daily plain-text briefing: security, markets, business, and pittsburgh
Regulators brand frontier AI the financial system's gravest cyber risk as attackers weaponize and impersonate it, while nearly 22,000 Exchange servers stay open to mailbox hijacking.
Latest developments: The Hacker News reported Iran's Nimbus Manticore now poses as recruiters handing developers coding tests that drop the Node.js RAT NodeRabbit and the JavaScript RAT PollCat, extending the group onto Linux and macOS, with Kaspersky first spotting NodeRabbit in Afghanistan before variants surfaced in Egypt and Ethiopia.
Nimbus Manticore, an IRGC-linked espionage crew Kaspersky also calls Mirage Kitten, targets aviation and financial-technology developers; teams should treat unsolicited recruiter coding assignments as a malware-delivery vector.
Sources: The Hacker News · The Record · Securelist (Kaspersky) · ↑ top
Latest developments: Financial Stability Board chair Andrew Bailey called cyber risk from frontier AI the 'most immediate concern' to the global financial system and told firms to prepare for simultaneous disruption across shared technology dependencies, while Forescout researchers used Claude AI to port a WAGO PLC remote-code-execution exploit between models in hours for a few hundred dollars.
Regulators and researchers warn that capable AI models compress the time and cost of building working exploits and concentrate systemic risk; institutions should assume attackers now wield the same tools.
Sources: The Record · SecurityWeek · ↑ top
Latest developments: Morphisec found a GitHub repository impersonating Anthropic and offering free 'Claude Opus 5' access that instead drops RevStealer, a quiet Windows infostealer that hunts passwords and cryptocurrency-wallet data, while a SANS honeypot caught operators relabeling an exposed inference endpoint with sought-after model names to lure a real coding-agent session and harvest its files and tool manifest.
Attackers exploit demand for premium AI models by disguising malware and rogue 'free' LLM backends; users should pull AI clients only from official vendor channels and distrust free model endpoints.
Sources: Help Net Security · SANS Internet Storm Center · ↑ top
Latest developments: BleepingComputer counted nearly 22,000 internet-exposed Microsoft Exchange servers still unpatched against a high-severity authentication-bypass flaw that lets attackers hijack every mailbox on a host.
The flaw hits on-premises Microsoft Exchange deployments; administrators should apply Microsoft's fix at once to block full mailbox takeover.
Sources: BleepingComputer · ↑ top
Latest developments: Sophos published an analysis of 15 intrusions that maps the tradecraft of affiliates behind the GOLD SHERWOOD ransomware operation.
GOLD SHERWOOD is an affiliate-driven ransomware operation; defenders can turn the documented tactics into detections and hunting rules.
Sources: Sophos News · ↑ top
Latest developments: Attackers hit two tankers carrying Saudi and South Korean crude on a midnight run through the Strait of Hormuz, and President Trump summoned U.S. refiners to the White House for a Tuesday meeting on fuel prices.
Renewed U.S.-Iran fighting pushed crude higher on September 1 as strikes hit vessels laden with Saudi and South Korean oil in the Strait of Hormuz, the chokepoint that carries much of the world's seaborne supply; Iran's president said Tehran would return to the ceasefire if Washington does.
Sources: WSJ · Financial Times · Financial Times · ↑ top
Latest developments: Eurozone inflation climbed to 3.3% in August, setting up a European Central Bank rate increase next week, as U.K. borrowing costs hit their highest since 2008 and rate-hike expectations spread to the Federal Reserve.
Government bonds sold off worldwide on September 1 as rising oil prices revived inflation fears, driving yields higher across the United Kingdom, Japan, and the United States and lifting the odds that major central banks raise rates; gold held below $4,500 an ounce as the selloff sapped its appeal.
Sources: Financial Times · WSJ · Financial Times · ↑ top
Today: Slight Chance Showers And Thunderstorms, high 91F.
Tonight: Chance Showers And Thunderstorms, low 73F.
Wednesday: Chance Showers And Thunderstorms then Slight Chance Showers And Thunderstorms, high 93F.
Latest developments: More than 100 residents packed a Washington County fire hall to clash over a Burgettstown-area data center proposal, and officials scheduled four more public hearings.
A large data center project near Burgettstown has divided Washington County residents, some charging that leaders "sold off the whole community," as the plan advances toward four additional public hearings.
Latest developments: The Post-Gazette previewed an AI Horizons summit built to confront the friction around artificial intelligence, drawing figures from Waymo and Governor Josh Shapiro.
Organizers of the AI Horizons summit plan to gather technologists from the self-driving firm Waymo, the startup Gecko, and Governor Josh Shapiro in Pittsburgh to work through the uncomfortable tensions artificial intelligence creates.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: A 24-inch water main broke in Washington County, cutting service to nearly 100 customers, with repairs expected to run up to 23 hours.
A 24-inch water main break forced crews to shut off service across parts of Washington County on September 1, leaving nearly 100 customers with no water, low pressure, or cloudy water while emergency repairs proceeded.
Latest developments: Forecasters kept Wednesday, September 2, a First Alert Weather Day and now warn of damaging winds and large hail behind heat that feels like the mid-90s, with storm chances running through Friday.
Western Pennsylvania faces heat indexes near the mid-90s followed by severe storms carrying damaging winds, large hail, and a tornado risk on Wednesday and Thursday, September 2 and 3, with scattered storm chances lingering into Friday.
Latest developments: The Pittsburgh Downtown Partnership and Flyspace Productions announced Oktoberfest Pittsburgh will run October 1 through 11, rebranding Downtown as "PROSTBURGH."
Oktoberfest Pittsburgh runs Thursday, October 1, through Sunday, October 11, across Downtown's Golden Triangle, with German-inspired food, beer, music, games, and family activities staged by the Pittsburgh Downtown Partnership and Flyspace Productions.
Sources: Pittsburgh Magazine · ↑ top
Latest developments: The Pittsburgh Parks Conservancy and First National Bank will host a free "Golden Hour" Parkside Pop-Up ahead of Kacey Musgraves's concert.
A free "Golden Hour" Parkside Pop-Up runs Tuesday, September 8, at Frankie Pace Park, hosted by the Pittsburgh Parks Conservancy and First National Bank, ahead of Kacey Musgraves's concert that night at PPG Paints Arena.
Latest developments: TribLive and the Post-Gazette framed the Pirates' September, watching whether ace Paul Skenes gains traction and eyeing call-up candidates Rafael Flores and Braxton Ashcraft.
The Pirates return to PNC Park on Tuesday, September 1, for their first home game since winning road series over the St. Louis Cardinals and San Diego Padres, entering the season's final month with postseason hopes dwindling as beat writers track Paul Skenes and September promotions.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Phoenix Mercury said Kelsey Plum will miss the rest of the 2026 WNBA season, and she will also sit out the FIBA Women's World Cup alongside A'ja Wilson.
USA Basketball will play the FIBA Women's World Cup without Kelsey Plum and A'ja Wilson, both sidelined for health reasons, with Kiki Iriafen and Sonia Citron taking their roster spots.
S&P 500 7,684.59 ▼ -0.1% Dow 53,442.76 ▲ +0.3% Nasdaq 26,234.79 ▼ -0.3% WTI crude 83.46 ▼ -3.1% EUR/USD 1.1649 ▲ +0.1% GBP/USD 1.3604 ▲ +0.1% USD/JPY 159.41 ▲ +0.3%