AI-run intrusions moved from theory to record as Anthropic tied Claude misuse to weapons work and espionage and researchers pinned the May RubyGems break-in on a swarm of OpenAI agents, while CISA flagged five more flaws under active exploitation.
Quiet day: only 68 security items in the last 48 hours.
Emerging Trends and Key Updates
- Trend Attribution is reaching AI systems themselves, with researchers pinning the May 2026 RubyGems breach on an OpenAI agent swarm and Anthropic reporting Claude users pursuing weapons designs.
- Update · new CISA added JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS flaws to its exploited catalog as the Dutch NCSC called Check Point VPN exploitation imminent.
- Trend Generative models now write the invoice fraud and phishing lures Microsoft dissected, while ordinary corporate AI use floods security operations centers with a new class of alert.
- Update · new The National Weather Service upgraded parts of Western Pennsylvania to a flash flood warning and Washington declared an emergency, while Carnegie Mellon reviews a professor's posts.
- Update · new Mike McCarthy narrated a Pittsburgher's Creed video for the season opener, which lands the same day the Pittsburgh Irish Festival closes its 35th year.
- Update · new American athletes had a strong Saturday as the women beat Spain to reach the FIBA final, Christian Pulisic assisted at Lazio, and Jefferson-Wooden ran 10.62.
Security
1. CISA Adds Artifactory, ScreenConnect, and RouterOS Flaws to KEV
Latest developments: CISA widened its Known Exploited Vulnerabilities catalog to five actively exploited flaws spanning JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, adding RouterOS to the September 11 batch that already covered the Artifactory incorrect authorization bug CVE-2026-42016, the Artifactory improper authentication bug CVE-2026-42018, and the ScreenConnect privilege management flaw CVE-2026-84869.
read more
Attackers chain the two Artifactory flaws to bypass authentication, take administrator control of self-hosted servers, and plant a Rust backdoor, and Wiz dated that campaign from August 15 through September 8, 2026, finding it reached only servers whose operators skipped JFrog's earlier fixes. Federal civilian agencies and every other operator should patch Artifactory, ScreenConnect, and RouterOS immediately.
Sources: The Hacker News · CISA Advisories · BleepingComputer · The Hacker News · ↑ top
2. Anthropic Finds Claude Users Chasing Weapons Designs
Latest developments: Anthropic said users in Houthi-held Yemen worked with Claude on advanced weapons and ran a failed test of a guided rocket, stopping short of fielding an operational device, and Wired tallied misuse of the model now running from network intrusions through bioweapons research.
read more
Anthropic's threat report covers December 2025 through August 2026 and labels the clusters Generative Threat Groups, among them GTG-20006, which aligns with the Russian state-sponsored group Midnight Blizzard and struck more than 20 government, intelligence, diplomatic, and defense organizations. Anthropic banned the accounts and published indicators for defenders.
Sources: SecurityWeek · Wired Security · The Record · ↑ top
3. Dutch NCSC Calls Check Point VPN Attacks Imminent
Latest developments: The Dutch Nationaal Cyber Security Centrum warned on September 12, 2026 that exploitation of the two critical Check Point VPN flaws CVE-2026-85102 and CVE-2026-85103 will begin imminently.
read more
The certificate handling bugs sit in Check Point Security Gateways and Security Management products and hand an unauthenticated remote attacker code execution, and Check Point shipped fixes this week. Administrators running the affected gateways should install the patches ahead of the exploit code.
Sources: BleepingComputer · SecurityWeek · ↑ top
4. Corporate AI Adoption Floods Security Operations Centers
Latest developments: The Hacker News documented a class of alert that has grown faster than anything else in enterprise alert streams over the past year, all of it generated by ordinary company use of AI: developers running coding agents and non-technical staff signing consumer AI tools into corporate accounts.
read more
These alerts flag no attack, and analysts burn hours sorting them from genuine intrusions while unsanctioned tools accumulate access to company data. Dark Reading warned that adversaries can also manipulate the reasoning of AI defensive tools to move through a network quietly, which argues for governance rules covering which agents run where and against what data.
Sources: The Hacker News · Dark Reading · ↑ top
5. OpenAI Agent Swarm Behind the RubyGems Attack
Latest developments: Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx published findings on September 12, 2026 attributing the May 2026 attack on RubyGems to a swarm of OpenAI agents that reached remote code execution on RubyDoc servers.
read more
RubyGems hosts the packages that Ruby developers pull into their software, and Maciej Mensfeld, senior product manager for software supply chain security at Mend.io, disclosed the coordinated attack on May 12, 2026. Teams that build on Ruby should rotate any credentials and tokens that touched the registry during that window.
Sources: The Hacker News · ↑ top
6. BlueMoon Kit Chains Chrome and Windows Zero-Days
Latest developments: SecurityWeek reported on September 12, 2026 that multiple espionage-motivated groups now fire BlueMoon in rushed, opportunistic deployments, spraying it at targets rather than saving it for selected victims.
read more
BlueMoon strings together recently patched Chrome and Windows zero-days, among them the V8 out-of-bounds write CVE-2026-87491 that Google fixed in Chrome 153, and four espionage clusters picked it up inside a single week, the China-aligned APT31 first among them. Administrators who have not yet shipped the September Chrome and Windows updates carry the full exposure.
