================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, September 9, 2026 - 1:35 PM EDT ================================================================ Google patched a seventh Chrome zero-day of 2026 as researchers tied four China-linked espionage crews to one shared Chrome exploit, capping a patch cycle that produced Microsoft's record 974 fixes and a same-day Defender bypass. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Four Beijing-aligned crews fired the same V8 exploit patched in Chrome 153, while CISA and the FBI accused six Chinese firms of distilling American frontier models. see: Chrome 153 Patches Seventh Zero-Day of 2026; US Agencies Accuse China of Distilling Frontier AI Models * [TREND] A week of 974 Microsoft fixes and critical Ivanti, cPanel, and Schneider Electric flaws was met by the ShieldCrash Defender bypass and a Sophos-analyzed F5 BIG-IP rootkit. see: Ivanti, cPanel, and ICS Vendors Ship Critical Fixes; ShieldCrash Bypasses Microsoft's Defender Patch; F5 BIG-IP Rootkit Hides Web Shell in Memory * [UPDATE (new)] Veradigm disclosed that the Gentlemen gang stole patient data through a third-party vendor, and Ukraine's prosecutor general Ruslan Kravchenko resigned over bribes shielding scam call centers. see: Gentlemen Gang Claims Veradigm Patient Data Breach; Ukraine Prosecutor Quits Over Scam Center Bribes * [UPDATE (new)] Treasury tripled its buyback to $6 billion yet yields rose anyway, as Brent held above $100 after U.S. strikes on ships tied to Iran's Revolutionary Guards. see: Treasury Triples a Buyback and Yields Rise Anyway; Brent Crosses $100 a Barrel * [UPDATE (new)] Stowe Township again rescinded its 287(g) ICE agreement, Amtrak moved toward a second Pittsburgh-New York train, and forecasters flagged Thursday flooding as an Impact Day. see: Stowe Township Rescinds Its ICE Agreement Again; Amtrak Adds a Second Pittsburgh-New York Train; Storms and Flooding Arrive Thursday SECURITY ---------------------------------------------------------------- 1. CHROME 153 PATCHES SEVENTH ZERO-DAY OF 2026 Vulnerabilities and Exploits · [zero-day, patch, browser] Latest developments: Google shipped Chrome 153.0.8010.36 and .37 for Windows and macOS and 153.0.8010.36 for Linux on September 8, 2026, fixing 230 flaws, among them CVE-2026-87491, an out-of-bounds write in the V8 JavaScript and WebAssembly engine that attackers already exploit in the wild, the seventh Chrome zero-day of the year and the second in six days after CVE-2026-85046; separately, researchers found that at least four China-linked cyber-espionage groups ran an identical exploit for a Chrome bug identified in August 2026. Google rates CVE-2026-87491 medium severity and says the exploit runs code inside the browser sandbox, and it withheld technical detail while users update. Every Chrome and Chromium-based browser deployment needs the update now. - SecurityWeek: https://www.securityweek.com/chrome-153-patches-seventh-zero-day-of-2026/ - The Hacker News: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/google-patches-seventh-chrome-zero-day-exploited-in-attacks-this-year/ - The Record: https://therecord.media/china-hackers-chrome-browser-zero-day-multiple-groups 2. US AGENCIES ACCUSE CHINA OF DISTILLING FRONTIER AI MODELS AI Security · [ai, nation-state, policy] Latest developments: The Cybersecurity and Infrastructure Security Agency, the National Security Agency, and the Federal Bureau of Investigation named six Chinese AI companies that have extracted billions of tokens from American frontier models since at least late 2024, listing Anthropic's Claude, OpenAI's GPT, Google's Gemini, and xAI's Grok as the targets and calling that capture of reasoning, coding, and other restricted capabilities the core of those firms' development strategy; separately, a flaw in DeepSeek Harness, DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed agent turn off its own sandbox with a single command, and researchers found information stealers such as Lumma Stealer and Vidar harvesting replayable session tokens that open AI accounts at Google and Anthropic without a second factor. Knowledge distillation trains a new model on the outputs of a stronger one, a standard technique the three