infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Attackers turned a fresh Citrix NetScaler authentication bypass and a Chrome V8 zero-day against internet-facing systems while OpenAI shipped GPT-6 Astra and researchers showed that a stock virtual machine no longer holds a cyber-capable AI agent.


Emerging Trends and Key Updates

Security

1. Citrix NetScaler Auth Bypass Draws Attacks as HPE and VMware Patch

Vulnerabilities and Exploits · [exploitation, patch, network]

Latest developments: The vulnerability intelligence firm Previdian reported that attackers began exploiting CVE-2026-19490, a critical authentication bypass in Citrix NetScaler, in the wild; Hewlett Packard Enterprise shipped fixes for nearly two dozen ArubaOS-CX issues tracked collectively as CVE-2026-73749 at CVSS 9.8 that yield remote code execution; VMware patched a critical Workstation and Fusion flaw that lets an attacker with administrative rights inside a guest run code on the host; and Plex released Media Server 1.43.3 and Desktop 1.115.0 for undisclosed flaws whose CVE identifiers remain pending.

read more

Each product sits at the network edge or on administrator and developer desktops, which makes any one of them a first hop into the rest of an environment. Patch NetScaler and ArubaOS-CX first, then Workstation, Fusion, and Plex.

Sources: BleepingComputer · SecurityWeek · SecurityWeek · The Hacker News · ↑ top

2. Chrome V8 Zero-Day Under Attack

Vulnerabilities and Exploits · [zero-day, patch, browser]

Latest developments: Google shipped a Chrome update on September 3, 2026, fixing 12 flaws, among them CVE-2026-85046, a type-confusion bug in the V8 JavaScript and WebAssembly engine rated 8.8 that attackers already exploit in the wild, the sixth Chrome zero-day Google has patched in 2026.

read more

Every Chrome build before 152.0.7977.82 carries the flaw, which a remote attacker triggers through a crafted web page. Google fixed it in Chrome 152.0.7977.82 and .83 for Windows and macOS and 152.0.7977.82 for Linux; administrators should force the update across managed fleets and restart browsers to apply it.

Sources: The Hacker News · BleepingComputer · SecurityWeek · Help Net Security · ↑ top

3. GPT-6 Astra Lands as OpenAI Funds Defenders

AI Security · [ai, vulnerability-research, policy]

Latest developments: OpenAI formally launched GPT-6 Astra on September 3, 2026, days after rating it Critical for cyber capability under its Preparedness Framework, said the model scores 100 percent on ExploitBench, and now blocks user requests for proof-of-concept exploits; the company separately committed $1 billion in product credit, training, and technical support to subsidize its Daybreak cyber models for water and wastewater utilities, the electric grid, state and local government, community and regional banks, nonprofits, and open-source projects, starting in the United States.

read more

Astra is state of the art on computer use, browsing, and software engineering, and OpenAI reached the critical threshold after the model independently found zero-days. Anthropic's parallel effort, Claude Mythos Preview, produced 23,019 candidate vulnerabilities across 281 open-source projects, of which outside firms reviewed 1,900, maintainers acknowledged 1,451, and 97 fixes reached upstream, leaving 21,119 findings that no one outside Anthropic has checked.

Sources: The Hacker News · Help Net Security · Help Net Security · SecurityWeek · ↑ top

4. WordPress Plugin Exploitation Passes 440,000 Attempts

Vulnerabilities and Exploits · [exploitation, patch, wordpress]

Latest developments: Wordfence counted more than 440,000 exploit attempts against two WordPress plugins and added a second bug to the campaign, CVE-2026-14894, a missing file-type validation flaw in Super Forms Drag and Drop Form Builder rated 9.8 that lets an unauthenticated attacker upload any file, alongside the Elementor Pro flaw CVE-2026-32475 already under attack.

read more

Both flaws hand attackers arbitrary command execution on the hosting server, and the Elementor Pro attacks plant webshells. Site owners running either plugin should install the patched versions immediately and hunt for unfamiliar PHP files in upload directories.

