A breach of Thomson Reuters' C-Track court software exposed sealed records and Social Security numbers across a dozen states and Canada, while an extortion crew dumped roughly 550 gigabytes on 8.8 million Manchester Airports Group customers after the company refused to pay.
Emerging Trends and Key Updates
- Trend Palo Alto's Unit 42 says operators used commercial AI tools to triage and exfiltrate data from Latin American targets, while Newport questions calling agent systems adversarial civilizations.
- Trend Attackers keep abusing trusted code, from Microsoft's signed node.exe in the Spring Ring Teams campaign to CrowdStrike Falcon's macro-remediation routine and Elementor Pro on WordPress sites.
- Trend Vendors keep leaking the records they hold, with Thomson Reuters' C-Track spilling sealed court files for a dozen states and IDScan.net tied to 153 million license scans.
- Update · new Manchester Airports Group's extortionists dumped roughly 550 gigabytes covering 8.8 million people after the operator refused to pay, claiming entry through exposed administrator keys.
- Trend Surveillance tooling widened as Wired reverse-engineered Flock Safety's cross-camera AI person search and Citizen Lab confirmed Pegasus landed on a Serbian student activist's iPhone.
- Update · new Locally, Murrysville paused its data center zoning ordinance, Bethel Park opened a $133 million elementary school, and Highmark money is buying 13 Pittsburgh fire trucks.
Security
1. Russian Malware Indictment and Pro-Ukraine Ransomware
Latest developments: A federal grand jury in California indicted Searzhudin Tamirlanovich Aktulaev, 40, a Russian national who since at least June 2016 used fake accounts on a freelance employment platform to push malware to roughly 80,000 users; police in Cyprus arrested him in May 2025, he arrived in the United States under extradition in August 2026, and he appeared in San Francisco federal court on August 31, 2026, facing up to 20 years on conspiracy, transmission of malicious code, and aggravated identity theft counts. Separately, the Russian security firm F6 described VantaCore, a new pro-Ukraine group running custom ransomware against at least seven Russian companies.
read more
Aktulaev's scheme baited freelancers with job files that carried the malware. Hackers also breached payment accounts behind two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited card data.
Sources: Help Net Security · The Record · The Record · The Record · ↑ top
2. Flock and Axon Expand AI Policing Cameras
Latest developments: Wired rebuilt Flock Safety's newest search tool from the code the company sends to a police officer's browser and found AI that watches across many cameras at once for anyone matching a typed description; 404 Media reported that police in Texas used AI to draft a report about a Flock search for a woman who had an abortion, that a Flock webinar coached officers on surveilling No Kings protests, parades, fireworks shows, and bike races, and that officers on an Axon webinar asked the company to restyle its Outpost camera so it stops resembling a Flock unit that vandals destroy.
read more
Flock Safety and Axon sell license-plate readers and camera networks to thousands of American police departments, and the new layer lets an officer query them in plain language. The Texas case shows the tools reaching reproductive-health investigations within months of deployment.
Sources: Wired Security · 404 Media · 404 Media · 404 Media · ↑ top
3. Thomson Reuters C-Track Breach Exposes Court Records
Latest developments: Thomson Reuters said an unauthorized party took files in March 2026 from C-Track, the court case management platform its West Publishing Corporation unit sells, and that West Publishing found the activity on June 30, 2026; the exposure covers courts in 11 to 12 U.S. states, the U.S. Virgin Islands, and Ontario, Canada, and a subset of the records carries names and Social Security numbers alongside sealed proceedings.
read more
C-Track handles case management for courts, and the stolen data reaches sealed matters and personal information well beyond routine public dockets. Thomson Reuters posted separate notification pages for affected individuals in the United States and Canada and is contacting affected courts directly.