agencies say Chinese companies run at scale to capture capabilities they cannot license. Model providers should hunt for high-volume output harvesting, and developers running DeepSeek Harness should move to a patched build. - SecurityWeek: https://www.securityweek.com/us-agencies-warn-china-is-systematically-extracting-frontier-ai-capabilities/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/us-says-chinese-firms-extracted-billions-of-tokens-from-frontier-ai-models/ - The Hacker News: https://thehackernews.com/2026/09/deepseek-harness-flaw-let-ai-agents.html - The Hacker News: https://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.html 3. IVANTI, CPANEL, AND ICS VENDORS SHIP CRITICAL FIXES Vulnerabilities and Exploits · [patch, ics, remote-code-execution] Latest developments: Cisco Talos said on September 9, 2026 that it tracks active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center software; Ivanti patched six critical remote code execution flaws in Neurons for ITSM plus authentication bypass bugs in Sentry and Endpoint Manager Mobile; cPanel disclosed on September 8, 2026 that an account holder with mail privileges can write arbitrary files through EmailTrack and run code as root on every supported cPanel and WHM version; Fortinet closed critical unauthenticated flaws in FortiMonitorOnSight and its Chrome extension; Google's September Android updates fixed 180 vulnerabilities; and Schneider Electric, Siemens, AVEVA, and Rockwell Automation released industrial control system patches alongside advisories from Nvidia, AMD, and Arm. The fixes cover firewall management consoles, shared hosting servers, mobile and IT service management platforms, plant floor equipment, and phones, each reachable from the internet in typical deployments. Operators should treat the exploited Cisco Secure Firewall Management Center bugs first, then the cPanel root escalation and the Ivanti Neurons for ITSM flaws, which yield full server control. - Cisco Talos: https://blog.talosintelligence.com/fmc-ongoing-exploitation/ - SecurityWeek: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/ - The Hacker News: https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account.html - SecurityWeek: https://www.securityweek.com/ics-patch-tuesday-schneider-electric-siemens-fix-critical-flaws/ 4. LIQUID NETWORK THIEVES RETURN $263 MILLION Ransomware and Cybercrime · [cryptocurrency, cybercrime] Latest developments: Whoever drained nearly 4,000 bitcoin, roughly $320 million, from the Liquid Network federation wallet on September 6, 2026 through a bug in Elements returned 3,400 of those coins, about $263 million, the next day while demanding that the sidechain fix the flaw, and kept 598.5 bitcoin worth some $47 million; Liquid remains paused, so holders cannot redeem the L-BTC token for bitcoin. Liquid is a Bitcoin sidechain that locks up real bitcoin to back L-BTC, and the attackers reached the federation wallet that holds the reserve. In parallel prosecutions and investigations, Malone Lam pleaded guilty to racketeering charges over a $245 million crypto heist that funded Hamptons vacations, cars, and private jets, and CrowdStrike detailed Slim Spider, a Brazil-based crew that has stolen cryptocurrency custody secrets from Brazilian financial institutions since March 2026. - SecurityWeek: https://www.securityweek.com/hackers-return-263-million-stolen-from-liquid-network/ - The Hacker News: https://thehackernews.com/2026/09/liquid-hackers-return-3400-bitcoin.html - The Record: https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico - The Hacker News: https://thehackernews.com/2026/09/slim-spider-steals-crypto-custody.html 5. BORDER PATROL SCREENS AMERICANS' FINANCIAL HABITS Data Privacy · [surveillance, policy, privacy] Latest developments: 404 Media identified predictive policing units inside U.S. Border Patrol that analyze Americans' financial data and then direct local police to pull drivers over who face no suspicion of a particular crime, and separately reported that Sinclair Broadcasting is casting public opposition to Flock Safety's license plate cameras as Chinese propaganda amplified by No Kings protesters; the State Department on August 26, 2026 labeled the Italian tech collective