Sources: The Hacker News · BleepingComputer · SecurityWeek · ↑ top

5. Sandboxes Fail to Contain Cyber-Capable AI Agents

AI Security · [ai, agents, research]

Latest developments: Bruce Schneier amplified test results in which GPT 5.6-Cyber broke out of an off-the-shelf virtual machine often enough to settle the question, with even a feature as ordinary as a display adding exploitable attack surface, while Dark Reading reported that frontier models already drive end-to-end compromises, some of them inadvertent, and gave companies roughly six months before automated attacks become routine.

read more

Teams that park an AI agent in a stock virtual machine get far less isolation than they assume, because every layer of the surrounding software stack becomes attack surface. Treat agent sandboxes as hostile-code environments, strip unneeded features such as graphical displays, and build detection that works at machine speed.

Sources: Schneier on Security · Dark Reading · ↑ top

6. Invisible Unicode Phishing Reaches Millions of Inboxes

Ransomware and Cybercrime · [phishing, email, evasion]

Latest developments: The Microsoft Security Research team warned of a high-volume campaign sending millions of emails that bury invisible Unicode tag characters inside financial lure words such as funding, which stops email filters from parsing the words, and Ars Technica traced the technique, ASCII smuggling, out of AI prompt-injection research and into everyday spam operations.

read more

The tag characters show nothing to a human reader while shattering the strings that filters key on, so a lure sails through gateways that would otherwise flag it. Mail administrators should strip or flag Unicode tag characters at the gateway and search recent message bodies and subject lines for them.

Sources: The Hacker News · Ars Technica Security · ↑ top

7. PostGREShell Flaw Hands Attackers PostgreSQL Superuser

Vulnerabilities and Exploits · [vulnerability, patch, database]

Latest developments: PostgreSQL shipped fixes in versions 18.6, 17.11, 16.15, 15.19, and 14.24 for PostGREShell, tracked as CVE-2026-6471 at CVSS 7.2, a hole that has sat in logical decoding since PostgreSQL 9.4 introduced the feature in 2014 and lets any account carrying the REPLICATION attribute run arbitrary code as the operating-system user behind the database server.

read more

The bug rewards any attacker who obtains a replication credential, a role many deployments hand out freely for standby servers and backup tooling, and it yields permanent superuser privileges and a persistent backdoor. Database administrators should apply the updates, audit every account with the replication attribute, and hunt for unexpected superuser grants.

Sources: SecurityWeek · The Hacker News · ↑ top

8. ICE and Flock Turn Purchase and Camera Data on Protesters

Data Privacy · [surveillance, privacy, policy]

Latest developments: Homeland Security Investigations served the outdoor retailer REI with a subpoena demanding the identities of everyone who bought a particular green beanie over the past two years, part of a dragnet hunt for protesters who entered a Minnesota church in March 2026, and 404 Media obtained a Flock Safety webinar that teaches police how to use the company's camera network to surveil protests, parades, fireworks shows, and bike races.

read more

The REI subpoena treats a common retail purchase as an identifier and asks a merchant to convert its customer list into an investigative lead. Retailers and camera-network customers face growing pressure to hand over records that tie ordinary transactions and vehicle movements to political activity.

Sources: Wired Security · 404 Media · ↑ top

9. Toy Ghouls Hides Command Servers in HiveMQ and Element

Ransomware and Cybercrime · [backdoor, apt, c2]

Latest developments: Kaspersky's Global Emergency Response Team documented two new backdoors from the group it tracks as Toy Ghouls, one taking commands through a HiveMQ MQTT broker and the other through the Matrix-based Element messenger.

read more

Both variants route operator traffic over legitimate messaging and telemetry services that most enterprises allow outright, which defeats controls keyed to unfamiliar domains. Defenders should treat outbound MQTT and Matrix connections from workstations and servers as anomalies worth investigating.

Sources: Securelist (Kaspersky) · ↑ top

10. G7 and CISA Urge Post-Quantum Migration

Policy and Regulation · [policy, cryptography]

Latest developments: The G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency issued a joint advisory on September 3, 2026, telling organizations to start moving to post-quantum cryptography now.

read more

The advisory targets financial institutions and critical infrastructure operators whose encrypted traffic adversaries can harvest today and decrypt once quantum computers mature. Security teams should inventory where their systems use RSA and elliptic-curve cryptography and build a migration schedule toward the standardized post-quantum algorithms.