Sources: Help Net Security · The Record · The Hacker News · ↑ top
4. WordPress Plugin Flaws Draw Active Exploitation
Latest developments: Attackers began exploiting CVE-2026-32475, a recently patched critical flaw in the Elementor Pro plugin, to plant webshells and run arbitrary commands on WordPress hosts, while researchers assigned CVE-2026-19949 to the unauthenticated SQL injection in the All-in-One WP Migration and Backup plugin and put the exposed population above 3 million sites.
read more
Both plugins sit on millions of WordPress installations, and either bug hands an unauthenticated attacker remote code execution on the web server. Site owners should update Elementor Pro and All-in-One WP Migration and Backup now, then hunt for unfamiliar PHP files and new administrator accounts.
Sources: BleepingComputer · SecurityWeek · BleepingComputer · ↑ top
5. FalconFlank Zero-Day Hits CrowdStrike Falcon
Latest developments: The researcher known as Chaotic Eclipse, also called Nightmare Eclipse, published a proof-of-concept for FalconFlank, a privilege-escalation zero-day that abuses the malicious-macro remediation routine in the CrowdStrike Falcon Sensor, the same researcher whose HardBreacher exploit forced a Kaspersky patch on August 31, 2026; Cisco meanwhile patched CVE-2026-20212, a CVSS 9.8 bug in 10 Silicon One-based Nexus 9000 switches that gives an unauthenticated remote attacker root code execution, shipped an IOS XR hardening release bundling seven CVEs with no workaround for any version, and left publicly disclosed S/MIME flaws in Secure Email unpatched.
read more
FalconFlank turns a defensive feature of the Falcon endpoint agent into a path from a local account to full control of the host. The unpatched Cisco Secure Email defects can expose the contents of encrypted mail; apply the Nexus and IOS XR updates now and watch for a CrowdStrike sensor release.
Sources: The Hacker News · SecurityWeek · The Hacker News · ↑ top
6. Microsoft Details Spring Ring Teams Impersonation, Node.js Abused as Loader
Latest developments: Microsoft Threat Intelligence published its own technical writeup of a human-operated intrusion campaign, matching the Spring Ring operation Unit 42 first disclosed, that abuses Microsoft Teams external collaboration to impersonate IT support and deploy a Node.js-based implant for lateral movement, while Symantec separately documented a distinct campaign running since February 2026 that abuses the trusted node.exe runtime to deliver payloads against government departments, technology companies, and hotels.
read more
Both campaigns exploit the fact that node.exe carries Microsoft's own code-signing trust, letting malicious JavaScript payloads slip past defenses tuned to flag unfamiliar executables. Organizations should restrict external Teams collaboration requests and treat unexpected node.exe network activity as suspicious.
Sources: Microsoft Security Blog · Dark Reading · The Hacker News · ↑ top
7. Attackers Wield AI Against Latin American Targets
Latest developments: Palo Alto Networks' Unit 42 documented an ongoing campaign against organizations in Latin America in which the operators lean on commercial AI tools to sort and exfiltrate stolen data, and left operational-security errors that let defenders map and disrupt the infrastructure; Dark Reading separately reported that frontier AI agents drove one large-scale breach from start to finish in 10 hours, work that took human crews about two weeks.
read more
The crew's AI usage leaves distinctive outbound traffic and artifacts that defenders can hunt. Security teams should log and inspect connections from servers and workstations to AI service endpoints, then treat unexplained ones as exfiltration.
Sources: Unit 42 (Palo Alto) · Dark Reading · Dark Reading · ↑ top
8. IDScan.net Tied to 153 Million License Scans
Latest developments: SecurityWeek named IDScan.net, the Louisiana identity-verification vendor, as the likely source of the more than 153 million United States and Canadian driver's license images now for sale on a dark-web service, and an Ars Technica reporter found their own license in the trove within hours of renting a car.
read more
Businesses scan customer licenses through IDScan.net at rental counters, bars, and dispensaries, and the scans include the photograph and every field on the card. The FBI's New Orleans field office has opened an investigation; consumers should freeze credit files and treat license-based identity checks as compromised.
