SonicWall confirmed attackers chaining two SMA1000 VPN zero-days for unauthenticated remote code execution, while the Justice Department and CrowdStrike cut the 23-year-old Sality botnet off from its operator.
Emerging Trends and Key Updates
- Trend SonicWall's SMA1000 gateways, hijacked Softaculous update routing, and Sangoma Switchvox VoIP servers all took hits in one day, with crews prying at enterprise plumbing rather than endpoints.
- Update · new Manifold Security showed a repository's own Git configuration can make Claude, Codex, and Cursor run attacker commands, as vendors rush to sell enterprise AI safeguards.
- Trend Police pressure landed twice, as the Sality botnet lost contact with its operator after 23 years and a Cyprus extradition put a Russian national in a California courtroom.
- Update · new A federal judge let Google keep its ad exchange, Chevron staked $7 billion on Venezuelan output, and fresh strikes on Iran lifted Brent back above $95.
- Update · new WTAE declared an Alert Day for triple-digit heat and damaging storms, while Pittsburgh won a $200,000 state grant for eastern-neighborhood fields, fountains, and trail planning.
- Update · new Gerry Dulac fielded reader questions on Aaron Rodgers and Mike McCarthy before the opener, while AS Monaco said it is still shopping Folarin Balogun after Everton balked.
Security
1. SonicWall SMA1000 Zero-Days Chained in Attacks
Latest developments: SonicWall shipped updates for two zero-days its own researchers William Perry and Adam Babis found in Secure Mobile Access 1000 appliances—CVE-2026-83548, a pre-authentication server-side request forgery in the Appliance Management Console rated a perfect 10.0, and CVE-2026-83549—and confirmed attackers already chain the pair for unauthenticated remote code execution, a finding Sophos corroborated.
read more
SMA 1000 appliances serve as SSL VPN gateways for medium and large enterprises, government agencies, and managed security service providers, putting the flaws directly on the network edge. Administrators should patch immediately and hunt for compromise on any internet-facing instance.
Sources: The Hacker News · BleepingComputer · Sophos News · Help Net Security · ↑ top
2. BGP Hijack Poisons Virtualizor and Softaculous Updates
Latest developments: Virtualizor disclosed that attackers hijacked Border Gateway Protocol routing for Softaculous's update servers, presented a technically valid TLS certificate for the domains, and delivered a booby-trapped Virtualizor package that planted persistent root access, with one hosting provider finding 5 of 34 checked hypervisors compromised in a window that opened August 28, 2026, at 20:57.
read more
Virtualizor is VPS management software from Softaculous that runs on hypervisors, and the routing attack turned its update channel into a malware delivery pipe; operators should audit hypervisors for compromise and rebuild affected hosts.
Sources: The Hacker News · SecurityWeek · Ars Technica Security · BleepingComputer · ↑ top
3. Sality Botnet Disrupted After 23 Years
Latest developments: The Justice Department announced that authorities in the United States, Bulgaria, Hungary, and Romania, working with CrowdStrike and the Shadowserver Foundation, executed a takedown on August 31, 2026, manipulating Sality's peer lists and seizing its payload URLs to sever more than 15,000 infected machines from their operator.
read more
Sality surfaced in 2003 as a file-infecting virus and grew into a peer-to-peer botnet that rented infected Windows machines for further malware delivery. Owners of affected computers should scan for and remove file-infector remnants, since the sinkhole stops new payloads without cleaning hosts.
Sources: The Record · The Hacker News · Help Net Security · BleepingComputer · ↑ top
4. AI-Speed Attacks Drive New Enterprise Safeguards
Latest developments: Anthropic unveiled Enterprise Frontier Safeguards, pairing zero data retention with automated misuse monitoring, Palo Alto Networks acquired the AI agent platform Console alongside 34% revenue growth, Sevii extended its detection-and-response platform to contain AI-driven attacks within minutes, and Unit 42 published its investigation of autonomous agents that breached an enterprise network in hours.
read more
As attackers wield AI agents to compromise networks at machine speed, security vendors are fielding autonomous defenses and misuse controls; enterprises should inventory AI usage and lock down agent credentials.
