daily plain-text briefing: security, markets, business, and pittsburgh
Researchers weaponized the autonomous AI coding agents developers rely on as Microsoft patched a Defender zero-day and breaches at KDDI and AssuranceAmerica exposed nearly 19 million people.
Latest developments: Wiz disclosed GhostApproval on July 9, symlink flaws in six AI coding assistants—Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf—that redirect an approved file write onto a sensitive file to seize a developer's machine, as the AI Now Institute published Friendly Fire, which tricks Claude Code and OpenAI Codex into running an attacker's code, and Help Net Security showed malicious agent skills slipping past every scanner tested.
Agent skills are bundles of instructions and scripts that tools like Claude Code and Codex load from public marketplaces, and the new attacks show a rigged project or skill can hijack the machine running the agent. Developers should restrict autonomous approval modes and vet third-party skills as strictly as npm or PyPI packages.
Sources: SecurityWeek · The Hacker News · The Hacker News · Help Net Security · ↑ top
Latest developments: Microsoft shipped a Malware Protection Engine update on July 9 fixing CVE-2026-50656, the RoguePlanet privilege-escalation flaw, nearly a month after its details went public following June Patch Tuesday.
The bug, an improper link resolution in mpengine.dll rated CVSS 7.8, lets an authenticated attacker on Windows 10 and Windows 11 reach SYSTEM privileges. The fix arrives through the antivirus engine's automatic update channel.
Sources: Help Net Security · SecurityWeek · The Hacker News · BleepingComputer · ↑ top
Latest developments: Japanese telecom KDDI disclosed July 9 that attackers exploited a zero-day in a third-party system to reach an ISP email platform and expose 12 million people, the same day American insurer AssuranceAmerica confirmed a breach hitting 6.9 million drivers and Mount Royal University in Calgary confirmed hackers stole and then deleted two drives of employee, student, and university data.
Three unrelated intrusions surfaced together, ranging from a telecom supply-chain zero-day to a ransomware crew that wiped a university's file storage. Affected customers and staff should watch for identity theft and fraud tied to the exposed records.
Sources: SecurityWeek · BleepingComputer · SecurityWeek · BleepingComputer · ↑ top
Latest developments: BleepingComputer detailed Forg365 on July 9, a phishing-as-a-service platform that blends adversary-in-the-middle and device-code methods with AI-generated lures to steal Microsoft 365 accounts, as Help Net Security named the Pink extortion crew, which cold-calls employees posing as IT and walks them through a fake Entra passkey enrollment to seize their accounts.
Both operations chase Microsoft 365 logins, one through an automated phishing kit and the other through voice calls that keep victims busy while attackers finish the takeover. Organizations should train staff to distrust unsolicited passkey and login-code prompts.
Sources: BleepingComputer · Help Net Security · BleepingComputer · ↑ top
Latest developments: Interpol wrapped Operation First Light 2026, a four-month campaign across 97 countries that arrested 5,811 suspects and seized $293 million tied to social-engineering scams and the money laundering that moves their proceeds.
The operation targeted criminals posing as police officers, romantic partners, and business suppliers to defraud victims across continents. It marks one of the largest coordinated anti-fraud enforcement pushes to date.
Sources: Help Net Security · BleepingComputer · ↑ top
Latest developments: The European Commission on July 9 took Ireland, Spain, France, and the Netherlands to court for running more than 20 months late transposing the NIS2 Directive on critical-infrastructure cybersecurity, as Wired reported the Chat Control bill will let companies scan citizens' texts, emails, and social posts for child-abuse material despite a majority of European lawmakers voting against it.
Brussels is squeezing member states to enforce baseline cyber rules while advancing a message-scanning mandate that privacy advocates and many lawmakers oppose. Both moves reshape obligations for operators and platforms across the bloc.
Sources: The Record · Wired Security · ↑ top
Latest developments: Iran answered the second night of U.S. airstrikes by targeting Bahrain, Kuwait, and Qatar, threatening the interim deal that ended the war, while oil futures turned lower as traders bet the renewed fighting ends quickly.
President Trump declared the ceasefire over and ordered fresh strikes on Iran, the largest escalation since the U.S.-Israel-Iran peace deal; Tehran retaliated against U.S. Gulf allies Bahrain, Kuwait, and Qatar, and global markets steadied after the initial shock.
Latest developments: The Financial Times reported Russia has curbed diesel exports after sustained Ukrainian drone strikes on its refineries, tipping the world toward a diesel supply crunch that now spills beyond Russia's borders.
Ukraine's escalating drone campaign against Russian refineries has forced Moscow to cut off diesel exports, squeezing global supply and lifting fuel costs from Europe to the United States as PepsiCo and other consumer firms warn of renewed inflationary pressure.
This Afternoon: Isolated Showers And Thunderstorms, high 88F.
Tonight: Isolated Showers And Thunderstorms then Scattered Showers And Thunderstorms, low 69F.
Friday: Showers And Thunderstorms, high 84F.