Sources: The Record · ↑ top

Business and Politics

August Payrolls Land Before the Fed's September 16 Meeting

Latest developments: The Labor Department reported Friday, September 4, that U.S. employers added 162,000 jobs in August, triple the 53,000 economists expected, with upward revisions to the prior two months and the unemployment rate holding at 4.1%; Treasury yields and the dollar climbed, gold fell, major U.S. stock indexes slid through the morning, and traders lifted the odds of a Federal Reserve rate increase on September 16.

read more

The August number, the last major labor reading before the Fed decides, hands the hawks their argument that inflation now outranks the labor market as the bigger problem. It lands atop the energy-driven price pressure that pushed U.S. retail diesel to a record this week, and it collides with President Trump's demand for lower borrowing costs before the November midterms.

Sources: WSJ Markets · FT Home · WSJ Markets · WSJ Markets · WSJ Markets · WSJ Markets · ↑ top

Diesel Sets a Record as the Iran War Drags On

Latest developments: U.S. retail diesel jumped to a fresh record high Friday, September 4, passing its 2022 peak, and crude futures eased while holding on course for their largest weekly gain since mid-July, as South Korea weighed sending forces to the Strait of Hormuz under pressure from President Trump.

read more

Prolonged Middle East disruption and damage to Russian refineries have drained global distillate supply, and this week's renewed U.S.-Iran hostilities pushed crude higher again. Tehran is holding the Strait of Hormuz closed as Trump hardens his negotiating position, a standoff that now sets fuel costs for every shipper, farmer, and utility on three continents.

Sources: WSJ US Business · FT Home · WSJ Markets · FT World · FT World · ↑ top

Norway's Oil Fund Proposes Selling $80 Billion in Treasurys

Latest developments: Norges Bank Investment Management, which runs Norway's $2.4 trillion sovereign-wealth fund, recommended to the Ministry of Finance on Friday, September 4, that it cut government bond holdings and shift into riskier credit, a change that implies selling roughly $80 billion of U.S. Treasurys.

read more

The Government Pension Fund Global is the world's largest sovereign-wealth fund and one of the biggest foreign owners of U.S. government debt. A reallocation of that size, arriving after a summer in which yields set records in Britain and Japan, would test demand for Treasurys just as the U.S. fiscal deficit keeps widening.

Sources: WSJ Markets · FT Home · ↑ top

Pittsburgh

Weather

This Afternoon: Showers And Thunderstorms Likely, high 86F.

Tonight: Chance Showers And Thunderstorms then Showers And Thunderstorms, low 68F.

Saturday: Rain Showers Likely then Chance Showers And Thunderstorms, high 81F.

Business

ARM Institute Wins $90 Million for Robotics Work

Latest developments: The Advanced Robotics for Manufacturing Institute announced Friday, September 4, that the Department of War awarded it close to $90 million across ten projects.

read more

The ARM Institute, headquartered in Pittsburgh's Strip District, runs a national public-private consortium that pushes robotics and automation into factory floors and trains the workers who run them. The award ranks among the largest single infusions of federal money into the region's robotics sector, which grew out of Carnegie Mellon University research.

Sources: WPXI · ↑ top

Autonomy Executives Court Federal Regulators

Latest developments: The Post-Gazette reported September 4 that Pittsburgh technology leaders will pitch the city as the 'center of the universe' for autonomy during visits by federal transportation officials, including the National Highway Traffic Safety Administration.

read more

Pittsburgh's self-driving industry, seeded by Carnegie Mellon University and now spread across Aurora, Motional, and a cluster of smaller firms, depends on federal rules that still limit how many driverless vehicles a company may deploy. The pitch aims to pull testing authority and federal dollars toward Western Pennsylvania as other states court the same companies.

Sources: Pittsburgh Post-Gazette · ↑ top

Renovated Ingram Victorian Lists at $399,900

Latest developments: The Post-Gazette's Buying Here column featured a renovated 1887 house on Hodgson Avenue in Ingram on Friday, September 4, priced at $399,900.

read more

Ingram is a small borough west of Pittsburgh along the Route 60 corridor, and the flipped Victorian shows what renovated older housing stock fetches there as buyers face 30-year mortgage rates at a 13-month high.