Sources: SecurityWeek · Unit 42 (Palo Alto) · SecurityWeek · SecurityWeek · ↑ top
5. Switchvox, Cleo, and GeoNetwork Flaws Open Servers
Latest developments: A threat actor began exploiting CVE-2026-9586, a critical unauthenticated SQL injection in Sangoma Switchvox SMB Edition 8.3 rated 9.3, to plant reverse shells on internet-exposed VoIP systems; a public exploit landed for a Cleo Harmony authentication bypass that abuses argument bearer manipulation; and GeoNetwork detailed two bugs that chain into unauthenticated remote code execution on the geospatial catalog behind many government geoportals.
read more
All three products sit on the internet edge at small businesses, file-transfer operations, and government agencies. Switchvox operators should hunt for compromise now, Cleo users should apply the vendor fix, and GeoNetwork administrators should move to version 4.4.12 or 4.2.17, released July 8, 2026.
Sources: The Hacker News · Help Net Security · SecurityWeek · The Hacker News · ↑ top
6. StreamRat and Malicious Packagist Packages Hit Mobile Users
Latest developments: ThreatFabric detailed StreamRat, a new Android banking trojan that fake TV-streaming ads on Meta pushed to Spanish speakers, reaching an estimated 570,950 European Union accounts and handing operators near-total device control, while researchers flagged 13 malicious Composer theme packages on Packagist that inject JavaScript into Vietnamese movie and comic streaming sites to deploy spyware that steals crypto wallet seeds from unpatched iPhones.
read more
Two malvertising and supply-chain campaigns took aim at phones, StreamRat at Spanish-speaking Android users and the Packagist packages at iOS visitors; users should install apps only from official stores and keep devices patched.
Sources: The Hacker News · The Hacker News · ↑ top
7. Russian National Charged Over Excel Malware Campaign
Latest developments: The Justice Department charged Searzhudin Tamirlanovich Aktulaev, 40, whom authorities extradited from Cyprus on August 28, 2026, with running roughly 255 fake accounts on a freelance platform that sent malware-laced Excel attachments to about 80,000 users in 2016 and 2017, deploying the TVRAT and DarkVNC malware.
read more
Aktulaev, whom authorities arrested in Cyprus in May 2025, faces charges from the U.S. Attorney's Office for the Northern District of California over a years-old phishing operation that targeted freelancers.
Sources: The Hacker News · BleepingComputer · ↑ top
8. Malicious Git Configs Hijack AI Coding Agents
Latest developments: Manifold Security disclosed eight flaws across seven command-line AI coding agents, among them Claude, Codex, and Cursor, in which a repository's own Git configuration names a command that the agent executes as the user, outside its sandbox and without an approval prompt, and four of the eight remained unpatched at publication.
read more
Cloning an attacker-controlled repository is enough to trigger the code execution, so the risk lands on any developer who points an agent at untrusted source. Teams should update agents where fixes exist and treat repository clones as untrusted input.
Sources: The Hacker News · ↑ top
9. Dropbox Accounts Hijacked Through Lenovo Flaw
Latest developments: Dropbox began warning some customers that an unauthorized party reached their accounts by abusing a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs.
read more
The account takeovers chained a weakness in Lenovo's identity system into Dropbox access; affected users should reset credentials and turn on multi-factor authentication.
Sources: BleepingComputer · ↑ top
10. Leaked Russian Cyber-Operations Training Materials
Latest developments: Leaked training records detailed a force-generation mechanism for Russian General Staff components including the GRU, the Main Operational Directorate, and the 8th Directorate, which handles protected communications and cryptography, and tied a 2024 Department No. 4 graduate, Aleksei Kondrashov, to Military Unit 74455, the Sandworm group behind destructive cyberattacks.
read more
The documents map how Russia recruits and trains military cyber operators and connect academy graduates to units known for sabotage, giving defenders insight into the adversary's pipeline.
Sources: Schneier on Security · ↑ top
Business and Politics
Google Keeps Its Ad Tech Business
Latest developments: A federal judge ruled September 2 that Google must end practices that depress ad rates for web publishers, and declined to force a divestiture of its ad exchange and related technology.
read more
The remedy ruling leaves intact the advertising-technology stack the Justice Department had asked a court to break up, sparing Alphabet the structural penalty that web publishers and rival ad-tech firms sought while imposing conduct limits on how Google prices and routes display advertising.