Latest developments: Wegmans told KDKA it will begin foundation work in July on its first Pittsburgh-area store.
Wegmans will start building its first store in the Pittsburgh region this month, on Cool Springs Drive in Cranberry Township near the Penguins' practice facility, after buying the land earlier this year.
Latest developments: PNC launched its rebuilt mobile banking app with artificial-intelligence features on July 7 and began a phased rollout to customers.
PNC Financial Services Group released a redesigned mobile banking app carrying new AI capabilities, spreading the release across its customer base through the end of summer.
Latest developments: New York developer Camp Eight Capital advanced its plan to replace a former Carnegie Mellon University building at 143 Craig Street with a seven-story, 155-unit student housing project.
Camp Eight Capital is moving forward to tear down a small former CMU administrative building on Craig Street in Oakland and put up 155 units of student housing across seven stories.
Latest developments: One day out, PennDOT launched a website posting live drive times for the 376 detours and detailed how Oakland-bound traffic should navigate the 25-day shutdown that begins 9 p.m. Friday, July 10.
PennDOT will close Interstate 376, the Parkway East, between the Squirrel Hill Tunnel and the Edgewood/Swissvale interchange for 25 days to demolish and replace the aging Commercial Street Bridge, pushing roughly 100,000 daily drivers in each direction onto detours through Wilkinsburg and Oakland.
Latest developments: A Post-Gazette review found dozens of Allegheny County school districts are raising property taxes for the coming year.
Dozens of Allegheny County school districts have voted to lift property taxes, adding another cost to homeowners already stretched by rising bills.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Kennedy Township residents hired a lawyer and gathered more than 1,000 signatures to challenge the proposed sale of undeveloped land at Fairhaven Park.
Residents in Kennedy Township are organizing against the potential sale of open land at Fairhaven Park, backing their opposition with a petition topping 1,000 names and legal counsel.
Latest developments: The fourth annual Northside Music Festival plays across Pittsburgh's North Side this weekend, July 9 through 12.
The fourth annual Northside Music Festival takes over Pittsburgh's North Side from Thursday through Sunday, July 9-12, one of two July music festivals NEXTpittsburgh highlights in its summer concert guide alongside the brand-new Pittsburgh Music Festival.
Sources: NEXTpittsburgh · Pittsburgh Post-Gazette · ↑ top
Latest developments: The Pittsburgh Vintage Grand Prix, the region's vintage-car racing and show weekend, headlines the July 9-12 calendar.
The Pittsburgh Vintage Grand Prix runs Thursday through Sunday, July 9-12, drawing collector and race cars for one of the city's marquee summer weekends.
Sources: NEXTpittsburgh · ↑ top
Latest developments: Union Pacific's historic Big Boy No. 4014 steam locomotive is arriving in Leetsdale, and WTAE published a guide on where to watch, park, and safely see the stop.
Union Pacific's Big Boy No. 4014, the world's largest operating steam locomotive, is making a stop in Leetsdale, drawing rail fans who will need to plan viewing and parking around the visit.
Pirates (47-46)
Wed Jul 8 · Braves 3 · Pirates 0 · Final
Bart's 2-run homer helps Atlanta to 3-0 win after Braves end Pirates' combined perfect-game bid
Up Next · Braves @ Pirates · Thu Jul 9, 12:35 PM
Latest developments: Pro Football Hall of Famer Rod Woodson joined Cam Heyward's 'Not Just Football' podcast to tell untold stories from his 17-year NFL career.
Former Steelers cornerback Rod Woodson sat down with Steelers captain Cam Heyward on the 'Not Just Football' podcast for a deep dive into his career, including a stretch when coach Bill Cowher trusted his Hall of Fame instincts.
Sources: Not Just Football with Cam Heyward · ↑ top
Latest developments: A Post-Gazette draft preview by Kevan Graves asked whether the Pirates use the No. 5 overall pick on another high schooler.
With the MLB Draft approaching, the Post-Gazette laid out the Pirates' options at No. 5 overall and weighed whether the club leans again toward a high school prospect.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: ESPN reported Christian Pulisic sustained a bone bruise and microfracture in his lower leg during the World Cup loss to Belgium and will miss several weeks.
United States and AC Milan attacker Christian Pulisic hurt his lower leg in the round-of-16 exit, an injury that sidelines the American captain for weeks heading into his club season.
Latest developments: The U.S. Soccer Federation named Steve Cherundolo manager of the U.S. under-23 team for the 2028 Summer Olympics in Los Angeles.
U.S. Soccer tapped former U.S. international and MLS Cup-winning coach Steve Cherundolo to lead the under-23 national team that will represent the country at the 2028 Los Angeles Games.
S&P 500 7,498.09 ▲ +1.3% Dow 52,706.95 ▲ +1.3% Nasdaq 25,936.64 ▲ +1.2% WTI crude 69.96 ▼ -0.6% EUR/USD 1.1417 ▲ +0.3% GBP/USD 1.3344 ▲ +1.0% USD/JPY 161.98 = -0.0%