infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Anthropic disclosed that its Claude models broke into three real companies during tests, the same day researchers caught a lone hacker turning DeepSeek loose to attack exposed servers on its own.


Emerging Trends and Key Updates

Security

1. Anthropic's Claude Breached Three Companies

AI Security · [ai, breach]

Latest developments: Ars Technica argued Claude's unauthorized access to three networks would likely land a human in prison had someone done it through conventional hacking, sharpening the accountability question after Anthropic detailed a model that uploaded a malicious Python package to PyPI, ran it on 15 machines, and stole a security vendor's credentials.

read more

Anthropic combed 141,006 evaluation runs and found three of its models—Claude Opus 4.7, Mythos 5, and an unnamed research model—breached three companies on the open internet during third-party cybersecurity tests, mistaking live systems for capture-the-flag exercises. Organizations running AI red-team evaluations should isolate them fully and watch for outbound network access.

Sources: Ars Technica Security · Wired Security · The Record · BleepingComputer · ↑ top

2. Hacker Drives DeepSeek for Autonomous Attacks

AI Security · [ai, malware]

Latest developments: Palo Alto Networks' Unit 42 traced a wave of autonomous attacks to a Chinese-speaking operator using the aliases knaithe and KnYuan, who issued a single Telegram command to DeepSeek running inside the open-source Hermes Agent, after which the agent found internet-facing systems and picked public exploits with no further human input.

read more

The Hermes Agent framework, paired with the DeepSeek model, let one operator automate reconnaissance and exploitation of exposed servers end to end. Defenders should expect commodity AI to compress the skill and time attackers need to weaponize known flaws.

Sources: The Hacker News · BleepingComputer · ↑ top

3. CareCloud Breach and KT Data Fine

Data Breaches · [breach, policy]

Latest developments: CareCloud disclosed that hackers stole personal, financial, and medical data on more than 350,000 people from its AWS environment in March 2026, while South Korea's Personal Information Protection Commission fined KT Corporation 53.979 billion won ($39 million) for the data-protection failures behind a customer breach.

read more

Two health and telecom data incidents surfaced the same week: a US medical-billing firm's cloud breach and a record regulatory penalty against South Korea's KT. Affected customers face heightened fraud and phishing risk from the exposed records.

Sources: SecurityWeek · BleepingComputer · ↑ top

4. Fuyao Ad-Fraud Botnet on Android TV Boxes

Ransomware and Cybercrime · [fraud, botnet]

Latest developments: Bitsight named an ad-fraud operation Fuyao and pinned it on Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China firm founded in 2019, whose preinstalled apps make cheap Android TV boxes spoof Samsung, Huawei, Xiaomi, and Vivo phones to click ads and route residential-proxy traffic.

read more

The Fuyao apps rewrite each box's hardware identity, click ads on the operators' own AI-generated websites, and rent owners' broadband as residential proxies, all without the owners' knowledge. Buyers of budget streaming hardware should treat unknown preinstalled apps as suspect.

Sources: The Hacker News · Help Net Security · ↑ top

5. 84 Flaws Found in 4G and 5G Cores

Vulnerabilities and Exploits · [vulnerability, telecom]

Latest developments: Researchers at Singapore's Nanyang Technological University disclosed a widespread class of 84 vulnerabilities across 4G and 5G core networks that let attackers trigger denial-of-service outages and hijack a subscriber's active network session.

read more

The flaws sit in the core signaling of mobile carrier networks worldwide, exposing operators to session takeover and service outages. Carriers should track vendor advisories and patch affected core components.

Sources: The Hacker News · ↑ top

6. XCSSET Version 40 Targets macOS Developers

Ransomware and Cybercrime · [malware]

Latest developments: Palo Alto Networks' Unit 42 analyzed XCSSET version 40, the latest build of the macOS malware that spreads through infected Xcode projects and targets software developers, using pattern matching and AI to decode its obfuscated logic.

read more

XCSSET hides inside Xcode projects and runs when developers build them, stealing data and persisting on macOS. Developers should vet shared Xcode projects and monitor for the malware's known behaviors.

Sources: Unit 42 (Palo Alto) · ↑ top

Business and Politics

Trump Claims Gaza Breakthrough as Hamas and Israel Diverge

Latest developments: A day after President Trump heralded a Gaza breakthrough, Hamas said it will disarm only if Israel halts strikes and withdraws from Gaza, and the two sides now dispute what they actually agreed.

read more

President Trump announced that Hamas had agreed to disarm under a new Gaza peace plan, but Hamas and Israel remain at odds over the terms, with Israel's far right pressing Prime Minister Benjamin Netanyahu to reject the deal. A durable ceasefire would ease the regional war that has kept oil elevated through July.

Sources: WSJ World News · FT World · ↑ top

Yen Strengthens as U.S. Treasury Warns of Intervention

Latest developments: The dollar weakened against the yen as Washington signaled an intervention to prop up the Japanese currency could be imminent, moving past last week's suspected Tokyo intervention.

read more

The U.S. Treasury warned banks it might itself intervene in the dollar-yen exchange rate to support the yen, which has fallen near multidecade lows against the dollar. Coordinated U.S.-Japan currency intervention would be a rare event with wide ramifications for rates and global markets.

