daily plain-text briefing: security, markets, business, and pittsburgh
Google credited AI with patching more than a thousand Chrome bugs across two releases while Palo Alto caught a Chinese actor turning AI loose to hunt and exploit flaws, cementing AI's grip on both sides of the vulnerability race.
Latest developments: Google said AI helped Chrome patch 1,072 security bugs across its two most recent releases and forced a shift to twice-weekly updates, as Palo Alto's Unit 42 caught a Chinese-speaking actor running autonomous AI scans across seven vulnerabilities before hand-exploiting the hits.
AI now drives both ends of the vulnerability lifecycle: Google uses it to triage reports, generate patches, and review Chrome code, and attackers pair AI reconnaissance with manual exploitation. Defenders should expect faster patch cadences alongside AI-augmented intrusions.
Sources: Wired Security · BleepingComputer · Unit 42 (Palo Alto) · Help Net Security · ↑ top
Latest developments: The Hacker News tied North Korea to a new Contagious Interview iteration that pushes full-screen fake macOS update screens to plant crypto-stealing malware, and South Korean authorities with four security firms exposed a state-sponsored campaign that abused compromised domestic sites and the AnySign4PC financial-security client to drop SIGNBT and COPPERHEDGE backdoors without any prompt.
Pyongyang's operators keep broadening delivery, aiming fake macOS updates at job-seeking developers and hijacking Korean websites that weaponize locally installed security software. The push follows Amazon's attribution of the debug and chalk npm hijack to the Sapphire Sleet group.
Sources: The Hacker News · The Hacker News · The Hacker News · The Record · ↑ top
Latest developments: Analog Devices told regulators intruders exfiltrated files after breaching its networks in June 2026, ShinyHunters claimed a breach of residential-security firm Brinks Home and threatened to leak stolen data, and criminals moved to extort Britain's Department for Education over more than 600,000 stolen records.
A fresh round of data-theft extortion struck the Massachusetts semiconductor giant Analog Devices, home-security provider Brinks Home, and a UK government education department, exposing names, contacts, and corporate files. The victims face leak threats as attackers hold the stolen data for ransom.
Sources: The Record · SecurityWeek · BleepingComputer · The Record · ↑ top
Latest developments: CISA released 11 industrial-control advisories on July 30, covering MikroTik RouterOS WireGuard key extraction, Schneider Electric IGSS, Rockwell Automation controllers, and NASA's cFS Health and Safety application, published new 2026 minimum SBOM elements replacing the 2021 NTIA guidance, and issued open-source software security principles, as the FCC added foreign-made mobile robots and networked power inverters to its Covered List.
US agencies pushed a broad hardening effort spanning industrial-control patches, a refreshed SBOM baseline, open-source guidance, and FCC import curbs on foreign robots and inverters over cyber risk. Operators of operational technology and critical infrastructure should review their exposure.
Sources: CISA Advisories · CISA Advisories · Help Net Security · The Hacker News · ↑ top
Latest developments: Broadcom shipped fixes for five VMware vulnerabilities, three of them critical, that let attackers bypass authentication, run arbitrary code, or escape a virtual machine to the host across vCenter, ESX, Workstation, and Fusion, as CISA confirmed continuing zero-day exploitation of the Cisco Secure Firewall Management Center static-credential flaw CVE-2026-20316.
VMware's VM-escape and auth-bypass bugs threaten hypervisor tenants across Broadcom's product line, and Cisco's hard-coded FMC credentials give unauthenticated attackers a foothold now listed in CISA's Known Exploited Vulnerabilities catalog. Administrators should patch both at once.
Sources: BleepingComputer · BleepingComputer · The Hacker News · ↑ top
Latest developments: The Chinese cybercrime group Silver Fox chained three vulnerable drivers in a bring-your-own-vulnerable-driver attack on a Japanese industrial manufacturer to deliver the ValleyRAT remote-access trojan, while Kaspersky uncovered OctLurk and SilkLurk, memory-resident backdoors that inject plugins to run shells, scan networks, dump credentials, and log keystrokes across Central Asia.
Two China-nexus operations surfaced the same day: Silver Fox's driver abuse against manufacturing and the OctLurk and SilkLurk backdoors targeting Central Asian networks. Both aim at persistent, stealthy access for espionage.
Sources: The Hacker News · Securelist (Kaspersky) · ↑ top
Latest developments: The Nasdaq composite climbed more than 2% on July 30 as chip stocks recovered and Microsoft surged, clawing back ground lost in the AI-driven rout of recent sessions.
