================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, September 3, 2026 - 7:05 AM EDT ================================================================ A researcher published working exploit code for a privilege-escalation zero-day in CrowdStrike Falcon, and Citizen Lab confirmed an iMessage zero-click dropped NSO Group's Pegasus onto the iPhone of a Serbian student protest organizer. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Mass identity surveillance widened as Flock and Axon cameras scan crowds by typed description, IDScan.net leaked 153 million license images, and Pegasus infected a Serbian activist's iPhone. see: Flock and Axon Expand AI Policing Cameras; IDScan.net Tied to 153 Million License Scans; Pegasus Zero-Click Infects Serbian Activist * [TREND] Unit 42 found intruders piping stolen Latin American data through commercial AI services, while Newport questions whether autonomous agent systems really amount to hostile civilizations. see: Attackers Wield AI Against Latin American Targets; Are We at War with AI Agent “Civilizations”? * [UPDATE (new)] Chaotic Eclipse published FalconFlank, a privilege-escalation zero-day in CrowdStrike Falcon Sensor, and a California grand jury indicted Aktulaev over malware pushed to roughly 80,000 freelance-platform users. see: FalconFlank Zero-Day Hits CrowdStrike Falcon; Russian Malware Indictment and Pro-Ukraine Ransomware * [UPDATE (new)] Pittsburgh transit and roads strain as PRT's bus refresh hinges on Harrisburg, oversized loads close Route 66, and South Franklin Township nears a second day without water. see: PRT Bus Refresh Hinges on Harrisburg; Heavy Loads to Slow Routes 66 and 22; South Franklin Township Loses Water * [UPDATE (updated)] Ben Thompson reads Fable 5.1 and the scrapped enterprise data-retention policy as a win for caching, while Zitron warns hyperscaler AI spending is being normalized despite thin returns. see: Fable 5.1, Enterprise Frontier Safeguards; Hyperscale Normalization SECURITY ---------------------------------------------------------------- 1. RUSSIAN MALWARE INDICTMENT AND PRO-UKRAINE RANSOMWARE Ransomware and Cybercrime · [ransomware, law-enforcement, hacktivism] Latest developments: A federal grand jury in California indicted Searzhudin Tamirlanovich Aktulaev, 40, a Russian national who since at least June 2016 used fake accounts on a freelance employment platform to push malware to roughly 80,000 users; police in Cyprus arrested him in May 2025, he arrived in the United States under extradition in August 2026, and he appeared in San Francisco federal court on August 31, 2026, facing up to 20 years on conspiracy, transmission of malicious code, and aggravated identity theft counts. Separately, the Russian security firm F6 described VantaCore, a new pro-Ukraine group running custom ransomware against at least seven Russian companies. Aktulaev's scheme baited freelancers with job files that carried the malware. Hackers also breached payment accounts behind two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited card data. - Help Net Security: https://www.helpnetsecurity.com/2026/09/03/russian-national-indicted-freelance-platform-malware/ - The Record: https://therecord.media/russian-national-facing-20-years-malware-campaign - The Record: https://therecord.media/new-pro-ukraine-hacker-group-custom-ransomware-russia - The Record: https://therecord.media/hackers-russia-fundraisers-ukraine 2. FLOCK AND AXON EXPAND AI POLICING CAMERAS AI Security · [surveillance, privacy, ai] Latest developments: Wired rebuilt Flock Safety's newest search tool from the code the company sends to a police officer's browser and found AI that watches across many cameras at once for anyone matching a typed description, while 404 Media reported that police in Texas used AI to draft a report about a Flock search for a woman who had an abortion and that officers on an Axon webinar asked the company to restyle its Outpost camera so it stops resembling a Flock unit that vandals destroy. Flock Safety and Axon sell license-plate readers and camera networks to thousands of American police departments, and the new layer lets an officer query them in plain language. The Texas case shows the tools reaching reproductive-health investigations within months of deployment. - Wired Security: https://www.wired.com/story/flock-ai-search-user-interface/ - 404 Media: https://www.404media.co/texas-police-used-ai-to-write-report-about-using-flock-to-search-for-woman-who-had-abortion/ - 404 Media: https://www.404media.co/cops-are-asking-axon-to-make-their-cameras-look-different-from-flock-so-people-dont-destroy-them/ 3. FALCONFLANK ZERO-DAY HITS CROWDSTRIKE FALCON Vulnerabilities and Exploits · [zero-day, patch, endpoint] Latest developments: The researcher known as Chaotic Eclipse, also called Nightmare Eclipse, published a proof-of-concept for FalconFlank, a privilege-escalation zero-day that abuses the malicious-macro remediation routine in the CrowdStrike Falcon Sensor, the same researcher whose HardBreacher exploit forced a Kaspersky patch on August 31, 2026; Cisco separately disclosed that S/MIME flaws in Secure Email