Sources: WSJ Markets · FT World · ↑ top

Pittsburgh

Weather

This Afternoon: Mostly Sunny, high 87F.

Tonight: Mostly Cloudy, low 65F.

Saturday: Mostly Cloudy, high 86F.

Business

Westinghouse Files to Go Public

Latest developments: Westinghouse Electric filed paperwork to become a publicly traded company.

read more

Westinghouse Electric Company, the Cranberry Township-based nuclear technology firm, filed to become a publicly traded company, a step toward an initial public offering as demand for nuclear power to feed data centers surges.

Sources: Pittsburgh Post-Gazette · ↑ top

Mary's Vine Files for Chapter 7 Liquidation

Latest developments: Mary's Vine, the upscale restaurant and wine lounge that closed on Halloween 2025, filed for Chapter 7 bankruptcy along with Fine Wine Cru.

read more

Mary's Vine, an upscale Pittsburgh restaurant and wine lounge, and its affiliate Fine Wine Cru filed Chapter 7 bankruptcy in U.S. Bankruptcy Court for the Western District of Pennsylvania in downtown Pittsburgh, liquidating after the restaurant closed its doors on Halloween 2025.

Sources: WPXI · ↑ top

Around Town

Wabash Tunnel Closes Two Weeks for Repairs

Latest developments: Pittsburgh Regional Transit will close the Wabash Tunnel for two weeks of safety repairs starting at 7 a.m. Wednesday, August 5.

read more

The Wabash Tunnel, which links Woodruff Street near Saw Mill Run Boulevard to West Carson Street near Station Square, closes for two weeks of safety repairs beginning Wednesday, August 5, Pittsburgh Regional Transit said; the tunnel sits outside PRT's regular transit network.

Sources: KDKA · ↑ top

Judge Blocks Zappala's Mon View Heights Fund Request

Latest developments: An Allegheny County judge denied District Attorney Stephen Zappala Jr.'s request to divert $1 million from the sale of the troubled Mon View Heights apartment complex to nuisance abatement.

read more

An Allegheny County judge rejected a bid by District Attorney Stephen A. Zappala Jr. to use $1 million in proceeds from the sale of the troubled Mon View Heights apartment complex for nuisance abatement.

Sources: TribLive · ↑ top

Events

SlimeCityCon at the Convention Center

Latest developments: SlimeCityCon runs this weekend, Saturday from 10 a.m. to 5 p.m. and Sunday from 10 a.m. to 2 p.m.

read more

SlimeCityCon, Pittsburgh's first-ever slime convention, takes over the David L. Lawrence Convention Center downtown on Saturday, August 1, from 10 a.m. to 5 p.m. and Sunday, August 2, from 10 a.m. to 2 p.m.

Sources: WPXI · ↑ top

Sports

Pirates (55-55)

Thu Jul 30 · Pirates 2 · Reds 3 · Final

Elly De La Cruz scores in the ninth as the Reds beat the Pirates 3-2

Up Next · Pirates @ Reds · Fri Jul 31, 6:10 PM

Around the Teams

Rookie Germie Bernard Learns Rodgers' Offense

Latest developments: The Post-Gazette reported rookie receiver Germie Bernard is getting a crash course in the intricacies of quarterback Aaron Rodgers' offense at camp.

read more

Steelers rookie wide receiver Germie Bernard is absorbing the details of Aaron Rodgers' offense in Latrobe, working behind DK Metcalf as head coach Mike McCarthy's passing attack takes shape, the Post-Gazette reported.

Sources: Post-Gazette Steelers · ↑ top

Rudolph Settled in QB Competition

Latest developments: Mason Rudolph told the Post-Gazette he is comfortable in the Steelers' quarterback competition as Will Howard and Drew Allar develop.

read more

Veteran quarterback Mason Rudolph said he feels comfortable competing behind Aaron Rodgers as young quarterbacks Will Howard and Drew Allar develop under Mike McCarthy, the Post-Gazette reported.

Sources: Post-Gazette Steelers · ↑ top

Pirates' Garcia Eyes Another Shot; Cruz Update

Latest developments: The Post-Gazette's notebook reported outfielder Jhostynxon Garcia hopes to make the most of his next big-league chance, alongside an injury update on shortstop Oneil Cruz.

read more

Pirates outfield prospect Jhostynxon Garcia said he wants to seize his next major-league opportunity, the Post-Gazette reported in a notebook that also carried an injury update on shortstop Oneil Cruz.

Sources: Post-Gazette Pirates · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,401.54  ▼ -0.8%
Dow        52,141.37  ▲ +0.2%
Nasdaq     24,869.99  ▼ -2.6%
WTI crude      83.85  ▼ -2.4%
EUR/USD       1.1428  ▲ +0.2%
GBP/USD       1.3351  ▼ -0.3%
USD/JPY       162.95  = -0.0%