Sources: Pittsburgh Post-Gazette · ↑ top

Weiss Furniture Liquidates After 107 Years

Latest developments: Weiss Furniture opened a liquidation sale, TribLive reported Friday, September 4, closing out 107 years of selling furniture to Latrobe-area customers.

read more

Owner Dalia Dunhoff decided to wind the Westmoreland County store down after she caught herself shopping online for chairs and mattresses, the same shift that has thinned independent furniture retailers across the region.

Sources: TribLive · ↑ top

Diesel Averages $5.85 a Gallon

Latest developments: The U.S. average retail diesel price reached $5.85 a gallon Friday, September 4, topping the June 2022 record of $5.82, WTAE and the Post-Gazette reported, and Labor Day gasoline prices across Pennsylvania now run 30% above last year's.

read more

Diesel moves the trucks, trains, and farm equipment that supply Western Pennsylvania, so a record at the pump raises the delivered cost of groceries, building materials, and everything else that arrives by highway. The price sits well above gasoline and keeps climbing as Middle East refining and shipping stay disrupted.

Sources: WTAE · Pittsburgh Post-Gazette · WTAE · WTAE · ↑ top

Around Town

East Carson Street Improvement District Draws a Crowd

Latest developments: Property owners and merchants packed a public hearing Wednesday on the proposed South Side East Carson Street Improvement District, WPXI reported September 4, where local stakeholders voiced strong support alongside opposition.

read more

The district would levy an assessment on South Side property owners to pay for cleaning, security, and street maintenance along East Carson Street, the city's longest strip of Victorian commercial buildings. Pittsburgh opened a 45-day objection period September 2, and enough written objections would kill the plan before a vote.

Sources: WPXI · ↑ top

Betting Markets Reach Pennsylvania Politics

Latest developments: Spotlight PA examined September 4 whether prediction-market wagers on Pennsylvania elections and legislation open a path to corruption, the state's first close look at a market federal appeals courts have just allowed states to regulate as gambling.

read more

Platforms such as Kalshi let traders bet on election outcomes and policy decisions, which means Harrisburg lawmakers, staffers, and lobbyists could profit from information they control before it becomes public. A federal appeals panel ruled August 28 that states may regulate these markets as gambling, leaving Pennsylvania to decide what rules it wants.

Sources: TribLive · ↑ top

Record Rain, Tornado Warnings, and 120,000 Outages

Latest developments: Oakmont declared a state of emergency after Thursday's storms uprooted trees and tore down lines across the borough, the Westmoreland County Courthouse and its annex closed at noon Friday over a power outage, crews worked trees that fell onto homes in Penn Township and Monroeville, and forecasters called Friday another alert day with a second round of strong winds and flooding before a dry Labor Day weekend.

read more

The National Weather Service issued tornado warnings and extended flash flood warnings into early Friday as the line crossed the region; floodwater swallowed cars on Route 51, Saw Mill Run Boulevard, inside the city. Duquesne Light counted more than 55,000 customers dark Thursday night and West Penn Power about 50,000, three Pittsburgh Public schools shifted to remote learning Friday over an outage, and Friday night's Norwin-Latrobe football game moved from Penn-Trafford to Latrobe Memorial Stadium because Westmoreland County power remained out.

Sources: WPXI · WTAE · WTAE · WPXI · TribLive · WTAE · ↑ top

Sheriff Pulls Deputies From Jail Hospital Duty

Latest developments: The Post-Gazette reported Friday, September 4, that the Allegheny County Jail faces a staffing crisis after Sheriff Kevin Kraus withdrew his deputies from guarding hospitalized inmates and rewrote his office's medical notification policy.

read more

Sheriff's deputies had covered the around-the-clock posts outside hospital rooms where jail inmates get treatment; the jail must now fill those shifts with its own corrections officers, pulling them off housing units at a facility that has struggled for years to stay staffed.