Sources: SecurityWeek · Ars Technica Security · ↑ top
9. Manchester Airports Group Leak Follows Ransom Refusal
Latest developments: The extortion crew behind the Manchester Airports Group hack published roughly 550 gigabytes of stolen files covering 8.8 million people after the airport operator refused to pay, and the group says it got in through exposed administrator keys.
read more
Manchester Airports Group runs Manchester, Stansted, and East Midlands airports, and the dumped files hold customer, booking, and travel records. Travelers who flew through those three airports should expect phishing that quotes real itinerary details.
Sources: SecurityWeek · ↑ top
10. Pegasus Zero-Click Infects Serbian Activist
Latest developments: Citizen Lab, working with Belgrade's SHARE Foundation, confirmed that an iMessage zero-click exploit planted NSO Group's Pegasus spyware on the iPhone of a member of Serbia's student protest movement, and reported high-confidence forensic indicators of the infection.
read more
Pegasus is commercial spyware NSO Group sells to government clients; a zero-click chain takes the phone without the owner touching anything. Serbian civil-society staff and organizers facing this threat should turn on Apple's Lockdown Mode and seek forensic review of their devices.
Sources: The Hacker News · ↑ top
Business and Politics
Yen Surges as Japan Rate Bets Build
Latest developments: U.S. stocks rose and Treasury yields retreated Thursday after Federal Reserve Governor Christopher Waller said he would support holding rates steady if August inflation data cooperates, cutting against Chair Kevin Warsh's rate-hike signal from Jackson Hole, while the yen extended its climb and Bank of England Chief Economist Huw Pill argued for a British rate rise to keep inflation from staying above target.
read more
Japan's currency sits at the center of the global bond rout, and Japanese data released August 28 confirmed that Tokyo and Washington spent a record $98.7 billion propping up the yen last month. Treasury yields have eased from the highs the Iran-driven oil spike produced, even as oil itself resumed climbing on fears the war drags on.
Sources: FT Home · WSJ Markets · WSJ Markets · FT Home · WSJ World News · ↑ top
Iran War Stretches U.S. Forces
Latest developments: The Economist reported September 3 that Iran's axis of resistance has splintered after three years of war, with its proxies now acting on their own, while the Pentagon keeps stretching deployments like the carrier USS Abraham Lincoln's nine months at sea.
read more
The Lincoln's deployment has become the emblem of the strain the Iran war puts on American naval and air rotations, which now run well past normal lengths. Oil has rallied for four straight sessions on expectations the conflict grinds on.
Sources: WSJ US Business · FT World · WSJ Markets · The Economist · ↑ top
Pentagon Leadership Crisis Deepens
Latest developments: Senator Thom Tillis called for Defense Secretary Pete Hegseth's firing as the aftershocks from Army Secretary Dan Driscoll's resignation continued to rattle Washington, the Wall Street Journal reported September 3, deepening turmoil atop the Pentagon while it wages the war against Iran.
read more
Driscoll's resignation touched off a leadership fight inside the Defense Department that has drawn in Senate Armed Services Committee Republicans like Tillis, raising questions about Hegseth's own standing at a moment when U.S. forces remain engaged across the Middle East.
Sources: WSJ Politics · ↑ top
Saudi Deal Opens Enrichment Path
Latest developments: The Wall Street Journal reported September 3 that the nuclear agreement under negotiation with Saudi Arabia could let the kingdom enrich uranium to 20%.
read more
Enrichment at that level would carry Saudi Arabia far up the path toward weapons-relevant material and stiffens opposition in Congress, which must weigh the deal while American forces fight Iran over its own nuclear program.
Sources: WSJ World News · ↑ top
Pittsburgh
Weather
This Afternoon: Slight Chance Showers And Thunderstorms, high 91F.
Tonight: Chance Showers And Thunderstorms, low 70F.
Friday: Showers And Thunderstorms Likely, high 86F.