remain unpatched and shipped fixes for critical IOS XR and Nexus bugs. FalconFlank turns a defensive feature of the Falcon endpoint agent into a path from a local account to full control of the host. The unpatched Cisco Secure Email defects can expose the contents of encrypted mail, while the new IOS XR and Nexus patches close remote code execution and authentication bypass; apply the Cisco updates now and watch for a CrowdStrike sensor release. - The Hacker News: https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html - SecurityWeek: https://www.securityweek.com/cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities/ 4. IDSCAN.NET TIED TO 153 MILLION LICENSE SCANS Data Breaches · [breach, identity-theft] Latest developments: SecurityWeek named IDScan.net, the Louisiana identity-verification vendor, as the likely source of the more than 153 million United States and Canadian driver's license images now for sale on a dark-web service, and an Ars Technica reporter found their own license in the trove within hours of renting a car. Businesses scan customer licenses through IDScan.net at rental counters, bars, and dispensaries, and the scans include the photograph and every field on the card. The FBI's New Orleans field office has opened an investigation; consumers should freeze credit files and treat license-based identity checks as compromised. - SecurityWeek: https://www.securityweek.com/153-million-driver-license-images-offered-on-dark-web/ - Ars Technica Security: https://arstechnica.com/security/2026/09/my-drivers-license-is-one-of-153-million-for-sale-on-a-new-dark-website/ 5. ATTACKERS WIELD AI AGAINST LATIN AMERICAN TARGETS AI Security · [ai, exfiltration, threat-intel] Latest developments: Palo Alto Networks' Unit 42 documented an ongoing campaign against organizations in Latin America in which the operators lean on commercial AI tools to sort and exfiltrate stolen data, and left operational-security errors that let defenders map and disrupt the infrastructure. The crew's AI usage leaves distinctive outbound traffic and artifacts that defenders can hunt. Security teams should log and inspect connections from servers and workstations to AI service endpoints, then treat unexplained ones as exfiltration. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/ - Dark Reading: https://www.darkreading.com/threat-intelligence/ai-gives-cybercriminals-dangerous-time-advantage 6. PEGASUS ZERO-CLICK INFECTS SERBIAN ACTIVIST Nation-State Activity · [spyware, zero-click, surveillance] Latest developments: Citizen Lab, working with Belgrade's SHARE Foundation, confirmed that an iMessage zero-click exploit planted NSO Group's Pegasus spyware on the iPhone of a member of Serbia's student protest movement, and reported high-confidence forensic indicators of the infection. Pegasus is commercial spyware NSO Group sells to government clients; a zero-click chain takes the phone without the owner touching anything. Serbian civil-society staff and organizers facing this threat should turn on Apple's Lockdown Mode and seek forensic review of their devices. - The Hacker News: https://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Yen Surges as Japan Rate Bets Build Latest developments: The yen jumped past 157 to the dollar overnight, roughly 2% in two days and a one-month high, as traders bet the Bank of Japan raises rates and watched for another round of intervention; the DXY dollar index slid to a six-day low and expectations of a September Federal Reserve hike retreated. Japan's currency sits at the center of the global bond rout, and Japanese data released August 28 confirmed that Tokyo and Washington spent a record $98.7 billion propping up the yen last month. Treasury yields steadied, European equities moved sideways, and oil slipped in early European trade, easing the inflation channel that had driven yields to session highs after the U.S. strikes on Iran. - FT World: https://www.ft.com/content/22abbb77-1344-4871-9692-97a779b1ba77?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/stocks/bond-selloff-pauses-stocks-tread-water-as-traders-watch-for-yen-intervention-25a7e983?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/currencies/yen-consolidates-may-be-supported-by-lingering-risks-of-fx-intervention-45c3cccb?mod=rss_markets_main * Iran War Stretches U.S. Forces Latest developments: The Wall Street Journal reported September 3 that the Pentagon is lengthening Middle East deployments as the war with Iran drags on, and the carrier USS Abraham Lincoln put into a Thai resort port after nine months at sea. The Lincoln's deployment has become the emblem of the strain the Iran war puts on American naval and air rotations, which now run well past normal lengths. Oil prices fell in early European trading even so, with traders discounting the risk that the conflict lasts much longer. - WSJ US Business: https://www.wsj.com/business/autos/longer-middle-east-deployments-strain-u-s-forces-as-iran-conflict-drags-on-f36cfa16?mod=pls_whats_news_us_business_f - FT World: https://www.ft.com/content/bad69b88-da02-4859-8190-37c55039be75?