================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, September 3, 2026 - 7:37 PM EDT ================================================================ Thomson Reuters told courts across a dozen states, the U.S. Virgin Islands, and Ontario that intruders took C-Track case files holding sealed proceedings and Social Security numbers, while attackers hijacked Coder's registry to ship credential-stealing Terraform modules and turned a critical Elementor Pro flaw into webshells on WordPress servers. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers keep hitting the code-delivery plumbing, hijacking Coder's Cloudflare infrastructure to serve credential-stealing Terraform modules while webshells land through the patched Elementor Pro flaw on WordPress hosts. see: Coder Registry Hijack Delivers Malicious Terraform Modules; WordPress Plugin Flaws Draw Active Exploitation * [TREND] A public proof-of-concept for FalconFlank escalates privileges through the malicious-macro remediation routine in CrowdStrike's Falcon Sensor, making the defensive stack itself the way in. see: FalconFlank Zero-Day Hits CrowdStrike Falcon * [TREND] Unit 42 tracked operators using commercial AI tools to sort and exfiltrate data stolen from Latin America, while Newport questions framing OpenAI's July breach as agent warfare. see: Attackers Wield AI Against Latin American Targets; Are We at War with AI Agent "Civilizations"? * [UPDATE (updated)] Microsoft published its own writeup of the Spring Ring Teams impersonation campaign, as Citizen Lab confirmed a zero-click Pegasus infection on a Serbian student protester's iPhone. see: Microsoft Details Spring Ring Teams Impersonation, Node.js Abused as Loader; Pegasus Zero-Click Infects Serbian Activist * [UPDATE (new)] Volkswagen's board doubled its reduction with roughly 50,000 more job cuts, while Christopher Waller's openness to holding rates steady sent the Dow up more than 600 points. see: Volkswagen Doubles Its Job Cuts; Yen Surges as Japan Rate Bets Build * [UPDATE (new)] Severe thunderstorms with tornado warnings battered Western Pennsylvania as South Franklin Township's water outage reached day two, and Chris Deluzio joined calls to fire Pete Hegseth. see: South Franklin Township Loses Water; Deluzio Calls for Hegseth's Firing SECURITY ---------------------------------------------------------------- 1. FALCONFLANK ZERO-DAY HITS CROWDSTRIKE FALCON Vulnerabilities and Exploits · [zero-day, patch, endpoint] Latest developments: The researcher known as Chaotic Eclipse, also called Nightmare Eclipse, published a proof-of-concept for FalconFlank, a privilege-escalation zero-day that abuses the malicious-macro remediation routine in the CrowdStrike Falcon Sensor, the same researcher whose HardBreacher exploit forced a Kaspersky patch on August 31, 2026; Cisco patched CVE-2026-20212, a CVSS 9.8 bug in 10 Silicon One-based Nexus 9000 switches that gives an unauthenticated remote attacker root code execution, shipped an IOS XR hardening release bundling seven CVEs with no workaround for any version, and left publicly disclosed S/MIME flaws in Secure Email unpatched; Hewlett Packard Enterprise patched a critical remote-code-execution flaw in its ArubaOS-CX network operating system, and Plex told users to update desktop clients and media servers immediately. FalconFlank turns a defensive feature of the Falcon endpoint agent into a path from a local account to full control of the host. The unpatched Cisco Secure Email defects can expose the contents of encrypted mail; apply the Nexus, IOS XR, ArubaOS-CX, and Plex updates now and watch for a CrowdStrike sensor release. - The Hacker News: https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html - SecurityWeek: https://www.securityweek.com/cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities/ - The Hacker News: https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/hpe-patches-critical-arubaos-cx-remote-code-execution-flaw/ 2. MICROSOFT DETAILS SPRING RING TEAMS IMPERSONATION, NODE.JS ABUSED AS LOADER Ransomware and Cybercrime · [social-engineering, malware] Latest developments: Microsoft Threat Intelligence published its own technical writeup of a human-operated intrusion campaign, matching the Spring Ring operation Unit 42 first disclosed, that abuses Microsoft Teams external collaboration to impersonate IT support and deploy a Node.js-based implant for lateral movement, while Symantec separately documented a distinct campaign running since February 2026 that abuses the trusted node.exe runtime to deliver payloads against government departments, technology companies, and hotels; Microsoft also reported that phishing crews now hide invisible Unicode characters inside words so email filters misread them, a trick called ASCII smuggling that crossed over from AI prompt-injection research, and Dark Reading detailed Phantom Deal, a campaign that studies large enterprises in detail and dupes midlevel employees into wiring large sums against