infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Artificial intelligence reshaped both sides of security today—driving a vulnerability-disclosure surge that has NIST reaching for AI, a $1 billion Cyera-Oasis deal to govern AI agents, and Anthropic's move to watermark Claude—while attackers actively exploited an unpatched macOS screen-sharing flaw to plant Monero miners.


Emerging Trends and Key Updates

Security

1. GitHub Dependabot Expands Malware Alerts to Eight Ecosystems

Vulnerabilities and Exploits · [supply-chain, malware, github]

Latest developments: GitHub extended Dependabot malware alerts beyond npm to seven more package registries—PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer.

read more

Since March 2026 Dependabot flagged malicious packages only for npm, leaving developers who pulled tainted dependencies from other registries with no warning. GitHub now covers eight ecosystems, closing a wide gap in software-supply-chain defense.

Sources: Help Net Security · ↑ top

2. macOS Screen Sharing Flaw Exploited to Deploy Monero Miner

Vulnerabilities and Exploits · [exploit, macos, cryptominer]

Latest developments: The Netherlands' National Cyber Security Centre warned that attackers, armed with newly public exploit code, are logging into Macs over Screen Sharing and installing Monero cryptocurrency miners.

read more

The macOS authentication-bypass flaw lets a remote attacker log in over Screen Sharing without a password and seize full control of the machine. Mac owners should apply Apple's latest update immediately.

Sources: BleepingComputer · Ars Technica Security · ↑ top

3. AI-Driven Vulnerability Surge Pushes NIST Toward AI

AI Security · [ai, vulnerabilities, policy]

Latest developments: Dark Reading reported that the National Institute of Standards and Technology, facing an AI-driven flood of vulnerability disclosures, is weighing AI tools to triage and process the backlog.

read more

AI-augmented research and scanning are pushing vulnerability disclosures to record volumes and straining the national reporting pipeline. NIST is now asking whether AI can help it manage the surge that AI itself helped create.

Sources: Dark Reading · ↑ top

4. Cyera Buys Oasis Security for AI Agent Control

AI Security · [ai, identity, acquisition]

Latest developments: Cyera announced a roughly $1 billion acquisition of Oasis Security to build a unified control plane governing AI agent identities and access.

read more

The deal merges data security and identity into a single control plane that governs what AI agents can access, redefining privileged access around business context. It signals that enterprises now treat autonomous agents as a first-class identity risk.

Sources: Dark Reading · ↑ top

5. Anthropic Plans to Watermark Claude's AI Text

AI Security · [ai, watermarking]

Latest developments: BleepingComputer detailed how Anthropic plans to embed detectable watermarks in text its Claude models generate.

read more

Anthropic laid out a scheme to embed hidden signals in Claude-written text so others can identify AI-generated content. The effort aims to strengthen provenance as machine-written prose spreads across the web.

Sources: BleepingComputer · ↑ top

Business and Politics

NATO Jets Down Russian Drone Over Romania

Latest developments: NATO fighter jets shot down a suspected Russian drone that crossed into Romanian airspace, and allied officials pinned the incursion directly on Moscow in a rare public attribution.

read more

NATO warplanes downed a suspected Russian drone over Romania and blamed Moscow for the incursion, deepening fears that Russia's war on Ukraine could spill across the alliance's eastern frontier as Kyiv presses its own drone assault of more than 600 aircraft on Moscow.

Sources: WSJ World News · ↑ top

Pittsburgh

Weather

Today: Showers And Thunderstorms, high 83F.

Tonight: Showers And Thunderstorms, low 71F.

Monday: Slight Chance Showers And Thunderstorms then Chance Showers And Thunderstorms, high 82F.

Business

Pennsylvania Data-Center Fight

Latest developments: The battle over data-center construction across Pennsylvania grinds on while the General Assembly sits idle through its summer recess.

read more

Residents such as homeschooling parent Anna Clement are pressing Pennsylvania lawmakers over the noise and scale of proposed data centers, a fight that continues without state regulation as the legislature stays on break, even as the industry courts the commonwealth's cheap power.

Sources: TribLive · ↑ top

Pitt Targets Aggressive Childhood Cancer

Latest developments: University of Pittsburgh researchers reported progress against an aggressive cancer most often diagnosed in infants, testing a new combination of two treatments.

read more

University of Pittsburgh researchers are pairing two therapies to attack an aggressive cancer diagnosed mostly in infants, an approach they say could also work against other tumors and adds to the region's research-economy pipeline.

Sources: TribLive · ↑ top

Around Town

Turnpike Safety Changes After Tunnel Fire

Latest developments: The Pennsylvania Turnpike is adopting new safety measures after a fire inside the Allegheny Mountain Tunnel.

read more

The Pennsylvania Turnpike is making safety changes following a fire in the Allegheny Mountain Tunnel, one of the toll road's mountain tunnels in the Allegheny highlands that carry traffic between the Pittsburgh region and central Pennsylvania.

Sources: Pittsburgh Post-Gazette · ↑ top

Butler County Special Election

Latest developments: A special election to fill Pennsylvania's 12th state House district in Butler County shapes up as an early read on the 2026 midterms.

read more

A special election for the 12th state House district seat in Butler County is drawing outsized attention as a bellwether that could forecast how November's midterm elections break across Pennsylvania.

Sources: Pittsburgh Post-Gazette · ↑ top

Sports

Around the Teams

Pirates Push Back Skenes' Start

Latest developments: The Pirates moved ace Paul Skenes' next start from Sunday to Wednesday to give the All-Star extra rest.

read more

Manager Don Kelly pushed Paul Skenes' scheduled start against the Boston Red Sox back three days to Wednesday for added rest; Skenes said he doesn't necessarily disagree with the call amid the Pirates' second-half slide.

Sources: Post-Gazette Pirates · ↑ top

Benton's Five-Year Extension

Latest developments: The Steelers set defensive tackle Keeanu Benton's new deal at five years and $73.75 million, and Benton spoke at Saturday's training camp.

read more

The Pittsburgh Steelers locked up defensive tackle Keeanu Benton, the Wisconsin product from general manager Omar Khan's first draft class, on a five-year, $73.75 million extension, cementing him as a defensive-line cornerstone.

Sources: Post-Gazette Steelers · ↑ top

Team USA

Ledecky's First 800m International Loss

Latest developments: Lani Pallister of Australia ran down Katie Ledecky to win the 800-meter freestyle at the Pan Pacific Championships, the first time an international rival beat Ledecky in the event.

read more

Australia's Lani Pallister edged Katie Ledecky in the 800-meter freestyle at the Pan Pacific Championships, handing the American her first international loss in a race she has owned; Pallister had already beaten Ledecky in the 400 free a day earlier.

Sources: ESPN Olympics · ↑ top

Douglass Lowers 50 Free World Record Again

Latest developments: Kate Douglass broke the women's 50-meter freestyle world record a second time in one day, winning the Pan Pacific final in 23.19 seconds.

read more

Kate Douglass lowered her own 50-meter freestyle world record twice on Saturday at the Pan Pacific Championships, capping the day by winning the final in 23.19 seconds.

Sources: ESPN Olympics · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,762.91  ▲ +0.7%
Dow        53,822.10  ▼ -0.2%
Nasdaq     26,634.30  ▲ +1.0%
WTI crude      82.45  ▲ +6.6%
EUR/USD       1.1546  ▲ +0.1%
GBP/USD       1.3500  ▲ +0.3%
USD/JPY       159.01  ▲ +0.8%