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-futures-fall-on-likely-technical-correction-cac84e35?mod=rss_markets_main * Saudi Deal Opens Enrichment Path Latest developments: The Wall Street Journal reported September 3 that the nuclear agreement under negotiation with Saudi Arabia could let the kingdom enrich uranium to 20%. Enrichment at that level would carry Saudi Arabia far up the path toward weapons-relevant material and stiffens opposition in Congress, which must weigh the deal while American forces fight Iran over its own nuclear program. - WSJ World News: https://www.wsj.com/world/middle-east/saudi-nuclear-agreement-could-open-a-path-to-20-enrichment-21806868?mod=rss_worldnews PITTSBURGH ---------------------------------------------------------------- Weather: Today: Chance Showers And Thunderstorms, high 92F. Tonight: Chance Showers And Thunderstorms, low 70F. Friday: Showers And Thunderstorms, high 87F. Business: * Nonprofits and Pittsburgh's Economy Latest developments: Post-Gazette columnist Brandon McGinley asked September 3 whether Pittsburgh's nonprofit sector can carry the city's economic revival, working through the record of New Sun Rising and Riverwise. McGinley's column weighs how much neighborhood revitalization Pittsburgh can buy through nonprofit intermediaries rather than private capital, a question sharpened by the $30 million deficit city budget officials now project for 2026 and by Mayor Corey O'Connor's warning that the finances run worse than known. - Pittsburgh Post-Gazette: https://www.post-gazette.com/local/city/2026/09/03/nonprofit-economy-new-sun-rising-riverwise-wolovich/stories/202609030002 * Second Story Spirits Comes to Lawrenceville Latest developments: The Post-Gazette reported September 3 that Second Story Spirits will bring its craft cordials and a new bar to Lawrenceville. Second Story Spirits makes craft cordials and adds a drinking room to Lawrenceville, one more distilling operation in a neighborhood that has absorbed much of Pittsburgh's small-batch beverage business. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/09/03/second-story-spirits-lawrenceville/stories/202608270050 * WPGH Adds a Daily Sports Show Latest developments: TribLive's TV Talk reported September 3 that WPGH will launch a daily local sports program this fall and WTAE will add 'Family Feud' to its daytime lineup. Those two moves stand out in an otherwise flat fall for Pittsburgh broadcast daytime, where local commercial stations kept their schedules largely intact and national syndicators launched few new series. - TribLive: https://triblive.com/aande/movies-tv/tv-talk-daily-sports-show-on-wpgh-family-feud-on-wtae-highlight-fall-daytime-tv/ Around town: * PRT Bus Refresh Hinges on Harrisburg Latest developments: PublicSource reported September 3 that Pittsburgh Regional Transit's coming bus route refresh could last only until 2028, when service cuts arrive absent more state money. PRT is redrawing its bus network across Allegheny County while staring at a funding cliff. Board member state Senator Lindsey Williams, a West View Democrat, said the system cannot run on fare revenue alone and needs investment from Harrisburg, which has yet to deliver a long-term transit funding fix. - PublicSource: https://www.publicsource.org/prt-2028-service-cuts-funding-crisis/ * Heavy Loads to Slow Routes 66 and 22 Latest developments: TribLive reported September 3 that oversized equipment deliveries will bring rolling closures to Route 66 and Route 22 in Armstrong and Westmoreland counties over the next few months. Drivers on the two corridors, among the busiest in the Alle-Kiski Valley and eastern Westmoreland County, should plan for sporadic and lengthy rolling delays as the loads move through. - TribLive: https://triblive.com/local/valley-news-dispatch/massive-equipment-deliveries-to-bring-rolling-closures-to-heavily-traveled-routes-in-armstrong-westmoreland-counties/ * South Franklin Township Loses Water Latest developments: KDKA reported late September 2 that a water main break has left residents of South Franklin Township, Washington County, without water for nearly 24 hours. The outage hit during a stretch of dangerous heat, with the National Weather Service and county officials warning of heat indexes near 100 degrees and another round of severe storms Thursday, September 3. - KDKA: https://www.cbsnews.com/pittsburgh/news/south-franklin-township-washington-county-no-water/ - WTAE: https://www.wtae.com/article/alert-day-another-round-of-storms-dangerous-heat-humidity/73601595 Events: * City Paper's Week Ahead Latest developments: Pittsburgh City Paper published its top events for Thursday, September 3, through Wednesday, September 9, on September 3. The week's picks include a day of punk bands paired with painting, a documentary with a devilish subject, and a reimagined Shakespeare play staged outdoors in a park. City Paper lists dates, venues, and admission for each entry. - Pittsburgh City Paper: https://www.pghcitypaper.com/listings/this-weeks-top-events/pittsburghs-top-events-thu-sept-3-wed-sept-9/ * Rib Fest and a Labor Day Parade Latest developments: The Post-Gazette published its guide September 3 to the long Labor Day weekend, September 5 through Monday, September 7, leading with Rib Fest and a Labor Day parade. Labor Day falls on Monday, September 7, and the Post-Gazette's roundup collects the weekend's festivals, the parade, and other outings around Pittsburgh with times and locations for each. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/recreation/2026/09/03/things-to-do-this-weekend-pittsburgh-10/stories/202609020045 * Lighthouse Arts Anchors a Jazz Fest Latest developments: Pittsburgh City Paper profiled the jazz organization Lighthouse Arts on September 3, ahead of its members performing at Golden Age Beer Company's coming Jazz Fest. Lighthouse Arts works to keep jazz playing in Pittsburgh, and its musicians will fill out the lineup at Jazz Fest at Golden Age Beer Company. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/music/lighthouse-arts-is-a-beacon-for-jazz-in-pittsburgh/ SPORTS ---------------------------------------------------------------- Pirates (68-72) Wed Sep 2 · Giants 5 · Pirates 4 · Final (10) https://plaintextsports.com/mlb/2026-09-02/sf-pit Up Next · Giants @ Pirates · Thu Sep 3, 12:35 PM https://plaintextsports.com/mlb/2026-09-03/sf-pit Steelers (0-0, T-1st in AFC North) Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM https://plaintextsports.com/nfl/2026/week1/atl-pit Around the Teams: * Porter Standoff Dominates Steelers Talk Latest developments: On SNR Drive for September 2, Matt Williamson and Wes Uhler ran the latest on cornerback Joey Porter Jr.'s practice ramp-up and contract impasse, then brought in The Athletic's Mike DeFabo to read the Steelers heading into Week 1 and worked through the preseason power rankings. Porter returned to practice September 1 while negotiating a new deal and has declined to commit to the opener, roughly a week and a half away. The Steelers' own show carries the day-to-day churn, with quarterback Aaron Rodgers and rookies Max Iheanachor and Robert Spears-Jennings meeting reporters after the September 2 practice. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=sD7edrB7P1Q - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=htApmH5JY58 Team USA: * Glenn and Frech Join 'Dancing With the Stars' Latest developments: ESPN reported September 2 that the new cast of 'Dancing with the Stars' includes American figure skater Amber Glenn, Paralympic gold medalist Ezra Frech, and Savannah Bananas player Jackson Olson. Athletes have won 12 seasons of the show, and Olympic gymnast Jordan Chiles finished third in 2025. Frech, a sprinter and high jumper, won gold at the Paris Paralympics; Glenn is a U.S. national champion in singles skating. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49804369/dancing-stars-dwts-season-35-amber-glenn-ezra-frech-jackson-olson-savannah-bananas - ESPN Olympics: https://www.espn.com/olympics/story/_/id/41069925/which-olympians-competed-dancing-stars * NWSL Takes a Cut of Player Deals Latest developments: ESPN reported September 3 that the National Women's Soccer League now claims a share of the money players earn from shoe and other brand sponsorships, and fines players who decline to pay. The rule sets the league against its own players and the footwear companies that sign them, many of them U.S. women's national team regulars whose individual endorsements run separate from their club contracts. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49788974/nwsl-controversy-players-fined-cleat-sponsorships-brand-deals-rule-money READING ---------------------------------------------------------------- * Stratechery -- Fable 5.1, Enterprise Frontier Safeguards Ben Thompson covers the release of Fable 5.1 and the outright removal of the data retention policy that enterprise customers objected to, and argues that heavier caching benefits both the model provider and its customers. https://stratechery.com/2026/fable-5-1-enterprise-frontier-safeguards/ * Ed Zitron -- Hyperscale Normalization Zitron argues that the market has come to treat the hyperscalers' enormous AI infrastructure spending as ordinary business, and that normalizing those numbers hides how weak the underlying returns remain. https://www.wheresyoured.at/hyperscale-normalization/ * Cal Newport -- Are We at War with AI Agent “Civilizations”? Newport returns to the July hacking attack on OpenAI after the company published more detail, and questions the framing that autonomous agent systems now constitute adversarial civilizations. https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,678.18 ▲ +0.1% Dow 53,209.61 ▼ -0.2% Nasdaq 26,272.01 ▲ +0.5% WTI crude 86.78 ▲ +2.2% EUR/USD 1.1623 ▼ -0.5% GBP/USD 1.3560 ▼ -0.6% USD/JPY 159.73 ▲ +0.5% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 61 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Cisco Talos, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 10 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 35 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (349s of model time; $1.61 at API list price). ================================================================ Generated 2026-09-03 07:05 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================