Business
Mortgage Rates Hit a 13-Month High
Latest developments: The Post-Gazette reported September 3 that the average rate on a 30-year fixed mortgage climbed to its highest level in 13 months.
read more
The 30-year rate tracks long-term Treasury yields, which have run up since the Iran war drove oil prices higher, and the increase raises monthly payments for Pittsburgh-area buyers already competing for a thin supply of listings.
Sources: Pittsburgh Post-Gazette · ↑ top
Sheetz Cuts Gas Prices for Labor Day
Latest developments: Sheetz announced September 3 a series of fuel discounts beginning with Labor Day weekend and running through September.
read more
The Altoona-based convenience chain operates hundreds of stores across Western Pennsylvania, and the discounts arrive with pump prices well above where they stood before the Iran war began six months ago.
Jetset Pilates Signs Lease on Walnut Street
Latest developments: WPXI reported September 3 that Miami-based Jetset Pilates signed a lease on Shadyside's Walnut Street and plans to open as many as six studios around Pittsburgh.
read more
The boutique-fitness chain's arrival on one of Pittsburgh's most upscale shopping strips shows how fitness studios have become increasingly sought-after retail tenants filling storefronts once dominated by traditional apparel shops.
Nonprofits and Pittsburgh's Economy
Latest developments: Post-Gazette columnist Brandon McGinley asked September 3 whether Pittsburgh's nonprofit sector can carry the city's economic revival, working through the record of New Sun Rising and Riverwise.
read more
McGinley's column weighs how much neighborhood revitalization Pittsburgh can buy through nonprofit intermediaries rather than private capital, a question sharpened by the $30 million deficit city budget officials now project for 2026 and by Mayor Corey O'Connor's warning that the finances run worse than known.
Sources: Pittsburgh Post-Gazette · ↑ top
Second Story Spirits Comes to Lawrenceville
Latest developments: The Post-Gazette reported September 3 that Second Story Spirits will bring its craft cordials and a new bar to Lawrenceville.
read more
Second Story Spirits makes craft cordials and adds a drinking room to Lawrenceville, one more distilling operation in a neighborhood that has absorbed much of Pittsburgh's small-batch beverage business.
Sources: Pittsburgh Post-Gazette · ↑ top
WPGH Adds a Daily Sports Show
Latest developments: TribLive's TV Talk reported September 3 that WPGH will launch a daily local sports program this fall and WTAE will add 'Family Feud' to its daytime lineup.
read more
Those two moves stand out in an otherwise flat fall for Pittsburgh broadcast daytime, where local commercial stations kept their schedules largely intact and national syndicators launched few new series.
Around Town
Data Center Zoning Stalls in Murrysville and Upper Burrell
Latest developments: Murrysville council held off advertising its proposed data center zoning ordinance after residents raised questions at its Wednesday, September 2, meeting, and TribLive reported September 3 that Upper Burrell residents are pressing for strict rules before the township's self-imposed November deadline ends its moratorium.
read more
Westmoreland and Armstrong county municipalities are writing zoning rules to control where AI data centers can go, weighing power draw, water use, and noise. The federal Environmental Protection Agency has proposed removing the public-notice requirement for such projects, which would cut off one route residents use to learn about and comment on them.
Sources: WPXI · TribLive · WTAE · ↑ top
Bethel Park Opens a $133 Million Elementary School
Latest developments: The Bethel Park School District welcomed its first students Thursday morning, September 3, into a new $133 million elementary school after a delayed opening.
read more
The building consolidates five older Bethel Park elementary schools into one facility for kindergarten through fifth grade, the largest construction project the Allegheny County district has undertaken.
Highmark Money Buys 13 Pittsburgh Fire Trucks
Latest developments: TribLive reported September 3 that Pittsburgh is ordering 13 new fire trucks paid for with money donated by Highmark Health.
read more
The Pittsburgh Bureau of Fire has run an aging apparatus fleet, and the Highmark donation covers the purchase as Mayor Corey O'Connor's administration confronts a projected $30 million deficit in the 2026 city budget.
