumbent, hold contrasting positions on Pennsylvania energy costs and environmental policy in this year's gubernatorial race. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/07/29/pennsylvania-energy-environment-garrity-shapiro/stories/202607290015 * AHN to Hold Free Cancer Screenings in August Latest developments: AHN Cancer Center will host two free community cancer-screening events in August, at Allegheny General Hospital and PNC Park. The Allegheny Health Network's cancer center scheduled free screenings for August at Allegheny General Hospital on the North Side and at PNC Park. - WPXI: https://www.wpxi.com/news/local/ahn-cancer-center-sets-community-screenings-allegheny-general-hospital-pnc-park/OHYVMFLUXZGFZBALBRFDDOLUBI/ * Chatham University Sets Record Freshman Class Latest developments: Chatham University officials said the school will enroll the largest freshman class in its history this fall. Chatham University, the Shadyside-based institution, expects its biggest-ever incoming freshman class when the fall term opens. - WPXI: https://www.wpxi.com/news/local/chatham-university-bring-largest-freshman-class-its-history-this-fall/ANVYSGRNKFDHDE2JEMKU4R4DEQ/ Events: * Kennywood Fall Fantasy Parades Return Latest developments: Kennywood brings back its Fall Fantasy Parades for a 76th year on Saturday, August 1, featuring local marching bands. Kennywood's Fall Fantasy Parades, a tradition begun in 1950 to showcase local marching bands before the school year, take place Saturday, August 1, at the amusement park in West Mifflin. - WPXI: https://www.wpxi.com/news/local/kennywoods-fall-fantasy-parades-return-76th-year-saturday/33KEUERLJVCYRB345IAG56JEEA/ SPORTS ---------------------------------------------------------------- Pirates (55-53) Tue Jul 28 · Diamondbacks 8 · Pirates 7 · Final (12) James McCann's 12th-inning single gives Diamondbacks 8-7 win over Pirates after blowing six-run lead https://plaintextsports.com/mlb/2026-07-28/ari-pit Up Next · Diamondbacks @ Pirates · Wed Jul 29, 12:35 PM https://plaintextsports.com/mlb/2026-07-29/ari-pit Around the Teams: * Porter and Ramsey Open Camp on PUP List Latest developments: Cornerback Joey Porter Jr. had "something flare up" Tuesday, landing him on the physically-unable-to-perform list alongside newly acquired Jalen Ramsey as camp opened. The Steelers placed cornerbacks Joey Porter Jr. and Jalen Ramsey on the physically-unable-to-perform list to start training camp at Saint Vincent College, the Post-Gazette reported. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/29/joey-porter-injury-update-nfl-news/stories/202607290048 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/28/injuries-ramsey-pup-list-broderick-practice-training-camp/stories/202607280046 * Hiles: Valdez Scare Exposes Pirates' Thin Offense Latest developments: Post-Gazette columnist Noah Hiles argued rookie Esmerlyn Valdez's injury scare underscores how fragile the Pirates' offense is entering the July 31 trade deadline. Rookie outfielder Esmerlyn Valdez left Sunday's game after a hit by pitch and returned Tuesday; columnist Noah Hiles used the scare to press general manager Ben Cherington to add hitting before the deadline. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/29/esmerlyn-valdez-injury-hiles-mlb-trade-deadline/stories/202607290029 - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/28/rookie-esmerlyn-valdez-injury-diamondbacks-hand-contusion/stories/202607280044 * McCarthy's Camp Breaks From Tomlin's Routine Latest developments: The Post-Gazette detailed how Mike McCarthy's first Steelers training camp will differ from the routines Mike Tomlin ran for nearly two decades. Mike McCarthy, opening his first camp as Steelers head coach at Saint Vincent College in Latrobe, is reshaping the practice structure and daily routine long set by predecessor Mike Tomlin. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/28/mccarthy-training-camp-latrobe-tomlin-changes/stories/202607280050 Team USA: * Berhalter Joins Middlesbrough From Vancouver Latest developments: U.S. midfielder Sebastian Berhalter transferred from the Vancouver Whitecaps to English Championship club Middlesbrough, the clubs announced Tuesday. Sebastian Berhalter, a United States men's national team midfielder, left MLS side Vancouver Whitecaps to sign with Middlesbrough of England's second-tier Championship. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49472491/usmnt-sebastian-berhalter-transfer-middlesbrough-vancouver-whitecaps * Dressel Wins 100 Free at U.S. Swim Nationals Latest developments: Caeleb Dressel won the 100-meter freestyle Tuesday night to open the USA Swimming National Championships, clocking his fastest time since the 2024 Olympic trials. Caeleb Dressel, the former Olympic champion, took the 100-meter freestyle at the USA Swimming National Championships, posting his quickest mark in the event since the 2024 U.S. Olympic trials. - ESPN Olympics: https://www.espn.com/olympics/swimming/story/_/id/49476708/dressel-wins-100-free-usa-swimming-championships-commence * U.S. Biathlon Weighs Merger With Ski and Snowboard Latest developments: U.S. Biathlon's board is considering moving under the control of U.S. Ski & Snowboard to lift revenue and performance. U.S. Biathlon, the national governing body for the Olympic sport, is weighing a rare merger that would place it under U.S. Ski & Snowboard. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49476895/us-biathlon-set-join-us-ski-snowboard-rare-merger-olympic-orgs READING ---------------------------------------------------------------- * Ed Zitron -- The More You Buy, The More You Lose Zitron argues the AI and data-center spending spree destroys value rather than creating it, so the more companies pour into the buildout, the deeper their losses run. https://www.wheresyoured.at/the-more-you-buy-the-more-you-lose/ * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Newport examines reports tying an OpenAI model to the Hugging Face infrastructure intrusion and argues the alarm over AI "going rogue" outpaces the mundane reality of what happened. https://calnewport.com/did-openais-new-model-go-rogue/ * Stratechery -- OpenAI Hacks Hugging Face, What Happened, Alignment and Paper Clips Ben Thompson contends OpenAI accidentally hacked Hugging Face and that the episode's lessons for AI alignment are more reassuring than the surrounding panic suggests. https://stratechery.com/2026/openai-hacks-hugging-face-what-happened-alignment-and-paper-clips/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,432.24 ▼ -0.9% Dow 52,166.97 ▼ -0.2% Nasdaq 25,122.68 ▼ -2.6% WTI crude 86.04 ▲ +5.1% EUR/USD 1.1391 ▼ -0.4% GBP/USD 1.3342 ▼ -0.9% USD/JPY 163.50 ▲ +0.7% ================================================================ Generated 2026-07-29 12:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================