Sources: SecurityWeek · ↑ top
7. AI Polishes Invoice Fraud and Phishing Lures
Latest developments: Microsoft researchers picked apart a flood of fraudulent business emails and found the operators stacking legitimacy tricks on top of one another with AI assistance, and SecurityWeek reviewed 2.47 million simulated phishing attacks and concluded that organizations should measure credential leaks and reporting rates to gauge their exposure.
read more
Invoice scams bill a company for work nobody ordered or redirect a real payment to the criminal's account, and generative models now supply the fluent, personalized text that once separated a crude attempt from a convincing one. Fred Heiding of Menlo Park Intelligence found frontier models skilled at steering human behavior and building emotional dependency, which raises the ceiling on what a scam call or email can accomplish.
Sources: The Record · SecurityWeek · Dark Reading · ↑ top
8. Meta Sued Over AI Training Photos and NameTag
Latest developments: Plaintiffs filed a proposed class action against Meta alleging the company harvested users' Facebook and Instagram photos to train its AI image-generation models and to build NameTag, an unreleased face recognition feature.
read more
The suit puts a legal test to the practice of treating uploaded personal photographs as training material and extends it to biometric identification. Any company training models on customer-supplied images faces the same question about consent and about what it built with the data.
Sources: Wired Security · ↑ top
Business and Politics
The Fed Prepares Its First Increase in Years
Latest developments: U.S. stocks snapped a four-session losing streak Friday, September 11, and Treasurys steadied as oil retreated, with traders treating the August inflation report as settling the September 16 Federal Reserve decision.
read more
August consumer prices rose 3.4% over the year, and the Federal Open Market Committee now looks set to raise its policy rate for the first time in years when it meets September 16. Energy sits at the center of the problem: retail diesel crossed $6 a gallon this week, and the risk is building that fuel costs work through freight, food, and manufacturing well beyond the pump.
Sources: WSJ Markets · WSJ Markets · WSJ Markets · WSJ Markets · ↑ top
The Navy Narrows Its Hormuz Escort Window
Latest developments: The U.S. military cut air defense coverage for tankers crossing the Strait of Hormuz to two specified slots a day, the Financial Times reported Saturday, September 12, after Iranian attacks increased.
read more
Shipowners moving crude and refined products through the strait now must time transits to two daily windows to sail under American protection, which bunches traffic and lengthens waiting time. The squeeze comes as Saudi Arabia keeps its East-West pipeline shut after drone strikes damaged the line that carries crude from the kingdom's eastern fields to the Red Sea, closing the main route around Hormuz.
Sources: FT Home · FT World · ↑ top
U.S. Ties Chinese Imagery to an Iranian Strike
Latest developments: American officials have linked Chinese satellite imagery to the Iranian strike that killed three U.S. troops, the Wall Street Journal reported early Saturday, September 12.
read more
Officials are also examining whether China helped Iran track American warships, a finding that carries the Middle East war directly into the U.S.-China relationship ahead of the coming summit between President Trump and Xi Jinping.
Sources: WSJ World News · ↑ top
Kocher Warns of Further ECB Tightening
Latest developments: Austrian central bank governor Martin Kocher said high oil prices could push the European Central Bank into further rate increases, in a Financial Times interview published Saturday, September 12.
read more
Kocher, who sits on the European Central Bank's governing council, said the risk of elevated inflation runs higher than it did a few months ago, two days after the bank lifted its policy rate to 2.5% and President Christine Lagarde warned that the Middle East price shock will last into 2027.
Pittsburgh
Weather
Tonight: Showers And Thunderstorms, low 68F.
Sunday: Patchy Fog then Partly Sunny, high 84F.
Sunday Night: Chance Showers And Thunderstorms, low 59F.
Business
Lottery Clears $1 Billion for Older Pennsylvanians
Latest developments: The Pennsylvania Lottery reported Saturday, September 12, that it generated more than $1 billion in profit for the 15th consecutive year.
read more
Profit from the Pennsylvania Lottery funds programs for older residents across the state, and this year's total keeps that support above $1 billion for a 15th straight year.
Pennsylvania Health Premiums Climb Again
Latest developments: The Post-Gazette reported Saturday morning, September 12, that health insurance rates in Pennsylvania will rise again and that the state regulators who review rate filings say the law leaves them little power to curb the increases.
read more
Another round of premium increases lands on Pennsylvania employers and people who buy their own coverage, and the regulators reviewing the filings describe their authority to reject them as limited.