Sources: WSJ US Business · ↑ top
Chevron Commits $7 Billion to Venezuela
Latest developments: Chevron pledged September 2 to invest $7 billion to double output from its Venezuelan joint ventures, with executives from several other oil-and-gas companies expected to sign production deals in Caracas later the same day.
read more
The commitment turns President Trump's Venezuela pact into hard capital spending, putting the largest American oil producer at the center of a White House push to lift Venezuelan production at a moment when U.S.-Iran hostilities have driven Brent crude above $95 a barrel.
Sources: FT Home · WSJ US Business · ↑ top
Bond Rout Pauses as Oil Retreats from $95
Latest developments: Fresh U.S. strikes on Iran overnight drove Treasury yields to the day's highs and lifted Brent back above $95 a barrel after government data showed U.S. commercial crude stocks fell 4.5 million barrels last week against an expected 300,000-barrel draw; the Treasury selloff then paused and U.S. stocks rose Wednesday afternoon, September 2.
read more
Renewed U.S.-Iran fighting pushed crude toward $95 a barrel and European natural gas to its highest level since the end of 2022, lifting the 10-year Bund to a 2011 high, gilts to a 2007 high, Japan's 10-year yield to a 30-year peak, and U.S. 10-year borrowing costs to their highest since 2023, stoking inflation and rate-hike fears before markets partly steadied.
Sources: WSJ Markets · WSJ Markets · WSJ US Business · FT World · WSJ Markets · ↑ top
Pittsburgh
Weather
Today: Scattered Showers And Thunderstorms, high 92F.
Tonight: Scattered Showers And Thunderstorms then Chance Showers And Thunderstorms, low 73F.
Thursday: Chance Showers And Thunderstorms, high 92F.
Business
WVU Medicine Clears Path for Independence Health Deal
Latest developments: West Virginia University Health System accepted the conditions Pennsylvania Attorney General Dave Sunday set on its acquisition of Independence Health System, TribLive reported September 2, advancing a deal that had stalled over the future of the hospitals involved.
read more
Under the settlement, WVU Medicine must keep every newly acquired Western Pennsylvania hospital open for at least five years, a commitment aimed at protecting communities served by Independence Health System, the region's Westmoreland- and Butler-area hospital operator.
Pittsburgh International Airport Earns LEED Gold
Latest developments: The U.S. Green Building Council awarded LEED Gold certification this week to Pittsburgh International Airport's new terminal and its customer service building, and the airport's new Terminal Garage took Parksmart Gold certification.
read more
The certifications validate the sustainability engineering built into the terminal that opened as the centerpiece of the airport's multibillion-dollar modernization in Findlay Township, covering energy, water, and materials performance across the terminal, the customer service building, and the parking garage.
Sources: Pittsburgh Magazine · ↑ top
U.S.-Canada Trade War Threatens Car Prices
Latest developments: KDKA reported September 2 that the newly escalated trade war between the United States and Canada could raise new- and used-car prices across several brands, with Kelley Blue Book advising Pittsburgh-area buyers to move soon.
read more
Tariffs tied to the U.S.-Canada dispute threaten to push up vehicle costs for local buyers, adding to a car market where new and used prices have already climbed for months.
Dick's Diner Marks 80 Years in Murrysville
Latest developments: The Post-Gazette profiled September 2 Dick's Diner in Murrysville as the Westmoreland County restaurant reaches its 80th year serving comfort food.
read more
Dick's Diner, a fixture along Route 22 in Murrysville, has dished up breakfast and comfort food for eight decades, drawing regulars who describe the place as coming home.
Sources: Pittsburgh Post-Gazette · ↑ top
Around Town
Heat and Severe Storms Hit Western Pennsylvania
Latest developments: WTAE declared Wednesday, September 2, an Alert Day, with the heat index climbing past 100 degrees before thunderstorms carrying damaging winds and large hail move across the region; KDKA meteorologist Mary Ours expects strong storms again Thursday.
read more
The storms land on the third day of the Allegheny County code red heat advisory that runs September 1 through 3, the same stretch that pushed 35 Pittsburgh Public Schools buildings to remote learning and extended city rec-center hours.
Pittsburgh Wins $200,000 State Grant for Parks
Latest developments: The City of Pittsburgh received a $200,000 state grant, WPXI reported September 2, to pay for athletic-field upgrades, new water fountains, and trail-connectivity planning across several of the city's eastern neighborhoods.
read more
The award funds small-scale recreation work city budget officials would otherwise struggle to cover as Pittsburgh stares at a 2026 deficit its budget office now puts at $30 million.
