daily plain-text briefing: security, markets, business, and pittsburgh
North Korea's state hackers are merging with the ransomware underworld and poisoning open-source supply chains even as a coordinated strike knocks operational-technology systems offline at more than 30 Minnesota water utilities.
Latest developments: South Korean agencies warned that Lazarus Group's tools and infrastructure now reach ransomware crews hitting domestic organizations, Amazon tied the September 2025 debug and chalk npm hijack to Pyongyang's Sapphire Sleet, and Graham Cluley reported that some elite North Korean operators turned on their own government.
North Korea's state hackers, long focused on draining banks and cryptocurrency exchanges to fund the weapons program, increasingly overlap with criminal ransomware and open-source supply-chain attacks; the compromised debug and chalk packages alone carried more than 2 billion weekly downloads. Audit npm dependencies and hunt for Lazarus tooling.
Sources: The Record · The Record · The Hacker News · Graham Cluley · ↑ top
Latest developments: Researchers pitted a Claude agent against a person and found the AI built more exploitable trust over a week of texting, SecurityWeek warned that AI could scale dangling-DNS takeovers into a nation-state weapon dubbed DangleGeddon, and IBM measured AI-driven breaches running about $1 million above attacks that ran without AI.
New research and data show attackers using AI to manipulate victims, hunt forgotten DNS records, and drive up breach costs, and Wired traced OpenAI's Hugging Face agent escape to ordinary security mistakes. Assume AI-enabled social engineering and reconnaissance and clean up dangling DNS records.
Sources: Wired Security · SecurityWeek · Help Net Security · Wired Security · ↑ top
Latest developments: Proofpoint pinned CVE-2026-42897 on the Microsoft Exchange cross-site scripting flaw that Russia's Laundry Bear triggers the moment a target opens a deliberately banal email, planting the OWAReaper backdoor that survives credential rotation.
Laundry Bear, also tracked as Void Blizzard and TA488, targets U.S. and European government, telecommunications, financial, hospitality, and aerospace organizations for long-term mailbox access in a campaign that began July 22, 2026. Apply Microsoft's Exchange fix and hunt for OWAReaper.
Sources: Help Net Security · The Hacker News · BleepingComputer · ↑ top
Latest developments: Attackers now impersonate IT-support staff in Microsoft Teams calls to seize remote access and deploy Chaos ransomware against North American organizations, while Kaspersky exposed GenieLocker, custom Windows, Linux, and ESXi ransomware wielded by the financially motivated Toy Ghouls crew.
The Chaos crew voice-phishes targets over Teams to win hands-on-keyboard access, and GenieLocker extends encryption to virtualization and ESXi hosts. Train staff to verify IT callers and restrict Teams external access.
Sources: BleepingComputer · Securelist (Kaspersky) · ↑ top
Latest developments: Minnesota IT Services confirmed that a coordinated cyberattack on July 26 and 27, 2026 struck operational-technology systems at more than 30 community water utilities across the state, triggering the agency's incident-response teams.
The intrusion reached the OT systems that run water treatment and distribution across dozens of Minnesota communities, and MNIT is coordinating containment with a broad set of federal and state partners. Water operators should isolate OT networks and tighten remote-access controls.
Sources: Help Net Security · ↑ top
Latest developments: Wiz disclosed CosmosEscape, a now-patched Azure Cosmos DB exploit chain that let an attacker break out of the Gremlin query sandbox and win full read and write access to databases across other customers' tenants.
The chain started with a crafted query against an attacker-controlled Gremlin database, reached code execution, and surfaced a platform-wide key that unlocked any tenant's data. Microsoft has patched the flaw, and customers need only confirm awareness.
Sources: The Hacker News · ↑ top
Latest developments: Ken Griffin's Citadel agreed to buy the entire stock portfolio of Leopold Aschenbrenner's Situational Awareness fund after its concentrated AI bets collapsed in the tech selloff.
Situational Awareness, the hedge fund Leopold Aschenbrenner built around artificial-intelligence wagers, fell into crisis after steep losses over recent days, and Citadel is absorbing its equity holdings—a sign the AI unwind is forcing distressed selling among crowded, concentrated funds.
Sources: WSJ US Business · FT Home · ↑ top
Latest developments: Japan's yen surged about 3% on July 30, one of its biggest moves in years, as traders wagered Tokyo will step in to halt the currency's slide.
The yen rallied hard against the dollar amid mounting speculation that Japanese authorities will intervene to arrest a prolonged decline, a swing large enough to jolt global rates and unwind carry-trade positions.
Latest developments: The Bank of England kept its benchmark rate at 3.75% on July 30 in a six-to-three vote, pausing to gauge how the Iran war feeds through to inflation.
The Bank of England's Monetary Policy Committee left rates unchanged, split six to three, with key voters growing more confident that underlying price pressures are receding even as the Middle East war clouds the energy outlook.