fabricated merger and acquisition paperwork. Both intrusion campaigns exploit the fact that node.exe carries Microsoft's own code-signing trust, letting malicious JavaScript payloads slip past defenses tuned to flag unfamiliar executables. Organizations should restrict external Teams collaboration requests, treat unexpected node.exe network activity as suspicious, and require voice confirmation on wire transfers tied to deal paperwork. - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/09/02/impersonating-it-support-threat-actors-turn-remote-session-into-enterprise-wide-access/ - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/threat-gang-springs-vishing-attacks-microsoft-teams-users - The Hacker News: https://thehackernews.com/2026/09/attackers-turn-trusted-nodejs-runtime.html - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/ 3. RUSSIAN MALWARE INDICTMENT AND PRO-UKRAINE RANSOMWARE Ransomware and Cybercrime · [ransomware, law-enforcement, hacktivism] Latest developments: A federal grand jury in California indicted Searzhudin Tamirlanovich Aktulaev, 40, a Russian national who since at least June 2016 used fake accounts on a freelance employment platform to push malware to roughly 80,000 users; police in Cyprus arrested him in May 2025, he arrived in the United States under extradition in August 2026, and he appeared in San Francisco federal court on August 31, 2026, facing up to 20 years on conspiracy, transmission of malicious code, and aggravated identity theft counts. Separately, the Russian security firm F6 described VantaCore, a new pro-Ukraine group running custom ransomware against at least seven Russian companies. Aktulaev's scheme baited freelancers with job files that carried the malware. Hackers also breached payment accounts behind two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited card data. - Help Net Security: https://www.helpnetsecurity.com/2026/09/03/russian-national-indicted-freelance-platform-malware/ - The Record: https://therecord.media/russian-national-facing-20-years-malware-campaign - The Record: https://therecord.media/new-pro-ukraine-hacker-group-custom-ransomware-russia - The Record: https://therecord.media/hackers-russia-fundraisers-ukraine 4. THOMSON REUTERS C-TRACK BREACH EXPOSES COURT RECORDS Data Breaches · [breach, government] Latest developments: Thomson Reuters said an unauthorized party took files in March 2026 from C-Track, the court case management platform its West Publishing Corporation unit sells, and that West Publishing found the activity on June 30, 2026; the exposure covers courts in 11 to 12 U.S. states, the U.S. Virgin Islands, and Ontario, Canada, and a subset of the records carries names and Social Security numbers alongside sealed proceedings. C-Track handles case management for courts, and the stolen data reaches sealed matters and personal information well beyond routine public dockets. Thomson Reuters posted separate notification pages for affected individuals in the United States and Canada and is contacting affected courts directly. - Help Net Security: https://www.helpnetsecurity.com/2026/09/03/thomson-reuters-reveals-breach-that-exposed-u-s-and-canadian-court-records/ - The Record: https://therecord.media/thomson-reuters-cyberattack-data - The Hacker News: https://thehackernews.com/2026/09/thomson-reuters-court-software-breach.html 5. WORDPRESS PLUGIN FLAWS DRAW ACTIVE EXPLOITATION Vulnerabilities and Exploits · [patch, exploitation, wordpress] Latest developments: Attackers began exploiting CVE-2026-32475, a recently patched critical flaw in the Elementor Pro plugin, to plant webshells and run arbitrary commands on WordPress hosts, while researchers assigned CVE-2026-19949 to the unauthenticated SQL injection in the All-in-One WP Migration and Backup plugin and put the exposed population above 3 million sites. Both plugins sit on millions of WordPress installations, and either bug hands an unauthenticated attacker remote code execution on the web server. Site owners should update Elementor Pro and All-in-One WP Migration and Backup now, then hunt for unfamiliar PHP files and new administrator accounts. - BleepingComputer: https://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/ - SecurityWeek: https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/wordpress-backup-plugin-flaw-exposes-millions-of-sites-to-takeover-attacks/ 6. ATTACKERS WIELD AI AGAINST LATIN AMERICAN TARGETS AI Security · [ai, exfiltration, threat-intel] Latest developments: Palo Alto Networks' Unit 42 documented an ongoing campaign against organizations in Latin America in which the operators lean on commercial AI tools to sort and exfiltrate stolen data, and left operational-security errors that let defenders map and disrupt the infrastructure; Dark Reading separately reported that frontier AI agents drove one large-scale breach from start to finish in 10 hours, work that took human crews about two weeks. The crew's AI usage leaves distinctive outbound traffic and artifacts that defenders can hunt. Security teams should log and inspect connections from servers and workstations to AI service endpoints, then treat unexplained ones as exfiltration. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/ - Dark Reading: https://www.darkreading.com/threat-intelligence/ai-gives-cybercriminals-dangerous-time-advantage - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/ai-machine-speed-2-week-attack-10-hours 7. CODER REGISTRY HIJACK DELIVERS MALICIOUS TERRAFORM MODULES Ransomware and Cybercrime · [supply-chain, malware, credentials] Latest developments: Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that handed developers Terraform modules carrying credential-stealing code, and GitGuardian separately found that a recent Shai-Hulud infostealer worm variant now sweeps 469 credential locations across developer environments, continuous integration and deployment tooling, cloud configurations, and AI tool configs, up from 189 paths in earlier versions. Coder sells cloud development environments, and its registry feeds Terraform modules straight into customer infrastructure pipelines, so a poisoned module runs with build-time credentials. Engineering teams should rotate secrets that touched Coder module pulls and pin registry sources their Terraform configurations trust. - BleepingComputer: https://www.bleepingcomputer.com/news/security/coders-registry-infrastructure-compromised-to-push-malicious-modules/ - The Hacker News: https://thehackernews.com/2026/09/shai-huluds-reach-just-grew-to-469.html 8. IDSCAN.NET TIED TO 153 MILLION LICENSE SCANS Data Breaches · [breach, identity-theft] Latest developments: SecurityWeek named IDScan.net, the Louisiana identity-verification vendor, as the likely source of the more than 153 million United States and Canadian driver's license images now for sale on a dark-web service, and an Ars Technica reporter found their own license in the trove within hours of renting a car. Businesses scan customer licenses through IDScan.net at rental counters, bars, and dispensaries, and the scans include the photograph and every field on the card. The FBI's New Orleans field office has opened an investigation; consumers should freeze credit files and treat license-based identity checks as compromised. - SecurityWeek: https://www.securityweek.com/153-million-driver-license-images-offered-on-dark-web/ - Ars Technica Security: https://arstechnica.com/security/2026/09/my-drivers-license-is-one-of-153-million-for-sale-on-a-new-dark-website/ 9. PEGASUS ZERO-CLICK INFECTS SERBIAN ACTIVIST Nation-State Activity · [spyware, zero-click, surveillance] Latest developments: Citizen Lab, working with Belgrade's SHARE Foundation, confirmed that an iMessage zero-click exploit planted NSO Group's Pegasus spyware on the iPhone of a member of Serbia's student protest movement, and forensic researchers now count at least 14 Serbians targeted with advanced spyware since December 2025, among them a member of Parliament, a local opposition politician, and student protesters. Pegasus is commercial spyware NSO Group sells to government clients; a zero-click chain takes the phone without the owner touching anything. Serbian civil-society staff and organizers facing this threat should turn on Apple's Lockdown Mode and seek forensic review of their devices. - The Hacker News: https://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.html - The Record: https://therecord.media/serbia-spyware-pegasus-europe 10. MANCHESTER AIRPORTS GROUP LEAK FOLLOWS RANSOM REFUSAL Data Breaches · [breach, extortion] Latest developments: The extortion crew behind the Manchester Airports Group hack published roughly 550 gigabytes of stolen files covering 8.8 million people after the airport operator refused to pay, and the group says it got in through exposed administrator keys. Manchester Airports Group runs Manchester, Stansted, and East Midlands airports, and the dumped files hold customer, booking, and travel records. Travelers who flew through those three airports should expect phishing that quotes real itinerary details. - SecurityWeek: https://www.securityweek.com/manchester-airports-group-data-on-8-8-million-people-leaked-after-ransom-refusal/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Volkswagen Doubles Its Job Cuts Latest developments: Volkswagen's board approved a plan Thursday, September 3, to cut roughly 50,000 more jobs and shrink the model portfolio, doubling the reduction the carmaker had already set and leaving the future of its European assembly plants open. Volkswagen, Europe's largest carmaker, is restructuring on a historic scale as European sales stay lackluster and Chinese manufacturers take share. The surprise decision puts tens of thousands of German industrial jobs and the utilization of the company's European plants in play. - WSJ US Business: https://www.wsj.com/business/autos/volkswagen-board-approves-plan-to-cut-workforce-model-portfolio-ac933812?mod=pls_whats_news_us_business_f - FT