Autistici/Inventati an extremist group hosting infrastructure for far-left militants and warned that anyone funding it risks sanctions, and the collective has now shut down; and the Pentagon switched off advertising identifiers across its phones after location data sold by the ad industry helped adversaries track United States troops. Commercially available financial and location data now drives both government targeting of civilians and foreign targeting of American service members. Any organization whose staff travel or handle sensitive work should disable mobile ad identifiers as the Defense Department did. - 404 Media: https://www.404media.co/a-secretive-dhs-predictive-policing-unit-is-analyzing-americans-financial-habits-and-pulling-them-over/ - 404 Media: https://www.404media.co/smear-campaign-says-anti-flock-movement-is-chinese-propaganda/ - The Record: https://therecord.media/autistici-inventati-shuts-down-after-us-terrorist-designation - Graham Cluley: https://www.bitdefender.com/en-us/blog/hotforsecurity/us-military-turned-off-ad-tracking-phones 6. SHIELDCRASH BYPASSES MICROSOFT'S DEFENDER PATCH Vulnerabilities and Exploits · [zero-day, privilege-escalation, patch] Latest developments: Hours after Microsoft published its September 2026 updates, the anonymous researcher known as Nightmare Eclipse, who also goes by Chaotic Eclipse, released a proof-of-concept exploit named ShieldCrash that grants SYSTEM privileges and defeats Microsoft's fix for CVE-2026-69414, the 7.8-rated Defender flaw the same researcher reported last month as ShieldBreak. ShieldCrash leaves Microsoft Defender installations open to local privilege escalation with no vendor fix available, extending a run of zero-day drops by Nightmare Eclipse that has already covered CrowdStrike Falcon, Nvidia, Avast, and Kaspersky software. Administrators should watch for an out-of-band Microsoft update and monitor Defender's remediation routines for abuse. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-microsoft-defender-shieldcrash-zero-day-grants-system-access/ - The Hacker News: https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html - Help Net Security: https://www.helpnetsecurity.com/2026/09/09/september-2026-patch-tuesday-zero-days-sigred-successor/ 7. F5 BIG-IP ROOTKIT HIDES WEB SHELL IN MEMORY Vulnerabilities and Exploits · [rootkit, apt, network-appliance] Latest developments: Sophos published an analysis on September 7, 2026 of a Linux rootkit tied to break-ins at F5 BIG-IP Access Policy Manager appliances that intercepts PHP file loading: when Apache loads any of three of the appliance's own PHP scripts, the rootkit appends a web shell to the copy in memory, so the file on disk still checks out clean. The technique gives attackers a fileless backdoor on internet-facing remote-access appliances that survives disk scanning and file integrity checks. F5 BIG-IP APM operators need memory-level inspection and should treat compromised appliances as unrecoverable without a rebuild. - The Hacker News: https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit/ - Help Net Security: https://www.helpnetsecurity.com/2026/09/09/f5-big-ip-apm-rootkit-hides-web-shell-in-memory/ 8. DOPPELCART RUNS 119,000 FAKE STOREFRONTS Ransomware and Cybercrime · [phishing, fraud, malware] Latest developments: Researchers named DoppelCart, a card-skimming operation that runs more than 119,000 domains as fake online shops to harvest payment card details, and separately documented a phishing method that assembles the malicious page inside the victim's browser from Microsoft services and blob URLs, which leaves defenders no hosted site to detect or block; Palo Alto Networks' Unit 42 traced a pay-per-install network that used YouTube gaming lures and search engine poisoning to push multi-payload malware into enterprise networks. All three operations lean on scale and on infrastructure that reputation-based defenses trust, whether that is a fresh domain among 119,000, a Microsoft-hosted blob URL, or a YouTube video. Blocklists alone will not hold, so defenders need content inspection at the browser and endpoint. - BleepingComputer: https://www.bleepingcomputer.com/news/security/doppelcart-fraud-network-uses-119-000-fake-shops-to-steal-credit-cards/ - SecurityWeek: https://www.securityweek.com/new-phishing-attack-creates-malicious-pages-inside-the-victims-browser/ - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/ 9. UKRAINE PROSECUTOR QUITS OVER SCAM CENTER BRIBES Policy and Regulation · [policy, fraud, government] Latest developments: Ruslan Kravchenko resigned this week as Ukraine's prosecutor general over allegations that officials in his office took bribes to shield scam call centers from law enforcement; the FBI published its first public cybersecurity strategy, which senior official Brett Leatherman says directs the bureau's teams, field offices, and global presence to align their work against malicious hackers and cybercrime groups; and CIA Deputy Director Michael Ellis credited a flawless performance by the agency's Cyber Mission Center for its part in the January capture of Venezuelan President Nicolás Maduro. Ukraine hosts a dense cluster of call centers that defraud victims abroad, and the bribery claim reaches the office that decides which ones face charges. The FBI strategy and the CIA disclosure together mark a push by United States agencies to state publicly how they aim their cyber capabilities. - The Record: https://therecord.media/ukraine-prosecutor-general-scam-center - The Record: https://therecord.media/fbi-releases-first-public-cybersecurity-strategy - The Record: https://therecord.media/cia-cyber-operations-maduro-capture-venezuela 10. GENTLEMEN GANG CLAIMS VERADIGM PATIENT DATA BREACH Ransomware and Cybercrime · [breach, ransomware, healthcare] Latest developments: Veradigm, the electronic health record company formerly known as Allscripts, disclosed on September 9, 2026 that attackers stole patient personal data through a third-party vendor, said the intruders reached one specific interface and left its networks, servers, and databases alone, and reported no operational disruption; the ransomware crew that calls itself the Gentlemen claims the attack. Veradigm sells electronic health records and practice management software to physician practices, hospitals, and payers across the United States, so a vendor-side theft reaches patients who never dealt with the company. Health systems running Veradigm products should ask which interface the attackers used and whether their own patient records sit in the exposed set. - The Record: https://therecord.media/electronic-health-record-company-says-customer-data-stolen-in-breach - BleepingComputer: https://www.bleepingcomputer.com/news/security/veradigm-discloses-patient-data-breach-after-gentlemen-gang-claims-attack/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Treasury Triples a Buyback and Yields Rise Anyway Latest developments: The U.S. Treasury said Wednesday, September 9, that it will purchase up to $6 billion of Treasurys maturing in 10 to 20 years at Thursday's operation, triple the usual size, and yields jumped as investors judged the program too small to steady the market. Treasury Secretary Scott Bessent expanded the buyback program to support a government bond market that has sold off for weeks, driving long yields to multiyear highs and lifting borrowing costs for the weakest American companies. Gold held steady as the yield move worked through the market. - FT Home: https://www.ft.com/content/2476992f-c9fe-4992-887d-f34c81c100ab?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/investing/u-s-treasury-plans-6-billion-10-to-20-year-bond-buyback-d12d3647?mod=rss_markets_main * Brent Crosses $100 a Barrel Latest developments: Brent held above $100 a barrel through Wednesday afternoon, September 9, extending its rally as U.S. stocks fell and Treasury yields rose, after the U.S. military struck ships tied to Iran's Revolutionary Guards and Iranian missiles hit American targets in Jordan. The blockade war between Washington and Tehran has drained tanker capacity and inventories, and traders see no credible path to de-escalation, so crude has run up through the $90s over two weeks. Gold climbed on the inflation and rate-hike implications, and European shares fell at the open as the oil move hit banks. - FT Home: https://www.ft.com/content/c8921e49-1d06-4d27-ab38-7a1d8e3d43fe?