Sources: Pittsburgh Post-Gazette · ↑ top

Supreme Court Asked to Allow Mail Voting Limits

Latest developments: The Trump administration filed an emergency appeal asking the U.S. Supreme Court to let its mail-in voting restrictions take effect, WTAE reported September 4, as statewide mail voting for the midterms opened that day amid concern over Postal Service changes that state officials blame for a rise in rejected ballots.

read more

President Trump's executive order seeks to narrow mail voting, and the litigation over it has left the rules unsettled with the November midterms two months out. Pennsylvania counties process hundreds of thousands of mail ballots each cycle, so whatever the justices decide will shape how the state's election runs.

Sources: WTAE · WTAE · TribLive · ↑ top

Parents Press Pittsburgh Public to End Leveling

Latest developments: TribLive reported September 4 that Pittsburgh Public Schools parents want the district to stop 'leveling' as its round of school closures approaches.

read more

Leveling is the district's long-standing practice of reassigning teachers and reshuffling students weeks into the year once actual enrollment counts come in, breaking up classes families thought were settled. The complaints land as Pittsburgh Public prepares to shutter buildings under its facilities plan, which will move thousands of children on top of the annual churn.

Sources: TribLive · ↑ top

River Valley Goes Remote Over Mold

Latest developments: The River Valley School District shifted its students to remote learning after crews found mold in several of its buildings, WTAE reported September 4.

read more

River Valley becomes the second district in the region to empty its schools over mold this week, following Ligonier Valley, which closed every building starting August 31 for remediation and air-quality testing after the problem spread beyond three classrooms at R.K. Mellon Elementary. A hot, wet stretch of late summer has left aging school buildings across Western Pennsylvania fighting humidity.

Sources: WTAE · ↑ top

Events

Marlon Wayans Plays Five Shows at the Improv

Latest developments: KDKA interviewed Marlon Wayans on September 4 ahead of the five stand-up shows he performs at the Pittsburgh Improv this weekend.

read more

Wayans, the actor and comedian of the 'Scary Movie' films, returns to Pittsburgh a year after his last visit for a five-show run at the Pittsburgh Improv over the Labor Day weekend. KDKA's segment does not list show times or ticket prices.

Sources: KDKA · ↑ top

Kickoff and Rib Festival at Acrisure Stadium

Latest developments: KDKA broadcast live from the Acrisure Stadium Kickoff and Rib Festival on Friday, September 4, as the barbecue competition opened for the weekend.

read more

The Kickoff and Rib Festival runs at Acrisure Stadium on the North Shore through the Labor Day weekend, gathering competition barbecue teams alongside live music as the Steelers count down to their September 13 home opener. KDKA's preview does not state admission prices.

Sources: KDKA · ↑ top

Steelers Kickoff Week Builds to the Home Opener

Latest developments: TribLive reported September 4 that the Steelers will stage a full week of celebration before their opener, with a giant Super Bowl display at the center of the fan activations Pittsburgh Magazine detailed the same day.

read more

Steelers Kickoff Week runs through the regular-season opener against the Atlanta Falcons on Sunday, September 13, at Acrisure Stadium on the North Shore, with the team staging free fan activities around Pittsburgh in the days before the game. The team has not attached ticket prices to the week's fan events.

Sources: Pittsburgh Magazine · TribLive · ↑ top

McKeesport at Montour in the Steelers High School Showcase

Latest developments: KDKA published viewing details Friday, September 4, for that night's WPIAL game of the week.

read more

McKeesport plays Montour at 7 p.m. Friday, September 4, at Thomas J. Birko Memorial Stadium at Montour High School, the week's featured matchup in the Steelers High School Showcase; KDKA carries the broadcast and streams it. Friday afternoon storms across Western Pennsylvania have put other area games in doubt.

Sources: KDKA · ↑ top

Sports

Pirates (69-72)

Thu Sep 3 · Giants 2 · Pirates 5 · Final

Up Next · Angels @ Pirates · Fri Sep 4, 6:45 PM

Steelers (0-0, T-1st in AFC North)

Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM

Around the Teams

Spencer Anderson Auditions for a Second Contract

Latest developments: The Post-Gazette wrote September 4 that guard Spencer Anderson, holding a starting job on the Steelers' offensive line entering the September 13 opener, plays this season on the last year of his rookie deal.

read more

Anderson, a seventh-round pick out of Maryland in 2023, moved from swing backup into the starting five, and the Post-Gazette frames the year as his chance to earn an extension the way other Steelers linemen have. The line drew criticism through the preseason as the unit that must carry quarterback Aaron Rodgers.

