================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, September 2, 2026 - 10:06 AM EDT ================================================================ A BGP hijack poisoned Virtualizor hosting updates with root-level malware as autonomous AI intrusions pushed vendors to ship new enterprise safeguards. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers hit the routing layer, using a BGP hijack to divert Softaculous update traffic and plant root-level malware on Virtualizor hypervisors behind a technically valid TLS certificate. see: BGP Hijack Poisons Virtualizor and Softaculous Updates * [TREND] Defenders met AI-speed intrusions with new tooling as Anthropic shipped Enterprise Frontier Safeguards and Palo Alto Networks bought Console, while Newport reframed autonomous agents as hostile civilizations. see: AI-Speed Attacks Drive New Enterprise Safeguards; Are We at War with AI Agent "Civilizations"? * [TREND] Mobile users drew fresh malvertising, as StreamRat rode fake streaming ads on Meta toward Spanish speakers and malicious Packagist packages hunted unpatched iPhones for crypto wallet seeds. see: StreamRat and Malicious Packagist Packages Hit Mobile Users * [UPDATE (new)] The Justice Department charged a Russian national over an Excel malware campaign as leaked GRU training records exposed a Russian force-generation mechanism spanning the Main Operational and 8th Directorates. see: Russian National Charged Over Excel Malware Campaign; Leaked Russian Cyber-Operations Training Materials * [UPDATE (new)] Dropbox began warning customers that an unauthorized party hijacked their accounts by abusing a flaw in Lenovo's email-verification process to register fraudulent Lenovo IDs. see: Dropbox Accounts Hijacked Through Lenovo Flaw SECURITY ---------------------------------------------------------------- 1. BGP HIJACK POISONS VIRTUALIZOR AND SOFTACULOUS UPDATES Vulnerabilities and Exploits · [supply-chain, bgp, malware] Latest developments: Virtualizor disclosed that attackers hijacked Border Gateway Protocol routing for Softaculous's update servers, presented a technically valid TLS certificate for the domains, and delivered a booby-trapped Virtualizor package that planted persistent root access, with one hosting provider finding 5 of 34 checked hypervisors compromised in a window that opened August 28, 2026, at 20:57. Virtualizor is VPS management software from Softaculous that runs on hypervisors, and the routing attack turned its update channel into a malware delivery pipe; operators should audit hypervisors for compromise and rebuild affected hosts. - The Hacker News: https://thehackernews.com/2026/09/bgp-hijack-delivers-malicious.html - SecurityWeek: https://www.securityweek.com/malicious-virtualizor-update-served-via-bgp-hijacking/ - Ars Technica Security: https://arstechnica.com/security/2026/09/well-executed-bgp-attack-uses-hijacked-ips-to-infect-real-networks/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-push-malicious-virtualizor-update-in-bgp-hijacking-attack/ 2. AI-SPEED ATTACKS DRIVE NEW ENTERPRISE SAFEGUARDS AI Security · [ai, agentic, defense] Latest developments: Anthropic unveiled Enterprise Frontier Safeguards, pairing zero data retention with automated misuse monitoring, Palo Alto Networks acquired the AI agent platform Console alongside 34% revenue growth, Sevii extended its detection-and-response platform to contain AI-driven attacks within minutes, and Unit 42 published its investigation of autonomous agents that breached an enterprise network in hours. As attackers wield AI agents to compromise networks at machine speed, security vendors are fielding autonomous defenses and misuse controls; enterprises should inventory AI usage and lock down agent credentials. - SecurityWeek: https://www.securityweek.com/anthropic-details-response-to-security-incidents-unveils-enterprise-safeguards/ - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ - SecurityWeek: https://www.securityweek.com/sevii-targets-ai-speed-attacks-with-preemptive-autonomous-defense/ - SecurityWeek: https://www.securityweek.com/palo-alto-networks-acquires-ai-agent-platform-console/ 3. STREAMRAT AND MALICIOUS PACKAGIST PACKAGES HIT MOBILE USERS Ransomware and Cybercrime · [mobile, malvertising, trojan] Latest developments: ThreatFabric detailed StreamRat, a new Android banking trojan that fake TV-streaming ads on Meta pushed to Spanish speakers, reaching an estimated 570,950 European Union accounts and handing operators near-total device control, while researchers flagged 13 malicious Composer theme packages on Packagist that inject JavaScript into Vietnamese movie and comic streaming sites to deploy spyware that steals crypto wallet seeds from unpatched iPhones. Two malvertising and supply-chain campaigns took aim at phones, StreamRat at Spanish-speaking Android users and the Packagist packages at iOS visitors; users should install apps only from official stores and keep devices patched. - The Hacker News: https://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.html - The Hacker News: https://thehackernews.com/2026/09/13-malicious-packagist-packages-target.html 4. RUSSIAN NATIONAL CHARGED OVER EXCEL MALWARE CAMPAIGN Ransomware and Cybercrime · [cybercrime, arrest, malware] Latest developments: The Justice Department charged Searzhudin Tamirlanovich Aktulaev, 40, whom authorities extradited from Cyprus on August 28, 2026, with running roughly 255 fake accounts on a freelance platform that sent malware-laced Excel attachments to about 80,000 users in 2016 and 2017, deploying the TVRAT and DarkVNC malware. Aktulaev, whom authorities arrested in Cyprus in May 2025, faces charges from the U.S. Attorney's Office for the Northern District of California over a years-old phishing operation that targeted freelancers. - The Hacker News: https://thehackernews.com/2026/09/extradited-russian-hacker-faces-charges.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/us-charges-russian-for-infecting-80-000-freelancers-with-malware/ 5. DROPBOX ACCOUNTS HIJACKED THROUGH LENOVO FLAW Data Breaches · [breach, account-takeover] Latest developments: Dropbox began warning some customers that an unauthorized party reached their accounts by abusing a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs. The account takeovers chained a weakness in Lenovo's identity system into Dropbox access; affected users should reset credentials and turn on multi-factor authentication. - BleepingComputer: https://www.bleepingcomputer.com/news/security/dropbox-accounts-breached-through-lenovo-email-verification-flaw/ 6. LEAKED RUSSIAN CYBER-OPERATIONS TRAINING MATERIALS Nation-State Activity · [apt, russia, leak] Latest developments: Leaked training records detailed a force-generation mechanism for Russian General Staff components including the GRU, the Main Operational Directorate, and the 8th Directorate, which handles protected communications and cryptography, and tied a 2024 Department No. 4 graduate, Aleksei Kondrashov, to Military Unit 74455, the Sandworm group behind destructive cyberattacks. The documents map how Russia recruits and trains military cyber operators and connect academy graduates to units known for sabotage, giving defenders insight into the adversary's pipeline. - Schneier on Security: https://www.schneier.com/blog/archives/2026/09/leaked-russian-cyber-operations-training-materials.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Bond Rout Pauses as Oil Retreats from $95 Latest developments: The U.S. 10-year yield touched its highest since 2023 overnight, then the Treasury selloff paused and oil eased back from near $95 in early U.S. trading Wednesday, September 2, steadying the multiday rout even as European government bonds stayed under heavy pressure. Fresh U.S.-Iran strikes drove crude toward $95 a barrel and pushed European natural gas to its highest level since the end of 2022, lifting the 10-year Bund to a 2011 high, gilts to a 2007 high, and Japan's 10-year yield to a 30-year peak, stoking inflation and rate-hike fears before markets partly steadied. - WSJ Markets: https://www.wsj.com/livecoverage/stock-market-today-dow-sp-500-nasdaq-09-02-2026?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/investing/oil-hovers-close-to-95-as-middle-east-conflict-further-pressures-bonds-877d8321?mod=rss_markets_main - WSJ US Business: https://www.wsj.com/finance/commodities-futures/european-gas-at-highest-level-since-end-of-2022-on-u-s-iran-hostilities-f6d51d99?mod=pls_whats_news_us_business_f PITTSBURGH ---------------------------------------------------------------- Weather: Today: Scattered Showers And Thunderstorms, high 92F. Tonight: Scattered Showers And Thunderstorms then Chance Showers And Thunderstorms, low 73F. Thursday: Chance Showers And Thunderstorms, high 92F. Business: * U.S.-Canada Trade War Threatens Car Prices Latest developments: KDKA reported September 2 that the newly escalated trade war between the United States and Canada could raise new- and used-car prices across several brands, with Kelley Blue Book advising Pittsburgh-area buyers to move soon. Tariffs tied to the U.S.-Canada dispute threaten to push up vehicle costs for local buyers, adding to a car market where new and used prices have already climbed for months. - KDKA: https://www.cbsnews.com/pittsburgh/news/car-buying-costs-and-tariffs-trade-war-canada/ * Dick's Diner Marks 80 Years in Murrysville Latest developments: The Post-Gazette profiled September 2 Dick's Diner in Murrysville as the Westmoreland County restaurant reaches its 80th year serving comfort food. Dick's Diner, a fixture along Route 22 in Murrysville, has dished up breakfast and comfort food for eight decades, drawing regulars who describe the place as coming home. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/09/02/dicks-diner-murrysville/stories/202609060006 Around town: * Penn State Fraternity Cocaine Ring in Court Latest developments: Five of fourteen defendants in the Penn State fraternity cocaine-trafficking case made their first court appearances September 2 for preliminary hearings at the Centre County Courthouse in Bellefonte, where a former student testified he stored the drug in a fraternity room and sold it to members. Prosecutors charged fourteen people, among them Agostino Abbatiello, Thomas Robinson, Paul Robinson, Muhammad Huraibi, Robert Zanolla, and Seth Beardsley, over a cocaine operation run out of two Penn State University fraternities; one defendant's father, a prominent Pittsburgh attorney, also faces charges. - KDKA: https://www.cbsnews.com/pittsburgh/news/penn-state-fraternity-brothers-cocaine-ring-suspects-court-appearances/ - WTAE: https://www.wtae.com/article/penn-state-fraternity-cocaine-trafficking-court/73591469 * Police Surveillance Tools Draw Privacy Pushback Latest developments: KDKA reported September 2 that as departments across the region lean on Flock cameras, drones, and license-plate readers, civil-liberties critics warn the tools reach too far into private life. Police credit automated license-plate readers with identifying three Texas men who robbed Wendy's restaurants in Monroeville, Penn Hills, Scott Township, and Peters Township along with a McDonald's; critics counter that the growing surveillance network can violate privacy and civil rights. - KDKA: https://www.cbsnews.com/pittsburgh/news/surveillance-technology-flock-debate/ * Beaver County Group Recycles Bikes Latest developments: The Post-Gazette profiled September 2 Communicycle, a Beaver County group that repairs and recycles bicycles for children and adults. Communicycle collects, fixes, and redistributes used bikes across Beaver County, keeping serviceable bicycles out of landfills and putting them under riders who need them. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/goodness/2026/09/02/communicycle-beaver-county-recycling-bikes/stories/202609020003 SPORTS ---------------------------------------------------------------- Scoreboard unavailable at last update. Around the Teams: * Edge Room Talks Contracts on Not Just Football Latest developments: On Cam Heyward's Not Just Football training-camp episode, outside linebackers T.J. Watt, Alex Highsmith, Nick Herbig, and Jack Sawyer broke down their offseason contracts and life under the Steelers' new defensive system. Heyward and his co-host gathered the Steelers' edge crew—Watt, Highsmith, Herbig, and Sawyer—for a camp episode covering the group's deals, the scheme change on defense, and a round of edge-room superlatives. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=ANB7ezXcv3w * Hiles Calls for Pirates to Clean House Latest developments: Post-Gazette writer Noah Hiles argued August 30 that the Pirates should overhaul the front office, starting by firing general manager Ben Cherington. With the Pirates fading from contention, Hiles made the case in the Post-Gazette that the franchise needs sweeping change at the top, naming general manager Ben Cherington and team president Travis Williams. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/30/fire-ben-cherington-travis-williams/stories/202608300073 Team USA: * USMNT Summer Transfer Window Closes Flat Latest developments: With the window shut, ESPN's Jeff Carlisle recapped September 2 that Folarin Balogun's deadline-day U-turn killed his Everton move and left him at AS Monaco, while Gio Reyna's switch to Strasbourg stands as a last chance to revive his career. The 2026 summer window closed on an underwhelming stretch for U.S. men's national team players: Balogun stayed at Monaco after scrapping a £40 million move to Everton, and Reyna joined Strasbourg hoping to rebuild his form ahead of the World Cup the United States co-hosts. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49789601/folarin-balogun-deadline-day-everton-usmnt-summer-transfer-window-gio-reyna READING ---------------------------------------------------------------- * Stratechery -- Fable 5.1, Enterprise Frontier Safeguards Ben Thompson covers the release of Fable 5.1, noting that its maker fully scrapped the contested data-retention policy in the interim and arguing that heavier caching amounts to a win-win for the company and its customers. https://stratechery.com/2026/fable-5-1-enterprise-frontier-safeguards/ * Ed Zitron -- Hyperscale Normalization In his latest premium newsletter, Zitron scrutinizes how the hyperscalers' enormous AI infrastructure spending has come to be treated as normal, pressing on the underlying economics. https://www.wheresyoured.at/hyperscale-normalization/ * Cal Newport -- Are We at War with AI Agent "Civilizations"? Newport returns to the July OpenAI hacking episode, weighing OpenAI's newly released details and the framing of autonomous AI agents as hostile 'civilizations.' https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,680.32 ▲ +0.1% Dow 53,312.70 ▲ +0.1% Nasdaq 26,258.70 ▲ +0.3% WTI crude 85.03 ▼ -0.7% EUR/USD 1.1639 ▼ -0.2% GBP/USD 1.3586 ▼ -0.2% USD/JPY 159.53 ▲ +0.4% ================================================================ Generated 2026-09-02 10:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================