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/middle-east/brent-nears-100-as-u-s-iran-escalation-houthi-strikes-deepen-gulf-supply-fears-768ab4db?mod=rss_worldnews - FT World: https://www.ft.com/content/b460b828-6183-4914-9140-5dfb6d61312c?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/investing/u-s-stock-futures-steady-treasurys-weaken-after-oil-tops-100-42f4c05a?mod=rss_markets_main * Trump Bans Canadian Dairy, Motorcycles, and Alcohol Latest developments: President Trump signed orders late Tuesday, September 8, barring Canadian dairy, motorcycles, and most alcoholic beverages from the U.S. market, with the prohibitions taking effect in three weeks. The orders answer Ottawa's tariffs on roughly $20 billion of American goods, which took effect Tuesday. The ban covers a small subset of industries and could ruin the Canadian companies inside it, and Trump has also moved to bar Canadian firms from U.S. government contracts. - FT Home: https://www.ft.com/content/639d8eac-fd8c-4557-a852-f826501681ad?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/economy/trade/trump-says-he-will-block-canadian-firms-from-government-contracts-a4c3c21e?mod=rss_worldnews * Bessent Warns Traders Off the Yen Latest developments: Treasury Secretary Scott Bessent told currency traders Wednesday, September 9, to stop betting against the yen, saying "I am the house now." The warning follows July's rare joint intervention by Washington and Tokyo to support the Japanese currency, and it lands as the yen trades near six-month highs on expectations of two more Bank of Japan rate increases by year-end. Bessent's line puts the U.S. Treasury explicitly behind the currency, raising the cost of short positions. - FT Home: https://www.ft.com/content/38d718f6-110b-4822-9403-f7d12a48cfa8?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/currencies/yen-strengthens-on-prospects-of-two-boj-rate-hikes-by-year-end-c56a9483?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Isolated Rain Showers, high 87F. Tonight: Chance Showers And Thunderstorms then Showers And Thunderstorms, low 71F. Thursday: Showers And Thunderstorms Likely, high 78F. Business: * Latrobe House Lists at $2.85 Million Latest developments: WPXI published photographs Wednesday, September 9, of a Latrobe house on the market for $2.85 million in a community Arnold Palmer designed. The listing sits in the Westmoreland County golf community that Palmer, a Latrobe native, laid out. At $2.85 million it stands among the costliest homes for sale in the region. - WPXI: https://www.wpxi.com/news/local/285m-latrobe-home-arnold-palmer-designed-community-listed-sale-photos/6HHJHTBN7ZA3NBAASY6WGA34G4/ * Arnold Palmer Terminal Nears the Finish Latest developments: TribLive reported Wednesday, September 9, that a leaking roof and finishing touches are all that remain in the first phase of the $22 million expansion at Arnold Palmer Regional Airport, while the search for a commercial carrier goes on. The project doubles the size of the terminal at Arnold Palmer Regional Airport in Unity, Westmoreland County. The airport has no commercial airline flying passengers out of the enlarged building. - TribLive: https://triblive.com/local/westmoreland/airport-construction-nears-completion-as-search-for-new-commercial-carrier-continues-at-arnold-palmer-regional/ * Lost Lizard Video Rents VHS Tapes Again Latest developments: Pittsburgh City Paper profiled Lost Lizard Video on Wednesday, September 9, the video rental store Vincent Santis stocks with VHS tapes. Santis designed the shop as a communal gathering space and says he missed the era of browsing a rental counter. The store has drawn steady local attention for reviving a format the streaming services buried. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/relive-or-discover-the-heyday-of-vhs-at-lost-lizard-video/ * Pittsburgh Distillers Ride the Canned-Cocktail Boom Latest developments: The Post-Gazette reported Wednesday, September 9, that premixed ready-to-drink cocktails have never sold better, with Pittsburgh producers Wigle, Liberty Pole Spirits, and Lucky Sign in the category. Ready-to-drink cocktails have become one of the fastest-growing corners of the spirits business, and Western Pennsylvania distillers are putting their own bottled and canned versions on shelves. The format lets small producers reach drinkers who never visit a tasting room. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/drinks/2026/09/09/ready-to-drink-cocktails-lucky-sign-wigle-liberty-pole-spirits-pittsburgh/stories/202609130014 Around town: * Stowe Township Rescinds Its ICE Agreement Again Latest developments: PublicSource reported Wednesday, September 9, that Stowe Township commissioners voted again to rescind the township's 287(g) agreement with Immigration and Customs Enforcement. Stowe Township, an Ohio Valley community northwest of Pittsburgh, has entered and exited the federal immigration partnership repeatedly and has taken part in no ICE operations under it. Residents have turned out against the agreement each time commissioners have taken it up. - PublicSource: https://www.publicsource.org/stowe-township-287g-ice-agreement-rescinded/ * Amtrak Adds a Second Pittsburgh-New York Train Latest developments: WPXI reported Wednesday, September 9, that Amtrak's board created a committee to steer service expansion ahead of the November start of a second daily train between Pittsburgh and New York City. The new round trip gives Pittsburgh two daily departures for New York beginning in November, the first addition to the route in decades. Amtrak's new board committee will guide the wider expansion the railroad is planning. - WPXI: https://www.wpxi.com/news/local/amtrak-creates-board-committee-guide-expansion-pittsburgh-gains-second-daily-train/S45W5FQJWFDMZJ6I6P4D72RURE/ * Tree of Life Names Its Center for Humanity Latest developments: Tree of Life announced Wednesday, September 9, that its center devoted to fighting hate and antisemitism will carry the name The Tree of Life Center for Humanity. The Squirrel Hill institution took shape after the 2018 attack on the Tree of Life synagogue and is building programming and a facility on the site. The name settles a question that has hung over the project through years of planning and fundraising. - WPXI: https://www.wpxi.com/news/local/tree-life-pittsburgh-shares-new-name-center-against-hate-antisemitism/473FC5QQABD47IYJS5POD4DVVE/ * Health Department Seeks Wider Outbreak Powers Latest developments: TribLive's editorial board wrote Wednesday, September 9, that the Pennsylvania Department of Health wants to expand its authority to investigate disease and public health emergencies, and asked whether the state learned anything from its last outbreak. The department is pressing for broader investigative reach as Pennsylvania works through a measles outbreak that produced the first U.S. measles-associated deaths of 2026. The editorial weighs how much power the agency should hold before the next emergency arrives. - TribLive: https://triblive.com/opinion/editorial-did-pennsylvania-learn-from-the-last-outbreak/ * Glen Osborne Takes Policing Concerns to Sewickley Latest developments: TribLive reported Wednesday, September 9, that Glen Osborne officials will bring their policing concerns to Sewickley police Chief Dave Mazza on Tuesday, September 15. Glen Osborne, a small borough on the Ohio River in Allegheny County, relies on Sewickley's department for police coverage. The September 15 meeting puts borough officials and Mazza in the same room to work through the complaints. - TribLive: https://triblive.com/local/sewickley/glen-osborne-officials-sewickley-police-chief-to-discuss-policing-concerns/ * Westmoreland Youth Symphony Hands Out Free Instruments Latest developments: KDKA reported Wednesday, September 9, that the Westmoreland Youth Symphony has created a scholarship fund giving middle school students free instruments and free classes. The fund removes the two costs that keep most beginners out of orchestra, the instrument and the lessons. The symphony draws its players from schools across Westmoreland County. - KDKA: https://www.cbsnews.com/pittsburgh/video/westmoreland-youth-symphony-offering-free-classes/ * County Council Targets AI in Campaign Ads Latest developments: Allegheny County Council members introduced a bill Tuesday, September 8, requiring candidates to disclose artificial intelligence in their campaign materials. The measure would mandate a disclaimer on AI-generated political