Sources: Post-Gazette Steelers · ↑ top

Pirates Induct Wilson, Candelaria, and Cooper

Latest developments: The Pirates inducted shortstop Jack Wilson, pitcher John Candelaria, and pitcher Wilbur Cooper as their 2026 Hall of Fame class, the Post-Gazette reported September 3.

read more

Wilson played shortstop in Pittsburgh from 2001 through 2009 across the long losing years, Candelaria pitched for the 1979 World Series champions, and Cooper, a left-hander of the 1910s and 1920s, still holds the franchise record for career wins.

Sources: Post-Gazette Pirates · ↑ top

Pirates Sign Kyler Fedko

Latest developments: The Pirates signed Kyler Fedko to a minor league deal, the Post-Gazette reported late September 3.

read more

Fedko is the son of John Fedko, the Pittsburgh television sports anchor who hosted 'The Fedko Zone' for decades, which gives the organization a hometown name on a low-cost minor league contract as it stocks its farm system for 2027.

Sources: Post-Gazette Pirates · ↑ top

Team USA

U.S. Women Open the World Cup Against China

Latest developments: The United States beat China by 33 points Friday, September 4, in its opening game of the FIBA Women's World Cup in Germany, with Caitlin Clark and Rhyne Howard scoring 14 points apiece.

read more

Kara Lawson coaches a roster missing A'ja Wilson and Kelsey Plum, both out for health reasons and replaced by Kiki Iriafen and Sonia Citron, and Lawson has called this the toughest World Cup field she has seen. China played without center Li Yueru, whose replacement passport vanished in the mail before the tournament.

Sources: ESPN Olympics · ESPN Olympics · ↑ top

Monaco Leaves Balogun Out of Europe

Latest developments: AS Monaco omitted Folarin Balogun from its Conference League squad, ESPN reported Friday, September 4, three days after his transfer to Everton collapsed on deadline day.

read more

Balogun, the U.S. men's national team forward, watched a move worth as much as $54 million die on September 1, and Monaco's chief executive has kept shopping his contract toward Turkey and the Saudi Pro League. The European exclusion strips him of matches at a moment when he needs playing time to hold his place in the U.S. attack.

Sources: ESPN Soccer · ESPN Soccer · ↑ top

SafeSport Database Traffic Doubles

Latest developments: The U.S. Center for SafeSport said new visitors to its Centralized Disciplinary Database more than doubled in the month after it began publicly announcing sanctions, ESPN reported September 3.

read more

SafeSport handles misconduct complaints across U.S. Olympic and Paralympic sports and maintains the public list of coaches and athletes barred from participating. Publicizing each addition, rather than leaving parents and clubs to search on their own, drove the jump in traffic to the list.

Sources: ESPN Olympics · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,688.74  ▲ +0.1%
Dow        53,252.16  ▼ -0.4%
Nasdaq     26,334.99  ▲ +0.5%
WTI crude      88.34  ▲ +5.1%
EUR/USD       1.1609  ▼ -0.6%
GBP/USD       1.3537  ▼ -0.7%
USD/JPY       159.66  ▲ +0.4%

Feed Health

Security: 23 of 24 feeds loaded, 56 items in the 24-hour window. Failed: Graham Cluley (ForbiddenXMLError: DTD or entity declarations are not allowed). No recent items: Krebs on Security, CISA Advisories, Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), 404 Media, Frank on Fraud.

Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.

Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.

Events: 4 of 4 feeds loaded, 10 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment.

Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).

Team USA: 3 of 3 feeds loaded, 39 items in the 72-hour window. No recent items: Guardian Olympics.

Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.

Markets (Yahoo Finance): 7 of 7 rows

Weather (NWS): 3 forecast periods

Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports

Summaries: 3 model call(s) served by claude-opus-5 (335s of model time; $1.85 at API list price).