================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, September 1, 2026 - 10:06 AM EDT ================================================================ Regulators brand frontier AI the financial system's gravest cyber risk as attackers weaponize and impersonate it, while nearly 22,000 Exchange servers stay open to mailbox hijacking. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Andrew Bailey branded frontier AI the financial system's most immediate cyber risk as criminals hid RevStealer inside a fake 'Claude Opus 5' download impersonating Anthropic. see: Frontier AI Sharpens Attacks and Systemic Risk; Malware Poses as Free AI Tools * [UPDATE (new)] Iran's Nimbus Manticore hid its NodeRabbit and PollCat RATs inside recruiter coding tests to reach Linux and macOS, widening its espionage beyond Windows. see: Nimbus Manticore Builds Cross-Platform RATs * [UPDATE (new)] Nearly 22,000 internet-exposed Microsoft Exchange servers remain unpatched against an authentication-bypass flaw that lets attackers hijack every mailbox on a host. see: Thousands of Exchange Servers Await Patch * [TREND] AI friction hit home as residents packed a hearing over a Burgettstown data center while an AI Horizons summit drew Waymo and Governor Shapiro to Pittsburgh. see: Burgettstown Data Center Splits Washington County; AI Horizons Summit Comes to Pittsburgh * [UPDATE (new)] Attackers struck two crude tankers in the Strait of Hormuz as a deepening bond rout pushed eurozone inflation to 3.3% and U.K. borrowing costs to 2008 highs. see: Tankers Attacked in Strait of Hormuz; Global Bond Rout Deepens as Inflation Fears Build * [UPDATE (new)] A First Alert Weather Day Wednesday threatens damaging winds and hail while a 24-inch water main break cut service to nearly 100 Washington County customers. see: First Alert Weather Day Wednesday; Washington County Water Main Break SECURITY ---------------------------------------------------------------- 1. NIMBUS MANTICORE BUILDS CROSS-PLATFORM RATS Nation-State Activity · [apt, nation-state] Latest developments: The Hacker News reported Iran's Nimbus Manticore now poses as recruiters handing developers coding tests that drop the Node.js RAT NodeRabbit and the JavaScript RAT PollCat, extending the group onto Linux and macOS, with Kaspersky first spotting NodeRabbit in Afghanistan before variants surfaced in Egypt and Ethiopia. Nimbus Manticore, an IRGC-linked espionage crew Kaspersky also calls Mirage Kitten, targets aviation and financial-technology developers; teams should treat unsolicited recruiter coding assignments as a malware-delivery vector. - The Hacker News: https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html - The Record: https://therecord.media/iranian-cyber-spies-target-aviation-fintech-new-malware - Securelist (Kaspersky): https://securelist.com/mirage-kitten-new-backdoors-noderabbit-pollcat/121244/ 2. FRONTIER AI SHARPENS ATTACKS AND SYSTEMIC RISK AI Security · [ai, policy] Latest developments: Financial Stability Board chair Andrew Bailey called cyber risk from frontier AI the 'most immediate concern' to the global financial system and told firms to prepare for simultaneous disruption across shared technology dependencies, while Forescout researchers used Claude AI to port a WAGO PLC remote-code-execution exploit between models in hours for a few hundred dollars. Regulators and researchers warn that capable AI models compress the time and cost of building working exploits and concentrate systemic risk; institutions should assume attackers now wield the same tools. - The Record: https://therecord.media/cyber-risk-from-frontier-ai-most-immediate-concern-to-global-finance - SecurityWeek: https://www.securityweek.com/experiment-porting-a-plc-exploit-with-ai-takes-hours-and-hundreds-of-dollars/ 3. MALWARE POSES AS FREE AI TOOLS AI Security · [ai, malware] Latest developments: Morphisec found a GitHub repository impersonating Anthropic and offering free 'Claude Opus 5' access that instead drops RevStealer, a quiet Windows infostealer that hunts passwords and cryptocurrency-wallet data, while a SANS honeypot caught operators relabeling an exposed inference endpoint with sought-after model names to lure a real coding-agent session and harvest its files and tool manifest. Attackers exploit demand for premium AI models by disguising malware and rogue 'free' LLM backends; users should pull AI clients only from official vendor channels and distrust free model endpoints. - Help Net Security: https://www.helpnetsecurity.com/2026/09/01/revstealer-malware-claude-opus-5-github/ - SANS Internet Storm Center: https://isc.sans.edu/diary/rss/33298 4. THOUSANDS OF EXCHANGE SERVERS AWAIT PATCH Vulnerabilities and Exploits · [patch, vulnerability] Latest developments: BleepingComputer counted nearly 22,000 internet-exposed Microsoft Exchange servers still unpatched against a high-severity authentication-bypass flaw that lets attackers hijack every mailbox on a host. The flaw hits on-premises Microsoft Exchange deployments; administrators should apply Microsoft's fix at once to block full mailbox takeover. - BleepingComputer: https://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/ 5. GOLD SHERWOOD RANSOMWARE TRADECRAFT EXPOSED Ransomware and Cybercrime · [ransomware] Latest developments: Sophos published an analysis of 15 intrusions that maps the tradecraft of affiliates behind the GOLD SHERWOOD ransomware operation. GOLD SHERWOOD is an affiliate-driven ransomware operation; defenders can turn the documented tactics into detections and hunting rules. - Sophos News: https://www.sophos.com/en-us/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation BUSINESS AND POLITICS ---------------------------------------------------------------- * Tankers Attacked in Strait of Hormuz Latest developments: Attackers hit two tankers carrying Saudi and South Korean crude on a midnight run through the Strait of Hormuz, and President Trump summoned U.S. refiners to the White House for a Tuesday meeting on fuel prices. Renewed U.S.-Iran fighting pushed crude higher on September 1 as strikes hit vessels laden with Saudi and South Korean oil in the Strait of Hormuz, the chokepoint that carries much of the world's seaborne supply; Iran's president said Tehran would return to the ceasefire if Washington does. - WSJ: https://www.wsj.com/world/middle-east/two-tankers-attacked-on-midnight-run-through-hormuz-9957caaf?mod=rss_worldnews - Financial Times: https://www.ft.com/content/bbbce2e1-6542-4806-9c26-d35e8c3b702e?syn-25a6b1a6=1 - Financial Times: https://www.ft.com/content/697253e0-01d3-44fe-85e5-d4d9af207a3c?syn-25a6b1a6=1 * Global Bond Rout Deepens as Inflation Fears Build Latest developments: Eurozone inflation climbed to 3.3% in August, setting up a European Central Bank rate increase next week, as U.K. borrowing costs hit their highest since 2008 and rate-hike expectations spread to the Federal Reserve. Government bonds sold off worldwide on September 1 as rising oil prices revived inflation fears, driving yields higher across the United Kingdom, Japan, and the United States and lifting the odds that major central banks raise rates; gold held below $4,500 an ounce as the selloff sapped its appeal. - Financial Times: https://www.ft.com/content/e6f5f97a-b199-444e-aaec-b8199359b08e?syn-25a6b1a6=1 - WSJ: https://www.wsj.com/economy/global/global-bond-yields-surge-as-oil-prices-fuel-inflation-worries-ef5c0192?mod=rss_markets_main - Financial Times: https://www.ft.com/content/1b4d308c-3d49-4794-8280-187615c21876?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Slight Chance Showers And Thunderstorms, high 91F. Tonight: Chance Showers And Thunderstorms, low 73F. Wednesday: Chance Showers And Thunderstorms then Slight Chance Showers And Thunderstorms, high 93F. Business: * Burgettstown Data Center Splits Washington County Latest developments: More than 100 residents packed a Washington County fire hall to clash over a Burgettstown-area data center proposal, and officials scheduled four more public hearings. A large data center project near Burgettstown has divided Washington County residents, some charging that leaders "sold off the whole community," as the plan advances toward four additional public hearings. - WTAE: https://www.wtae.com/article/washington-county-data-center-hearing-burgettstown/73575031 * AI Horizons Summit Comes to Pittsburgh Latest developments: The Post-Gazette previewed an AI Horizons summit built to confront the friction around artificial intelligence, drawing figures from Waymo and Governor Josh Shapiro. Organizers of the AI Horizons summit plan to gather technologists from the self-driving firm Waymo, the startup Gecko, and Governor Josh Shapiro in Pittsburgh to work through the uncomfortable tensions artificial intelligence creates. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/tech-news/2026/09/01/ai-horizons-waymo-ai-gecko-shapiro/stories/202608310037 Around town: * Washington County Water Main Break Latest developments: A 24-inch water main broke in Washington County, cutting service to nearly 100 customers, with repairs expected to run up to 23 hours. A 24-inch water main break forced crews to shut off service across parts of Washington County on September 1, leaving nearly 100 customers with no water, low pressure, or cloudy water while emergency repairs proceeded. - WTAE: https://www.wtae.com/article/water-main-break-washington-county-repairs/73578838 - WPXI: https://www.wpxi.com/news/local/nearly-100-customers-without-water-after-large-water-main-break-washington-county/HKSKCLHUSJHW7I3FPJMTYWRQ54/ * First Alert Weather Day Wednesday Latest developments: Forecasters kept Wednesday, September 2, a First Alert Weather Day and now warn of damaging winds and large hail behind heat that feels like the mid-90s, with storm chances running through Friday. Western Pennsylvania faces heat indexes near the mid-90s followed by severe storms carrying damaging winds, large hail, and a tornado risk on Wednesday and Thursday, September 2 and 3, with scattered storm chances lingering into Friday. - WTAE: https://www.wtae.com/article/pennsylvania-pittsburgh-severe-storms-damaging-winds-hail/73579573 - KDKA: https://www.cbsnews.com/pittsburgh/news/storm-chances-will-be-in-place-for-the-pittsburgh-area-today/ Events: * Oktoberfest Returns as 'PROSTBURGH' Latest developments: The Pittsburgh Downtown Partnership and Flyspace Productions announced Oktoberfest Pittsburgh will run October 1 through 11, rebranding Downtown as "PROSTBURGH." Oktoberfest Pittsburgh runs Thursday, October 1, through Sunday, October 11, across Downtown's Golden Triangle, with German-inspired food, beer, music, games, and family activities staged by the Pittsburgh Downtown Partnership and Flyspace Productions. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/oktoberfest-pittsburghs-biggest-fall-celebration-is-back/ * Golden Hour Pop-Up Before Kacey Musgraves Latest developments: The Pittsburgh Parks Conservancy and First National Bank will host a free "Golden Hour" Parkside Pop-Up ahead of Kacey Musgraves's concert. A free "Golden Hour" Parkside Pop-Up runs Tuesday, September 8, at Frankie Pace Park, hosted by the Pittsburgh Parks Conservancy and First National Bank, ahead of Kacey Musgraves's concert that night at PPG Paints Arena. - WPXI: https://www.wpxi.com/news/local/free-golden-hour-parkside-pop-up-planned-ahead-kacey-musgrave-concert-pittsburgh/UTBPHO4FANBH3JTU2267ZMGWBU/ SPORTS ---------------------------------------------------------------- Around the Teams: * Pirates Open Final Month at PNC Park Latest developments: TribLive and the Post-Gazette framed the Pirates' September, watching whether ace Paul Skenes gains traction and eyeing call-up candidates Rafael Flores and Braxton Ashcraft. The Pirates return to PNC Park on Tuesday, September 1, for their first home game since winning road series over the St. Louis Cardinals and San Diego Padres, entering the season's final month with postseason hopes dwindling as beat writers track Paul Skenes and September promotions. - Pittsburgh Post-Gazette: https://www.post-gazette.com/sports/pirates/2026/09/01/september-storylines-rafael-flores-braxton-ashcraft/stories/202609010019 Team USA: * Plum Out for Season, Misses FIBA World Cup Latest developments: The Phoenix Mercury said Kelsey Plum will miss the rest of the 2026 WNBA season, and she will also sit out the FIBA Women's World Cup alongside A'ja Wilson. USA Basketball will play the FIBA Women's World Cup without Kelsey Plum and A'ja Wilson, both sidelined for health reasons, with Kiki Iriafen and Sonia Citron taking their roster spots. - ESPN: https://www.espn.com/wnba/story/_/id/49782113/aja-wilson-kelsey-plum-miss-fiba-women-world-cup READING ---------------------------------------------------------------- * Stratechery -- Nvidia Earnings, Dollars Per Gigawatt, Open and Hugging Face Ben Thompson calls Nvidia's blockbuster quarter both remarkable and boring, arguing that nearly everything the company does aims to keep the AI market from consolidating around any single dominant buyer. https://stratechery.com/2026/nvidia-earnings-dollars-per-gigawatt-open-and-hugging-face/ * Cal Newport -- Are We at War with AI Agent "Civilizations"? Newport revisits July's OpenAI hacking attack after the company disclosed new details, weighing whether society now contends with self-organizing "civilizations" of AI agents. https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ * Ed Zitron -- Premium: The Hater's Guide To Circular Financing (Part One) Zitron opens a multipart takedown of the circular financing he says props up the AI boom, skewering Jensen Huang and the web of deals binding chipmakers to the AI labs that buy their GPUs. https://www.wheresyoured.at/premium-the-haters-guide-to-circular-financing-part-one/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,684.59 ▼ -0.1% Dow 53,442.76 ▲ +0.3% Nasdaq 26,234.79 ▼ -0.3% WTI crude 83.46 ▼ -3.1% EUR/USD 1.1649 ▲ +0.1% GBP/USD 1.3604 ▲ +0.1% USD/JPY 159.41 ▲ +0.3% ================================================================ Generated 2026-09-01 10:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================