Home: https://www.ft.com/content/77641f53-8dcb-4adf-9295-9ce44b8d49d6?syn-25a6b1a6=1 * Yen Surges as Japan Rate Bets Build Latest developments: Federal Reserve Governor Christopher Waller said September 3 he would support holding rates steady if August inflation data cooperates, and the Dow climbed more than 600 points as Treasury yields fell, the WSJ Dollar Index dropped 0.57% to 95.15, and traders cut the odds of a rate hike to a coin flip; Bank of England Chief Economist Huw Pill argued the same day for a British rate rise to keep inflation from staying above target. Japan's currency sits at the center of the global bond rout, and Japanese data released August 28 confirmed that Tokyo and Washington spent a record $98.7 billion propping up the yen last month. Waller's remarks cut against Chair Kevin Warsh's rate-hike signal from Jackson Hole, and markets now wait on Friday's August employment report. - FT Home: https://www.ft.com/content/22abbb77-1344-4871-9692-97a779b1ba77?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/stocks/bond-selloff-pauses-stocks-tread-water-as-traders-watch-for-yen-intervention-25a7e983?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/currencies/yen-consolidates-may-be-supported-by-lingering-risks-of-fx-intervention-45c3cccb?mod=rss_markets_main - FT Home: https://www.ft.com/content/0a332e3c-e596-4f64-976a-d7746f91a9a9?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/economy/central-banking/boes-chief-economist-sees-need-for-rate-rise-as-wars-course-remains-uncertain-3a2976f4?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/finance/stocks/stocks-bonds-rally-after-dovish-fed-comments-b95763ae?mod=rss_markets_main * Iran War Stretches U.S. Forces Latest developments: Crude futures ended September 3 little changed as traders priced in a longer conflict following this week's resumption of strikes, the European Union entered winter with its lowest gas stocks on record, and The Economist reported that Iran's axis of resistance has splintered after three years of war, with its proxies now acting on their own. The carrier USS Abraham Lincoln's nine months at sea has become the emblem of the strain the Iran war puts on American naval and air rotations, which now run well past normal lengths. Europe's thin gas storage leaves the continent exposed to any further disruption to energy supply. - WSJ US Business: https://www.wsj.com/business/autos/longer-middle-east-deployments-strain-u-s-forces-as-iran-conflict-drags-on-f36cfa16?mod=pls_whats_news_us_business_f - FT World: https://www.ft.com/content/bad69b88-da02-4859-8190-37c55039be75?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-futures-fall-on-likely-technical-correction-cac84e35?mod=rss_markets_main - The Economist: https://www.economist.com/middle-east-and-africa/2026/09/03/irans-proxies-are-going-their-own-way - FT Markets: https://www.ft.com/content/5e9db3c2-70c0-40da-8767-88dcbaf8cfc5?syn-25a6b1a6=1 * Pentagon Leadership Crisis Deepens Latest developments: Senator Thom Tillis called for Defense Secretary Pete Hegseth's firing as the aftershocks from Army Secretary Dan Driscoll's resignation continued to rattle Washington, the Wall Street Journal reported September 3, deepening turmoil atop the Pentagon while it wages the war against Iran. Driscoll's resignation touched off a leadership fight inside the Defense Department that has drawn in Senate Armed Services Committee Republicans like Tillis, raising questions about Hegseth's own standing at a moment when U.S. forces remain engaged across the Middle East. - WSJ Politics: https://www.wsj.com/politics/tillis-wants-hegseth-fired-is-the-pentagon-chief-in-trouble-6a1f97ac?mod=rss_socialpoliticsfeed PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Chance Showers And Thunderstorms, low 70F. Friday: Showers And Thunderstorms Likely, high 86F. Friday Night: Showers And Thunderstorms Likely, low 67F. Business: * Judge Orders Allegheny County to Keep Its Pension Sound Latest developments: A judge ruled Thursday, September 3, that Allegheny County must by law keep its employee pension system actuarially sound, then stopped short of ordering steps to shrink the fund's roughly $1.4 billion deficit and gave the county time to fix it. Allegheny County's retirement fund covers county employees and retirees and carries about $1.4 billion in unfunded liability. The ruling fixes a legal duty to close that gap and leaves the timing and the means to county government. - TribLive: https://triblive.com/local/judge-rules-allegheny-county-must-keep-pension-fund-sound-grants-time-to-fix-1-4b-deficit/ * East Ohio Street Revitalization Push Latest developments: KDKA reported September 3 that Pittsburgh leaders and their partners have mounted a concerted effort to revive the East Ohio Street business district on the North Side, where merchants have asked the city for help. East Ohio Street anchors one of the older commercial strips on Pittsburgh's North Side. Business owners along it say homelessness and crime keep customers away, and the city and its partners must address those conditions for storefronts to fill. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-east-ohio-street-revitalization-homelessness-crime/ - KDKA: https://www.cbsnews.com/pittsburgh/video/pittsburgh-leaders-seek-to-revitalize-east-ohio-street-as-businesses-call-for-help/ * Mortgage Rates Hit a 13-Month High Latest developments: The Post-Gazette reported September 3 that the average rate on a 30-year fixed mortgage climbed to its highest level in 13 months. The 30-year rate tracks long-term Treasury yields, which have run up since the Iran war drove oil prices higher, and the increase raises monthly payments for Pittsburgh-area buyers already competing for a thin supply of listings. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/money/2026/09/03/average-30-year-mortgage-rate/stories/202609040010 * Sheetz Cuts Gas Prices for Labor Day Latest developments: Sheetz announced September 3 a series of fuel discounts beginning with Labor Day weekend and running through September. The Altoona-based convenience chain operates hundreds of stores across Western Pennsylvania, and the discounts arrive with pump prices well above where they stood before the Iran war began six months ago. - WPXI: https://www.wpxi.com/news/local/sheetz-offering-gas-discounts-ahead-labor-day-weekend/AR3U2NKSNNFBLBQG4TUEE2M3RA/ * Jetset Pilates Signs Lease on Walnut Street Latest developments: WPXI reported September 3 that Miami-based Jetset Pilates signed a lease on Shadyside's Walnut Street and plans to open as many as six studios around Pittsburgh. The boutique-fitness chain's arrival on one of Pittsburgh's most upscale shopping strips shows how fitness studios have become increasingly sought-after retail tenants filling storefronts once dominated by traditional apparel shops. - WPXI: https://www.wpxi.com/news/local/miami-based-jetset-pilates-signs-lease-walnut-street-eyes-up-6-pittsburgh-locations/A4EHIYETKRFU3DHSHI6YYV65EA/ * Nonprofits and Pittsburgh's Economy Latest developments: Post-Gazette columnist Brandon McGinley asked September 3 whether Pittsburgh's nonprofit sector can carry the city's economic revival, working through the record of New Sun Rising and Riverwise. McGinley's column weighs how much neighborhood revitalization Pittsburgh can buy through nonprofit intermediaries rather than private capital, a question sharpened by the $30 million deficit city budget officials now project for 2026 and by Mayor Corey O'Connor's warning that the finances run worse than known. - Pittsburgh Post-Gazette: https://www.post-gazette.com/local/city/2026/09/03/nonprofit-economy-new-sun-rising-riverwise-wolovich/stories/202609030002 * Second Story Spirits Comes to Lawrenceville Latest developments: The Post-Gazette reported September 3 that Second Story Spirits will bring its craft cordials and a new bar to Lawrenceville. Second Story Spirits makes craft cordials and adds a drinking room to Lawrenceville, one more distilling operation in a neighborhood that has absorbed much of Pittsburgh's small-batch beverage business. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/09/03/second-story-spirits-lawrenceville/stories/202608270050 * WPGH Adds a Daily Sports Show Latest developments: TribLive's TV Talk reported September 3 that WPGH will launch a daily local sports program this fall and WTAE will add 'Family Feud' to its daytime lineup. Those two moves stand out in an otherwise flat fall for Pittsburgh broadcast daytime, where local commercial stations kept their schedules largely intact and national syndicators launched few new series. - TribLive: https://triblive.com/aande/movies-tv/tv-talk-daily-sports-show-on-wpgh-family-feud-on-wtae-highlight-fall-daytime-tv/ Around town: * Deluzio Calls for Hegseth's Firing Latest developments: U.S. Representative Chris Deluzio, who sits on the House Armed Services Committee, called September 3 for the firing of Defense Secretary Pete Hegseth as senior military officials continued to leave the Pentagon. Deluzio, a Democrat whose Western Pennsylvania district takes in Beaver County and Pittsburgh's northern and western suburbs, joins Republican Senator Thom Tillis in demanding Hegseth's removal while American forces fight Iran. - TribLive: https://triblive.com/local/regional/pa-s-deluzio-calls-for-pete-hegseths-firing-amid-departures-of-top-military-officials/ * High School Football Hall of Fame Weighs Pittsburgh Latest developments: KDKA reported September 3 that the National High School Football Hall of Fame has put Pittsburgh on its list of candidates as it hunts for a new permanent home. The hall needs a new site, and Pittsburgh is competing for it. Western Pennsylvania's WPIAL and City League programs give the region a long claim on the sport's history, and a hall would add a year-round attraction to the local sports-tourism draw. - KDKA: https://www.cbsnews.com/pittsburgh/news/national-high-school-football-hall-of-fame-pittsburgh/ * Data Center Zoning Stalls in Murrysville and Upper Burrell Latest developments: Murrysville council held off advertising its proposed data center zoning ordinance after residents raised questions at its Wednesday, September 2, meeting, and TribLive reported September 3 that Upper Burrell residents are pressing for strict rules before the township's self-imposed November deadline ends its moratorium. Westmoreland and Armstrong county municipalities are writing zoning rules to control where AI data centers can go, weighing power draw, water use, and noise. The federal Environmental Protection Agency has proposed removing the public-notice requirement for such projects, which would cut off one route residents use to learn about and comment on them. - WPXI: https://www.wpxi.com/news/local/murrysville-council-holds-off-advertising-data-center-zoning-rules-ordinance/KQNRDMRR5JHNLC3CRUOUEJ26M4/ - TribLive: https://triblive.com/local/valley-news-dispatch/data-center-concerns-grow-in-upper-burrell-as-moratorium-end-looms/ - WTAE: https://www.wtae.com/article/epa-proposal-leave-public-dark-data-center-plans/73605457 * Bethel Park Opens a $133 Million Elementary School Latest developments: The Bethel Park School District welcomed its first students Thursday morning, September 3, into a new $133 million elementary school after a delayed opening. The building consolidates five older Bethel Park elementary schools into one facility for kindergarten through fifth grade, the largest construction project the Allegheny County district has undertaken. - WTAE: https://www.wtae.com/article/bethel-park-new-elementary-school-opens/73604816 - KDKA: https://www.cbsnews.com/pittsburgh/news/bethel-park-opens-new-elementary-school/ - TribLive: https://triblive.com/news/education-classroom/everything-the-students-would-need-to-thrive-bethel-park-unveils-new-elementary-school/ * Highmark Money Buys 13 Pittsburgh Fire Trucks Latest developments: TribLive reported September 3 that Pittsburgh is ordering 13 new fire trucks paid for with money donated by Highmark Health. The Pittsburgh Bureau of Fire has run an aging apparatus fleet, and the Highmark donation covers the purchase as Mayor Corey O'Connor's administration confronts a projected $30 million deficit in the 2026 city budget. - TribLive: https://triblive.com/local/pittsburgh-orders-13-new-fire-trucks-with-money-donated-by-highmark/ * PRT Bus Refresh Hinges on Harrisburg Latest developments: PublicSource reported September 3 that Pittsburgh Regional Transit's coming bus route refresh could last only until 2028, when service cuts arrive absent more state money. PRT is redrawing its bus network across Allegheny County while staring at a funding cliff. Board member state Senator Lindsey Williams, a West View Democrat, said the system cannot run on fare revenue alone and needs investment from Harrisburg, which has yet to deliver a long-term transit funding fix. - PublicSource: https://www.publicsource.org/prt-2028-service-cuts-funding-crisis/ * Heavy Loads to Slow Routes 66 and 22 Latest developments: WPXI reported September 3 that the oversized loads behind the coming rolling closures are construction deliveries for the Homer City power plant and data center, which will snarl Westmoreland County roads for months. Drivers on Route 66 and Route 22, among the busiest corridors in the Alle-Kiski Valley and eastern Westmoreland County, should plan for sporadic and lengthy rolling delays as the equipment moves toward the Homer City site in Indiana County. - TribLive: https://triblive.com/local/valley-news-dispatch/massive-equipment-deliveries-to-bring-rolling-closures-to-heavily-traveled-routes-in-armstrong-westmoreland-counties/ - WPXI: https://www.wpxi.com/news/local/construction-deliveries-homer-city-power-plant-data-center-impact-westmoreland-county-roads/IU6ZZ7XETRE5DOMIE34VSQCJKQ/ * South Franklin Township Loses Water Latest developments: The outage entered its second day Thursday as severe thunderstorms swept Western Pennsylvania on the evening of September 3, bringing tornado warnings, wind gusts forecast at 70 to 80 mph, widespread damage and power outages around Pittsburgh, and street flooding that closed multiple roads in New Castle. A water main break in South Franklin Township, Washington County, left residents without service for more than 24 hours, an outage that landed during a stretch of dangerous heat with the heat index topping 100 degrees before cooler air arrives for Labor Day weekend. - KDKA: https://www.cbsnews.com/pittsburgh/news/south-franklin-township-washington-county-no-water/ - WTAE: https://www.wtae.com/article/pittsburgh-severe-weather-alert-day-storms-heat-humidity/73603302 - KDKA: https://www.cbsnews.com/pittsburgh/news/more-storms-possible-on-thursday-in-the-pittsburgh-area-along-with-high-heat-first-alert-weather/ - WPXI: https://www.wpxi.com/news/local/multiple-roads-shut-down-due-flooding-new-castle/3K2D3J3FA5FCPB73F4VG6XHCGY/ Events: * Taste of Greece Festival at Holy