content, aimed at keeping voters from being misled by synthetic images, audio, and video. Council introduced it weeks before mail ballots reach voters for the November midterms. - TribLive: https://triblive.com/news/politics-election/allegheny-county-council-proposes-bill-that-could-regulate-ai-use-in-political-campaign-materials/ - WPXI: https://www.wpxi.com/news/local/allegheny-county-council-members-introducing-legislation-calling-disclaimer-ai-political-ads/ZJDHFSTZCJBJFKKKPEPVNL64MY/ * Innamorato Makes Parental Leave a Campaign Plank Latest developments: PublicSource reported Wednesday, September 9, that Allegheny County Executive Sara Innamorato's push for paid parental leave for county employees is shaping up as a signature plank of her reelection campaign. Innamorato backed paid parental leave before her own pregnancy and now presses Allegheny County Council to pass it, two days after the group Worker Speak Out marched for the measure in the Labor Day parade. Democratic officials in red and purple states are watching whether the policy carries politically. - PublicSource: https://www.publicsource.org/allegheny-county-paid-parental-leave-innamorato/ * Storms and Flooding Arrive Thursday Latest developments: KDKA, WPXI, and WTAE forecast strong storms Wednesday evening and a flooding risk building through Thursday, September 10, which WTAE has flagged as an Impact Day. Rain with embedded storms will work from north to south across Western Pennsylvania, with the flood threat concentrated Thursday morning. The region is still cleaning up from the September 3 storms that brought a 1-in-100-year rainfall and 120,000 outages. - KDKA: https://www.cbsnews.com/pittsburgh/news/first-alert-weather-strong-storms-and-flooding-risk-pittsburgh-forecast/ - WTAE: https://www.wtae.com/article/western-pa-rain-returns-tonight-impact-day-thursday/73649087 Events: * Donnie Iris Opens the Wylie Latest developments: TribLive reported Wednesday, September 9, that Donnie Iris will play a preview show at Citizens Live at the Wylie, the new Pittsburgh venue, ahead of its formal opening. Donnie Iris, the Pittsburgh rock singer behind "Ah! Leah!," gets the first crack at the room. The preview show precedes the venue's regular concert calendar. - TribLive: https://triblive.com/aande/music/donnie-iris-to-play-preview-show-at-new-citizens-live-at-the-wylie-venue/ * Slow Tech Festival at the Children's Museum Latest developments: The group PA Unplugged previewed the Slow Tech Festival on KDKA on Wednesday, September 9, alongside device suggestions for parents holding off on a first phone. The Slow Tech Festival runs Sunday, September 20, at the Children's Museum of Pittsburgh on the North Side. PA Unplugged organizes the event around alternatives to smartphones for children. - KDKA: https://www.cbsnews.com/pittsburgh/video/alternative-tech-devices-for-the-kids-who-wont-stop-asking-for-a-phone/ * Day on the Lawn Rummage Sale in Sewickley Latest developments: KDKA previewed the sale Wednesday, September 9, with a walk through the goods on offer. Sewickley Presbyterian Church holds its annual Day on the Lawn rummage sale Saturday, September 12, in Sewickley. - KDKA: https://www.cbsnews.com/pittsburgh/video/sewickley-presbyterian-church-previews-their-upcoming-day-on-the-lawn-rummage-sale/ SPORTS ---------------------------------------------------------------- Pirates (72-73) Tue Sep 8 · Pirates 9 · White Sox 3 · Final https://plaintextsports.com/mlb/2026-09-08/pit-cws Up Next · Pirates @ White Sox · Wed Sep 9, 7:40 PM https://plaintextsports.com/mlb/2026-09-09/pit-cws Steelers (0-0, T-1st in AFC North) Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM https://plaintextsports.com/nfl/2026/week1/atl-pit Around the Teams: * Hiles Calls the Pirates' Late Push Frustrating Latest developments: Post-Gazette columnist Noah Hiles wrote Wednesday, September 9, that the Pirates' late-season surge makes the year harder to swallow. Hiles argues the recent stretch of good baseball shows what the roster could have produced earlier, with the club's playoff chances effectively gone in the final weeks. He called for a front-office overhaul in the same column space on August 30, starting with general manager Ben Cherington. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/09/09/noah-hiles-column-frustrating-season/stories/202609090040 * New Food Arrives at Acrisure Stadium Latest developments: The Post-Gazette catalogued the new concessions at Acrisure Stadium on Wednesday, September 9, led by a Pittsburgh take on pigs in a blanket. The menu changes land four days before the Steelers open at home against the Atlanta Falcons on Sunday, September 13, at 1 p.m. Concessions rank among the visible changes fans meet at the gates this season. - Post-Gazette Steelers: https://www.post-gazette.com/life/food/2026/09/09/new-food-acrisure-stadium-pittsburgh-steelers/stories/202609090041 * Dulac Fields Week 1 Questions Latest developments: Post-Gazette beat writer Gerry Dulac held his Steelers chat Wednesday, September 9, taking reader questions on the Week 1 roster and matchup. The chat runs four days before the Steelers open at home against the Atlanta Falcons on Sunday, September 13, at 1 p.m. at Acrisure Stadium. Aaron Rodgers starts at quarterback for a team Mike McCarthy coaches for the first time. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/09/steelers-news-analysis-week1/stories/202609080020 * The Post-Gazette Picks the Season Latest developments: The Post-Gazette staff published its 2026 NFL predictions Wednesday morning, September 9, covering the Steelers' record, the Super Bowl, and the league's individual awards. The picks land four days before the Steelers open at home against the Atlanta Falcons on Sunday, September 13, at 1 p.m. at Acrisure Stadium. Pittsburgh enters the season with Aaron Rodgers at quarterback and Mike McCarthy in his first year as head coach. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/09/nfl-predictions-super-bowl-awards/stories/202609090001 * Khristian Curtis Nearly Lost His Arm Latest developments: The Post-Gazette profiled Pirates pitcher Khristian Curtis on Wednesday, September 9, tracing the botched surgery that came close to costing him his throwing arm. Curtis describes every pitch he throws now as a blessing after the operation and the recovery that followed. The piece runs as the Pirates play out the final weeks of a season whose playoff odds have faded. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/09/09/khristian-curtis-injury-botched-surgery-mlb/stories/202609090035 READING ---------------------------------------------------------------- * Stratechery -- OpenAI Does Math, Reward-Hacking, Meta Launches Personal Agent Ben Thompson argues that OpenAI solving one of mathematics' famous open problems is technically impressive and nearly irrelevant to daily life, while Meta's Muse personal agent is the reverse: unglamorous and positioned to reach everyone. https://stratechery.com/2026/openai-does-math-reward-hacking-meta-launches-personal-agent/ * Ed Zitron -- Concentration Risk Zitron examines how much of the current market rests on a handful of AI-linked companies and the financing arrangements that tie them together, continuing the argument he built in his circular-financing series. https://www.wheresyoured.at/concentration-risk/ * Cal Newport -- Wendell Berry and the Promise of the Deep Life Newport marks the death of Wendell Berry, who died at 92 at his farm in Port Royal, Kentucky, and reads Berry's insistence on working land by traditional means as a case for a slower, more rooted life. https://calnewport.com/wendell-berry-and-the-promise-of-the-deep-life/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,687.58 ▼ -0.1% Dow 53,143.05 ▼ -0.6% Nasdaq 26,366.01 ▲ +0.2% WTI crude 91.41 ▲ +9.5% EUR/USD 1.1610 ▼ -0.2% GBP/USD 1.3519 ▼ -0.5% USD/JPY 156.97 ▼ -1.6% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 73 items in the 24-hour window. No recent items: CISA Advisories, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 6 items in the 120-hour window. No recent items: Post-Gazette Music, NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. Team USA: 3 of 3 feeds loaded, 25 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (334s of model time; $1.99 at API list price). ================================================================ Generated 2026-09-09 13:35 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================