PRT Bus Refresh Hinges on Harrisburg
Latest developments: PublicSource reported September 3 that Pittsburgh Regional Transit's coming bus route refresh could last only until 2028, when service cuts arrive absent more state money.
read more
PRT is redrawing its bus network across Allegheny County while staring at a funding cliff. Board member state Senator Lindsey Williams, a West View Democrat, said the system cannot run on fare revenue alone and needs investment from Harrisburg, which has yet to deliver a long-term transit funding fix.
Sources: PublicSource · ↑ top
Heavy Loads to Slow Routes 66 and 22
Latest developments: TribLive reported September 3 that oversized equipment deliveries will bring rolling closures to Route 66 and Route 22 in Armstrong and Westmoreland counties over the next few months.
read more
Drivers on the two corridors, among the busiest in the Alle-Kiski Valley and eastern Westmoreland County, should plan for sporadic and lengthy rolling delays as the loads move through.
South Franklin Township Loses Water
Latest developments: The outage entered its second day Thursday as the National Weather Service kept Western Pennsylvania under a severe thunderstorm watch and heat advisory, with the heat index topping 100 degrees before cooler, less humid air arrives for Labor Day weekend.
read more
A water main break in South Franklin Township, Washington County, left residents without service for more than 24 hours, an outage that landed during a stretch of dangerous heat across the region.
Events
Taste of Greece Festival at Holy Trinity
Latest developments: KDKA previewed the Taste of Greece festival on September 3, the day it opened.
read more
Holy Trinity Greek Orthodox Church runs its Greek food festival, Taste of Greece, from Thursday, September 3, through Sunday, September 6, serving traditional Greek dishes and pastries.
Steelers Kick Off a Weeklong Season-Opener Celebration
Latest developments: The Pittsburgh Steelers announced Thursday, September 3, a weeklong series of citywide events leading up to their regular-season opener against the Atlanta Falcons on Sunday, September 13, at Acrisure Stadium.
read more
The team is staging events around Pittsburgh through the week before kickoff against the Falcons on September 13 at Acrisure Stadium on the North Shore.
City Paper's Week Ahead
Latest developments: Pittsburgh City Paper published its top events for Thursday, September 3, through Wednesday, September 9, on September 3.
read more
The week's picks include a day of punk bands paired with painting, a documentary with a devilish subject, and a reimagined Shakespeare play staged outdoors in a park. City Paper lists dates, venues, and admission for each entry.
Sources: Pittsburgh City Paper · ↑ top
Rib Fest and a Labor Day Parade
Latest developments: TribLive added its own five picks for Friday, September 4, through Monday, September 7, on September 3, joining the Post-Gazette guide to the long Labor Day weekend led by Rib Fest and a Labor Day parade.
read more
Labor Day falls on Monday, September 7, and the Post-Gazette and TribLive roundups collect the weekend's festivals, the parade, and other outings around Pittsburgh with times and locations for each.
Sources: Post-Gazette Arts & Entertainment · TribLive · ↑ top
Lighthouse Arts Anchors a Jazz Fest
Latest developments: Pittsburgh City Paper profiled the jazz organization Lighthouse Arts on September 3, ahead of its members performing at Golden Age Beer Company's coming Jazz Fest.
read more
Lighthouse Arts works to keep jazz playing in Pittsburgh, and its musicians will fill out the lineup at Jazz Fest at Golden Age Beer Company.