Penn State Fraternity Cocaine Ring in Court
Latest developments: A judge granted bail September 2 to Agostino Abbatiello, the alleged ringleader held since he surrendered last month, and a former Penn State student testified that Abbatiello called himself 'the godfather' and that cocaine sat in plain view in a fraternity room.
read more
Prosecutors charged fourteen people, among them Agostino Abbatiello, Thomas Robinson, Paul Robinson, Muhammad Huraibi, Robert Zanolla, and Seth Beardsley, over a cocaine operation run out of two Penn State University fraternities; preliminary hearings are running at the Centre County Courthouse in Bellefonte, and one defendant's father, a prominent Pittsburgh attorney, also faces charges.
Police Surveillance Tools Draw Privacy Pushback
Latest developments: KDKA reported September 2 that as departments across the region lean on Flock cameras, drones, and license-plate readers, civil-liberties critics warn the tools reach too far into private life.
read more
Police credit automated license-plate readers with identifying three Texas men who robbed Wendy's restaurants in Monroeville, Penn Hills, Scott Township, and Peters Township along with a McDonald's; critics counter that the growing surveillance network can violate privacy and civil rights.
Beaver County Group Recycles Bikes
Latest developments: The Post-Gazette profiled September 2 Communicycle, a Beaver County group that repairs and recycles bicycles for children and adults.
read more
Communicycle collects, fixes, and redistributes used bikes across Beaver County, keeping serviceable bicycles out of landfills and putting them under riders who need them.
Sources: Pittsburgh Post-Gazette · ↑ top
Events
Rock Against Cancer Returns to Pine
Latest developments: TribLive announced September 2 the lineup for this year's Rock Against Cancer in Pine Township, a benefit concert for the Pittsburgh nonprofit Cancer Bridges.
read more
The bill pairs Genevieve Carlson & Friends and the three-part harmonies of Buckingham Prep with Stealing Time, a cover band devoted to Bruce Springsteen, Tom Petty, and Steely Dan, and the Southern-rock and blues act The Hip Waders; proceeds go to Cancer Bridges, which supports cancer patients and their families.
Music on the Mezz Returns to Iron City Distillery
Latest developments: Iron City Distillery announced its 2026 Music on the Mezz concert series September 2, with two Pittsburgh acts opening and closing the run.
read more
Music on the Mezz brings live music to the mezzanine at Iron City Distillery, the whiskey maker that revived the Iron City name, and the 2026 edition bookends its schedule with a pair of well-known Pittsburgh bands.
Merged Theater Names Itself Confluence
Latest developments: The merger of Pittsburgh Public Theater and Pittsburgh CLO now has a name, Confluence Theater of Pittsburgh, and a plan for its combined operations, the Post-Gazette reported August 31.
read more
Confluence Theater of Pittsburgh unites the city's flagship nonprofit drama company with its big musical-theater producer, consolidating two of the region's largest stage organizations under one banner and one season.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Sports
Pirates (68-71)
Tue Sep 1 · Giants 12 · Pirates 13 · Final
Up Next · Giants @ Pirates · Wed Sep 2, 6:40 PM
Steelers (0-0, T-1st in AFC North)
Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM
Around the Teams
Rudolph and Wilson Swap Camp Stories on Not Just Football
Latest developments: Cam Heyward's September 2 training-camp episode gathered wide receiver Ben Skowronek, quarterback Mason Rudolph, and linebackers Cole Holcomb and Payton Wilson for a double round of camp stories.
read more
Heyward and co-host Hayden Heyward run new Not Just Football training-camp episodes every Monday, Wednesday, and Friday, working through the Steelers roster position group by position group; this installment paired Skowronek and Rudolph with the inside linebackers.
Sources: Not Just Football with Cam Heyward · ↑ top
Dulac Fields Questions on Rodgers and McCarthy
Latest developments: Post-Gazette beat writer Gerry Dulac held his Steelers chat September 2, taking reader questions on quarterback Aaron Rodgers and head coach Mike McCarthy less than two weeks before the opener.
read more
Dulac's weekly chat is the Post-Gazette's main channel for Steelers roster and scheme questions, and this one landed the day after McCarthy met the media and general manager Omar Khan explained why all 10 of the team's draft picks made the 53-man roster.