Microsoft added a record roughly $480 billion in market value after its intelligent-cloud revenue jumped 32% to $39.3 billion, steadying a market that days earlier shed some $890 billion across megacap tech and forced hedge funds to meet margin calls.
Sources: WSJ Markets · FT World · ↑ top
Latest developments: The yen surged to a two-month high against the dollar on July 30, a roughly 2.3% move traders read as possible Japanese government intervention, though Tokyo has not confirmed a step-in.
After weeks of verbal warnings from Japanese officials against speculative selling, the spike raised the prospect that Japan entered currency markets to halt a slide in the yen that threatens to accelerate domestic inflation.
Sources: WSJ Markets · FT World · ↑ top
This Afternoon: Sunny, high 82F.
Tonight: Clear, low 59F.
Friday: Sunny, high 87F.
Latest developments: Pittsburgh International Airport named its new outdoor terrace the UPMC Terrace and put its size at 36,000 square feet, the first of four planned in the new terminal.
The pre-security UPMC Terrace, unveiled July 29, gives travelers a landscaped greenspace with a walkway and seating inside Pittsburgh International Airport's new terminal, part of the airport's push to build nature into the flying experience.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: Community organizations across the Pittsburgh region moved to meet with residents and press for a pause on new data-center projects, warning that a regional moratorium expires in November.
As power-hungry data-center proposals fill municipal drawing boards around Pittsburgh, groups want to slow approvals before the existing moratorium lapses in November, arguing residents need a fuller say on the projects' strain on electricity and water.
Latest developments: PennDOT will close a ramp nightly on eastbound I-376, the Parkway East, starting Monday, August 3, weather permitting.
The Pennsylvania Department of Transportation announced overnight ramp closures on the eastbound Parkway East beginning next week, the latest round of work on the heavily traveled Pittsburgh corridor.
Latest developments: The Pennsylvania Fish and Boat Commission stocked thousands of blue catfish in the Ohio River on Wednesday, July 29, part of an effort to restore the native species around Pittsburgh.
Blue catfish, North America's largest catfish species and able to top 100 pounds, are native to the Ohio River basin including the Monongahela and lower Allegheny but vanished in the early 1900s amid poor water quality; the commission is now reintroducing them.
Latest developments: The maximum state grant available to Pennsylvania college students reached an all-time high, the Post-Gazette reported July 30.
Pennsylvania raised the ceiling on its need-based state grant to a record level, expanding the aid the Pennsylvania Higher Education Assistance Agency can send to in-state college students facing rising tuition.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Kamin Science Center opens its Science of Speed exhibit, anchored by an all-electric go-kart racetrack, on Saturday, August 1, 2026.
Science of Speed, a 21,000-square-foot exhibit built around an all-electric kart track, debuts this weekend in the former SportsWorks building at the Kamin Science Center on Pittsburgh's North Shore.
Latest developments: The Craftsmen's Guild of Pittsburgh set Friday through Sunday, September 11 to 13, 2026, for the 57th A Fair in the Park.
A Fair in the Park, the Craftsmen's Guild of Pittsburgh's long-running artisan market, returns to Mellon Park in Shadyside, adjacent to the Pittsburgh Center for Arts & Media, for its 57th year over the weekend of September 11 to 13.
Sources: Pittsburgh Magazine · ↑ top
Pirates (55-54)
Wed Jul 29 · Diamondbacks 3 · Pirates 0 · Final
Rodríguez goes 8 innings, Moreno hits 2-run homer as Diamondbacks blank Pirates 3-0
Up Next · Pirates @ Reds · Thu Jul 30, 7:10 PM
Latest developments: The Post-Gazette's camp countdown argued the Steelers' playoff hopes rest on quarterback Aaron Rodgers' right arm.
The paper cast Rodgers, reunited with head coach Mike McCarthy from their Green Bay years, as the pivot on whom Pittsburgh's 2026 season turns, with Will Howard developing behind him.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: One day before the July 31 trade deadline, the Post-Gazette's Noah Hiles wrote that an injury scare to Esmerlyn Valdez underscored how little hitting depth the Pirates have.
Columnist Noah Hiles argued the scare around young Pirate Esmerlyn Valdez sharpened the case for general manager Ben Cherington to add a bat before the deadline, given the club's persistent lack of offense.
Sources: Post-Gazette Pirates · ↑ top
S&P 500 7,395.68 ▼ -1.2% Dow 52,042.09 ▼ -0.3% Nasdaq 24,873.09 ▼ -3.2% WTI crude 85.57 ▲ +2.7% EUR/USD 1.1399 ▼ -0.2% GBP/USD 1.3322 ▼ -0.7% USD/JPY 163.68 ▲ +0.6%