Trinity Latest developments: KDKA previewed the Taste of Greece festival on September 3, the day it opened. Holy Trinity Greek Orthodox Church runs its Greek food festival, Taste of Greece, from Thursday, September 3, through Sunday, September 6, serving traditional Greek dishes and pastries. - KDKA: https://www.cbsnews.com/pittsburgh/video/opa-getting-a-preview-of-holy-trinitys-taste-of-greece-festival/ * Steelers Kick Off a Weeklong Season-Opener Celebration Latest developments: The Pittsburgh Steelers announced Thursday, September 3, a weeklong series of citywide events leading up to their regular-season opener against the Atlanta Falcons on Sunday, September 13, at Acrisure Stadium. The team is staging events around Pittsburgh through the week before kickoff against the Falcons on September 13 at Acrisure Stadium on the North Shore. - WPXI: https://www.wpxi.com/news/local/pittsburgh-steelers-announce-weeklong-celebration-ahead-season-opener-against-falcons/WX3PCPO5MZH4TE6VQORANIR32U/ - KDKA: https://www.cbsnews.com/pittsburgh/news/steelers-2026-season-celebration/ * City Paper's Week Ahead Latest developments: Pittsburgh City Paper published its top events for Thursday, September 3, through Wednesday, September 9, on September 3. The week's picks include a day of punk bands paired with painting, a documentary with a devilish subject, and a reimagined Shakespeare play staged outdoors in a park. City Paper lists dates, venues, and admission for each entry. - Pittsburgh City Paper: https://www.pghcitypaper.com/listings/this-weeks-top-events/pittsburghs-top-events-thu-sept-3-wed-sept-9/ * Rib Fest and a Labor Day Parade Latest developments: TribLive added its own five picks for Friday, September 4, through Monday, September 7, on September 3, joining the Post-Gazette guide to the long Labor Day weekend led by Rib Fest and a Labor Day parade. Labor Day falls on Monday, September 7, and the Post-Gazette and TribLive roundups collect the weekend's festivals, the parade, and other outings around Pittsburgh with times and locations for each. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/recreation/2026/09/03/things-to-do-this-weekend-pittsburgh-10/stories/202609020045 - TribLive: https://triblive.com/aande/movies-tv/here-are-5-things-to-do-in-pittsburgh-this-weekend-sept-4-7/ * Lighthouse Arts Anchors a Jazz Fest Latest developments: Pittsburgh City Paper profiled the jazz organization Lighthouse Arts on September 3, ahead of its members performing at Golden Age Beer Company's coming Jazz Fest. Lighthouse Arts works to keep jazz playing in Pittsburgh, and its musicians will fill out the lineup at Jazz Fest at Golden Age Beer Company. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/music/lighthouse-arts-is-a-beacon-for-jazz-in-pittsburgh/ SPORTS ---------------------------------------------------------------- Pirates (69-72) Wed Sep 2 · Giants 5 · Pirates 4 · Final (10) https://plaintextsports.com/mlb/2026-09-02/sf-pit Thu Sep 3 · Giants 2 · Pirates 5 · Final https://plaintextsports.com/mlb/2026-09-03/sf-pit Up Next · Angels @ Pirates · Fri Sep 4, 6:45 PM https://plaintextsports.com/mlb/2026/teams/pittsburgh-pirates Steelers (0-0, T-1st in AFC North) Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM https://plaintextsports.com/nfl/2026/week1/atl-pit Around the Teams: * McCarthy's Play-Calling Draws Scrutiny Latest developments: On SNR Drive for September 3, Matt Williamson and Wes Uhler broke down head coach Mike McCarthy as a play-caller and what changes in his second turn directing quarterback Aaron Rodgers, then ranked the NFL's top 10 offenses and defenses for 2026, while McCarthy and tight end Pat Freiermuth met reporters around Thursday's practice. McCarthy calls the Steelers' plays and has Rodgers running the offense, reuniting a pairing that spent a decade together in Green Bay. Pittsburgh opens the regular season September 13 against the Atlanta Falcons. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=a5fCt1jSPW0 - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=tFP7cY_RZDE - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=zedfkKP8vJE * Jobity Comes Out of Nowhere Latest developments: The Post-Gazette profiled defensive lineman Kevin Jobity Jr. on September 3, tracing how a former soccer player came out of nowhere to claim a spot on the Steelers' 53-man roster. Jobity was one of the longshots general manager Omar Khan's staff kept in Sunday's cuts, alongside receiver Eli Heidenreich and defensive lineman Gabriel Rubio. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/03/kevin-jobity-roster-spot-defensive-line/stories/202609030035 * Porter Standoff Dominates Steelers Talk Latest developments: On SNR Drive for September 2, Matt Williamson and Wes Uhler ran the latest on cornerback Joey Porter Jr.'s practice ramp-up and contract impasse, then brought in The Athletic's Mike DeFabo to read the Steelers heading into Week 1 and worked through the preseason power rankings. Porter returned to practice September 1 while negotiating a new deal and has declined to commit to the opener, roughly a week and a half away. The Steelers' own show carries the day-to-day churn, with quarterback Aaron Rodgers and rookies Max Iheanachor and Robert Spears-Jennings meeting reporters after the September 2 practice. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=sD7edrB7P1Q - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=htApmH5JY58 - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=DhCIWFzGOFg Team USA: * Sauerbrunn Joins the Thorns' Staff Latest developments: The Portland Thorns announced Thursday, September 3, that Becky Sauerbrunn has joined the club as a technical consultant through the rest of the 2026 NWSL season. Sauerbrunn won World Cups with the United States in 2015 and 2019 and captained the women's national team, and she closed her playing career with Portland. The role puts one of the most decorated American defenders inside a Thorns front office chasing an NWSL playoff spot. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49816239/usa-becky-sauerbrunn-portland-thorns-consultant-nwsl * Plum Ruled Out for Rest of Season Latest developments: The Phoenix Mercury announced that Kelsey Plum will miss the remainder of the 2026 WNBA season for health reasons, a day after USA Basketball confirmed she and A'ja Wilson will also sit out the FIBA Women's World Cup, with Kiki Iriafen and Sonia Citron taking their roster spots. Plum's season-ending absence compounds the loss of Wilson for USA Basketball's women's national team, which now leans on Iriafen and Citron heading into the FIBA Women's World Cup. Coach Kara Lawson calls the field the most challenging she has seen. - ESPN Olympics: https://www.espn.com/wnba/story/_/id/49782113/aja-wilson-kelsey-plum-miss-fiba-women-world-cup - ESPN Olympics: https://www.espn.com/wnba/story/_/id/49794975/us-coach-kara-lawson-calls-world-cup-most-challenging * Glenn and Frech Join 'Dancing With the Stars' Latest developments: ESPN reported September 2 that the new cast of 'Dancing with the Stars' includes American figure skater Amber Glenn, Paralympic gold medalist Ezra Frech, and Savannah Bananas player Jackson Olson. Athletes have won 12 seasons of the show, and Olympic gymnast Jordan Chiles finished third in 2025. Frech, a sprinter and high jumper, won gold at the Paris Paralympics; Glenn is a U.S. national champion in singles skating. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49804369/dancing-stars-dwts-season-35-amber-glenn-ezra-frech-jackson-olson-savannah-bananas - ESPN Olympics: https://www.espn.com/olympics/story/_/id/41069925/which-olympians-competed-dancing-stars * NWSL Takes a Cut of Player Deals Latest developments: ESPN reported September 3 that the National Women's Soccer League now claims a share of the money players earn from shoe and other brand sponsorships, and fines players who decline to pay. The rule sets the league against its own players and the footwear companies that sign them, many of them U.S. women's national team regulars whose individual endorsements run separate from their club contracts. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49788974/nwsl-controversy-players-fined-cleat-sponsorships-brand-deals-rule-money READING ---------------------------------------------------------------- * Stratechery -- Fable 5.1, Enterprise Frontier Safeguards Ben Thompson covers the release of Fable 5.1 and the outright removal of the data retention policy that enterprise customers objected to, and argues that heavier caching benefits both the model provider and its customers. https://stratechery.com/2026/fable-5-1-enterprise-frontier-safeguards/ * Ed Zitron -- Hyperscale Normalization Zitron argues that the market has come to treat the hyperscalers' enormous AI infrastructure spending as ordinary business, and that normalizing those numbers hides how weak the underlying returns remain. https://www.wheresyoured.at/hyperscale-normalization/ * Cal Newport -- Are We at War with AI Agent "Civilizations"? Newport returns to the July hacking attack on OpenAI after the company published more detail, and questions the framing that autonomous agent systems now constitute adversarial civilizations. https://calnewport.com/are-we-at-war-with-ai-agent-civilizations/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,688.74 ▲ +0.1% Dow 53,252.16 ▼ -0.4% Nasdaq 26,334.99 ▲ +0.5% WTI crude 86.78 ▲ +2.2% EUR/USD 1.1609 ▼ -0.6% GBP/USD 1.3537 ▼ -0.7% USD/JPY 159.66 ▲ +0.4% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 65 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Graham Cluley, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 11 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 36 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (433s of model time; $2.12 at API list price). ================================================================ Generated 2026-09-03 19:37 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================