Sources: Post-Gazette Steelers · ↑ top
Edge Room Talks Contracts on Not Just Football
Latest developments: On Cam Heyward's Not Just Football training-camp episode, outside linebackers T.J. Watt, Alex Highsmith, Nick Herbig, and Jack Sawyer broke down their offseason contracts and life under the Steelers' new defensive system.
read more
Heyward and his co-host gathered the Steelers' edge crew—Watt, Highsmith, Herbig, and Sawyer—for a camp episode covering the group's deals, the scheme change on defense, and a round of edge-room superlatives.
Sources: Not Just Football with Cam Heyward · ↑ top
Hiles Calls for Pirates to Clean House
Latest developments: Post-Gazette writer Noah Hiles argued August 30 that the Pirates should overhaul the front office, starting by firing general manager Ben Cherington.
read more
With the Pirates fading from contention, Hiles made the case in the Post-Gazette that the franchise needs sweeping change at the top, naming general manager Ben Cherington and team president Travis Williams.
Sources: Post-Gazette Pirates · ↑ top
Team USA
Monaco Still Trying to Move Balogun
Latest developments: AS Monaco's chief executive said September 2 that the club continues to shop Folarin Balogun's contract after his $45 million transfer to Everton collapsed, leaving the U.S. forward weighing possible moves to Turkey or the Saudi Pro League this week.
read more
Balogun, a striker in the U.S. men's national team pool with the World Cup on home soil approaching, stayed at Monaco when the Everton deal died on deadline day, and the club now wants his wages off its books through one of the transfer windows still open outside the major European leagues.
Sources: ESPN Soccer · ↑ top
Lawson Calls the Women's World Cup the Toughest Yet
Latest developments: U.S. coach Kara Lawson said September 1 that this edition of the FIBA Women's World Cup is the most challenging field she has seen.
read more
Lawson takes the U.S. into the tournament without A'ja Wilson and Kelsey Plum, both out for health reasons, with Kiki Iriafen and Sonia Citron called in as replacements; Plum will also miss the rest of the 2026 WNBA season for the Phoenix Mercury.
Sources: ESPN Olympics · ↑ top
USMNT Summer Transfer Window Closes Flat
Latest developments: With the window shut, ESPN's Jeff Carlisle recapped September 2 that Folarin Balogun's deadline-day U-turn killed his Everton move and left him at AS Monaco, while Gio Reyna's switch to Strasbourg stands as a last chance to revive his career.
read more
The 2026 summer window closed on an underwhelming stretch for U.S. men's national team players: Balogun stayed at Monaco after scrapping a £40 million move to Everton, and Reyna joined Strasbourg hoping to rebuild his form ahead of the World Cup the United States co-hosts.
Sources: ESPN Soccer · ↑ top
Reading
- Stratechery — Fable 5.1, Enterprise Frontier Safeguards. Ben Thompson covers the release of Fable 5.1, noting that its maker fully scrapped the contested data-retention policy in the interim and arguing that heavier caching amounts to a win-win for the company and its customers.
- Ed Zitron — Hyperscale Normalization. In his latest premium newsletter, Zitron scrutinizes how the hyperscalers' enormous AI infrastructure spending has come to be treated as normal, pressing on the underlying economics.
- Cal Newport — Are We at War with AI Agent "Civilizations"?. Newport returns to the July OpenAI hacking episode, weighing OpenAI's newly released details and the framing of autonomous AI agents as hostile 'civilizations.'
Markets
S&P 500 7,680.32 ▲ +0.1% Dow 53,312.70 ▲ +0.1% Nasdaq 26,258.70 ▲ +0.3% WTI crude 85.03 ▼ -0.7% EUR/USD 1.1639 ▼ -0.2% GBP/USD 1.3586 ▼ -0.2% USD/JPY 159.53 ▲ +0.4%
Feed Health
Security: 24 of 24 feeds loaded, 70 items in the 24-hour window. No recent items: Securelist (Kaspersky), Google Online Security Blog, Cisco Talos, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.
Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh.
Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.
Events: 4 of 4 feeds loaded, 6 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment.
Sports media: 6 of 6 feeds loaded, 29 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).
Team USA: 3 of 3 feeds loaded, 29 items in the 72-hour window.
Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.
Markets (Yahoo Finance): 7 of 7 rows
Weather (NWS): 3 forecast periods
Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports
Summaries: 3 model call(s) served by claude-opus-5 (313s of model time; $1.67 at API list price).