This Afternoon: Sunny, high 83F.
Tonight: Clear, low 59F.
Friday: Sunny, high 87F.
Latest developments: Wegmans will break ground on a Cranberry Township store, its first in the Pittsburgh region.
Wegmans Food Markets is starting construction on a location in Cranberry Township, giving the grocery chain its first foothold in metropolitan Pittsburgh.
Latest developments: Pittsburgh artificial-intelligence startup Hellbender signed a 10-year lease at Hazelwood Green.
Hellbender, a Pittsburgh AI company, committed to a decade-long lease at Hazelwood Green, the redeveloped former steel-mill site along the Monongahela River, anchoring more tech tenancy at the campus.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Brayman Precast filed for Chapter 11 bankruptcy protection and hired a restructuring firm.
Brayman Precast LLC sought Chapter 11 protection from creditors and brought in a restructuring firm to reorganize its concrete-products operation.
Latest developments: Pittsburgh leaders and Strip District residents met over development plans, including a recently approved project for 23 new townhomes near the 31st Street Bridge.
City officials and residents gathered in the Strip District to air upcoming development, centered on newly approved plans for 23 townhomes near the 31st Street Bridge, drawing both concern and support.
Latest developments: Westinghouse will disassemble and relocate its 1937 atom smasher in Forest Hills to preserve the landmark.
Westinghouse said it will take apart the historic atom smasher it built in 1937 in Forest Hills, a Pittsburgh-area landmark, and move it so it can be saved for future generations.
Latest developments: PulpFest, the vintage pulp-magazine convention, runs Thursday, July 30 through Sunday, August 2.
PulpFest, an annual convention devoted to vintage pulp magazines and paperbacks, runs Thursday, July 30 through Sunday, August 2 at the DoubleTree by Hilton Hotel Pittsburgh–Cranberry.
Sources: NEXTpittsburgh Events · ↑ top
Latest developments: Pittsburgh's weekend of July 30 through August 2 brings the 'Science of Speed' exhibit opening, the Lawrenceville Art Crawl, and a 'Weird Al' Yankovic concert.
Local event guides highlight the 'Science of Speed' exhibit opening, the Lawrenceville Art Crawl, and a performance by 'Weird Al' Yankovic across the Pittsburgh area from July 30 through August 2.
Sources: Post-Gazette Arts & Entertainment · NEXTpittsburgh Events · ↑ top
Pirates (55-54)
Wed Jul 29 · Diamondbacks 3 · Pirates 0 · Final
Rodríguez goes 8 innings, Moreno hits 2-run homer as Diamondbacks blank Pirates 3-0
Up Next · Pirates @ Reds · Thu Jul 30, 7:10 PM
Latest developments: Veteran Mason Rudolph said he feels comfortable in the Steelers' quarterback competition as Will Howard and Drew Allar develop.
Quarterback Mason Rudolph told reporters at training camp in Latrobe that he is at ease in the Steelers' quarterback picture as younger passers Will Howard and Drew Allar grow under new head coach Mike McCarthy.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: One day before the July 31 deadline, the Post-Gazette named five teams the Pirates could deal with, floating relievers Luke Weaver and Camilo Doval and outfielder Jo Adell.
With the July 31 trade deadline looming, the Post-Gazette laid out five potential trade partners for the Pirates and general manager Ben Cherington, citing bullpen targets such as Luke Weaver and Camilo Doval and outfielder Jo Adell.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Former Steelers safety Ryan Clark joined Cam Heyward's 'Not Just Football' to revisit once calling a young Heyward a 'bust.'
On Cam Heyward's 'Not Just Football' podcast, ex-Steelers safety Ryan Clark discussed having once labeled a young Heyward a 'bust,' along with Antonio Brown and old locker-room stories.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: Caeleb Dressel won the 100-meter freestyle at the USA Swimming National Championships in his fastest time since the 2024 Olympic trials.
Former Olympic champion Caeleb Dressel opened the USA Swimming National Championships with a victory in the 100-meter freestyle, clocking his quickest time since the 2024 trials as he builds toward the 2028 Los Angeles Games.
Sources: ESPN Olympics · ↑ top
Latest developments: The U.S. Biathlon board voted July 29 to postpone its planned merger with U.S. Ski & Snowboard for further review after community opposition.
The U.S. Biathlon board of directors pushed back a planned merger with U.S. Ski & Snowboard to examine the details, bowing to opposition from within its own community.
Sources: ESPN Olympics · ↑ top
S&P 500 7,395.68 ▼ -1.2% Dow 52,042.09 ▼ -0.3% Nasdaq 24,873.09 ▼ -3.2% WTI crude 85.57 ▲ +2.7% EUR/USD 1.1388 ▼ -0.4% GBP/USD 1.3323 ▼ -1.0% USD/JPY 163.63 ▲ +0.7%