Sources: Pittsburgh City Paper · ↑ top
Sports
Pirates (68-72)
Wed Sep 2 · Giants 5 · Pirates 4 · Final (10)
Up Next · Angels @ Pirates · Fri Sep 4, 6:45 PM
Steelers (0-0, T-1st in AFC North)
Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM
Around the Teams
Porter Standoff Dominates Steelers Talk
Latest developments: On SNR Drive for September 2, Matt Williamson and Wes Uhler ran the latest on cornerback Joey Porter Jr.'s practice ramp-up and contract impasse, then brought in The Athletic's Mike DeFabo to read the Steelers heading into Week 1 and worked through the preseason power rankings.
read more
Porter returned to practice September 1 while negotiating a new deal and has declined to commit to the opener, roughly a week and a half away. The Steelers' own show carries the day-to-day churn, with quarterback Aaron Rodgers and rookies Max Iheanachor and Robert Spears-Jennings meeting reporters after the September 2 practice.
Sources: Pittsburgh Steelers (YouTube) · Pittsburgh Steelers (YouTube) · Pittsburgh Steelers (YouTube) · ↑ top
Team USA
Plum Ruled Out for Rest of Season
Latest developments: The Phoenix Mercury announced that Kelsey Plum will miss the remainder of the 2026 WNBA season for health reasons, a day after USA Basketball confirmed she and A'ja Wilson will also sit out the FIBA Women's World Cup, with Kiki Iriafen and Sonia Citron taking their roster spots.
read more
Plum's season-ending absence compounds the loss of Wilson for USA Basketball's women's national team, which now leans on Iriafen and Citron heading into the FIBA Women's World Cup. Coach Kara Lawson calls the field the most challenging she has seen.
Sources: ESPN Olympics · ESPN Olympics · ↑ top
Glenn and Frech Join 'Dancing With the Stars'
Latest developments: ESPN reported September 2 that the new cast of 'Dancing with the Stars' includes American figure skater Amber Glenn, Paralympic gold medalist Ezra Frech, and Savannah Bananas player Jackson Olson.
read more
Athletes have won 12 seasons of the show, and Olympic gymnast Jordan Chiles finished third in 2025. Frech, a sprinter and high jumper, won gold at the Paris Paralympics; Glenn is a U.S. national champion in singles skating.
Sources: ESPN Olympics · ESPN Olympics · ↑ top
NWSL Takes a Cut of Player Deals
Latest developments: ESPN reported September 3 that the National Women's Soccer League now claims a share of the money players earn from shoe and other brand sponsorships, and fines players who decline to pay.
read more
The rule sets the league against its own players and the footwear companies that sign them, many of them U.S. women's national team regulars whose individual endorsements run separate from their club contracts.
Sources: ESPN Soccer · ↑ top
Reading
- Stratechery — Fable 5.1, Enterprise Frontier Safeguards. Ben Thompson covers the release of Fable 5.1 and the outright removal of the data retention policy that enterprise customers objected to, and argues that heavier caching benefits both the model provider and its customers.
- Ed Zitron — Hyperscale Normalization. Zitron argues that the market has come to treat the hyperscalers' enormous AI infrastructure spending as ordinary business, and that normalizing those numbers hides how weak the underlying returns remain.
- Cal Newport — Are We at War with AI Agent "Civilizations"?. Newport returns to the July hacking attack on OpenAI after the company published more detail, and questions the framing that autonomous agent systems now constitute adversarial civilizations.
Markets
S&P 500 7,678.18 ▲ +0.1% Dow 53,209.61 ▼ -0.2% Nasdaq 26,272.01 ▲ +0.5% WTI crude 86.78 ▲ +2.2% EUR/USD 1.1623 ▼ -0.5% GBP/USD 1.3560 ▼ -0.6% USD/JPY 159.73 ▲ +0.5%
Feed Health
Security: 24 of 24 feeds loaded, 67 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Cisco Talos, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.
Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.
Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.
Events: 4 of 4 feeds loaded, 10 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment.
Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).
Team USA: 3 of 3 feeds loaded, 36 items in the 72-hour window.
Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.
Markets (Yahoo Finance): 7 of 7 rows
Weather (NWS): 3 forecast periods
Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; mlb: 1 plaintextsports rows not understood; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports
Summaries: 3 model call(s) served by claude-opus-5 (356s of model time; $1.90 at API list price).