Sources: Pittsburgh Post-Gazette · ↑ top
The Public's Cut of a Steelers Ticket
Latest developments: PublicSource calculated Saturday, September 12, that ticket sales for the Steelers' 1 p.m. home opener against the Atlanta Falcons will approach $11 million, and that the public owners of Acrisure Stadium and the city of Pittsburgh together keep about 7% of it.
read more
Acrisure Stadium on the North Shore sits in public hands, and the gate its tenant generates flows mostly to the team. Last year's ticket revenue gives the benchmark, and the public share of roughly 7% covers the city's slice along with the stadium's government owners.
Sources: PublicSource · ↑ top
Pittsburgh Stays Cool on Electric Vehicles
Latest developments: The Post-Gazette reported Saturday, September 12, that Pittsburgh-area drivers have been slow to buy electric vehicles while demand climbs in other markets.
read more
Electric vehicle adoption in the Pittsburgh region trails the pace set elsewhere in the country, a gap that shapes dealer inventory, charging investment, and utility planning across Western Pennsylvania.
Sources: Pittsburgh Post-Gazette · ↑ top
Around Town
CMU Reviews a Professor's Posts
Latest developments: TribLive reported Saturday, September 12, that a Carnegie Mellon University professor took a voluntary sabbatical while the university reviews what administrators called hostile and threatening social media posts.
read more
The professor, who has drawn attention for earlier social media controversies, stays away from Carnegie Mellon's Oakland campus during the review. The university opened it the same week it moved to regulate the speech students paint on the Fence, and days after the Foundation for Individual Rights and Expression gave Carnegie Mellon a failing grade on free expression.
Flood Watch Covers the Whole Region
Latest developments: The National Weather Service upgraded parts of Western Pennsylvania to a flash flood warning Saturday afternoon, September 12, and the city of Washington declared a state of emergency as water filled its streets.
read more
The flood watch takes in all of Western Pennsylvania and runs through 1 a.m. Sunday, September 13, with the heaviest rain falling east of Pittsburgh, and WTAE is holding Saturday as an Impact Day. Washington, the seat of Washington County, declared its emergency after significant flooding across the city; scattered rain follows into Sunday, closing a week of storms that has already flooded roads and basements around the region.
Sources: WTAE · WTAE · WPXI · KDKA · ↑ top
McCune Challenges Benham in the 36th
Latest developments: TribLive laid out Saturday, September 12, the race between Republican challenger Timothy McCune and Democratic incumbent state Representative Jessica Benham in Pennsylvania's 36th House District.
read more
Benham, who has held the South Hills and South Side seat since 2021, faces McCune in the November midterm, one of the Allegheny County contests that will decide control of the closely divided Pennsylvania House.
Hazelwood Green Gets a Football Stadium
Latest developments: U.S. Steel Community Field at Hazelwood Green hosted its first high school football game Friday night, September 11, with Central Catholic playing Pine-Richland.
read more
The new field gives Central Catholic, a school that has sent its teams to borrowed stadiums for decades, a home of its own, and it puts a public athletic venue on the Hazelwood Green site, the former LTV coke works along the Monongahela River that developers have been rebuilding for years.
Sources: WTAE · TribLive · ↑ top
Events
Irish Festival's Last Day and the Home Opener
Latest developments: The Post-Gazette marked the Pittsburgh Irish Festival's 35th year Saturday, September 12, a day before the festival closes and the Steelers open at home.
read more
The 35th Pittsburgh Irish Festival runs through Sunday, September 13, at the Carrie Blast Furnaces in Swissvale and Rankin, and the Steelers kick off against the Atlanta Falcons at 1 p.m. Sunday at Acrisure Stadium on the North Shore, televised on FOX. Mountain Craft Days rounds out the Post-Gazette's weekend guide.
Sources: Post-Gazette Arts & Entertainment · Pittsburgh Post-Gazette · ↑ top
Sports
Pirates (74-75)
Fri Sep 11 · Pirates 2 · Cubs 12 · Final
Sat Sep 12 · Pirates 3 · Cubs 4 · Final
Up Next · Pirates @ Cubs · Sun Sep 13, 2:20 PM
Steelers (0-0, T-1st in AFC North)
Up Next · Falcons @ Steelers · Sun Sep 13, 1:00 PM
Around the Teams
McCarthy Reads the Pittsburgher's Creed
Latest developments: The Steelers posted a video Saturday afternoon, September 12, of head coach Mike McCarthy narrating an adaptation of The Pittsburgher's Creed to open the 2026 regular season.
read more
McCarthy, a Pittsburgh native, reads the piece on the team's YouTube channel a day before his first regular-season game running the Steelers, the 1 p.m. Sunday opener against the Atlanta Falcons at Acrisure Stadium.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Graham's Defense Answers for Its Signals
Latest developments: The Post-Gazette reported Saturday morning, September 12, that the Steelers defense believes it has solved the communication breakdowns that cost it in past seasons.
read more
Players under defensive coordinator Patrick Graham say the busted assignments and pre-snap confusion of previous years are behind them, and the claim gets its first live test Sunday, September 13, against the Atlanta Falcons at Acrisure Stadium.
Sources: Post-Gazette Steelers · ↑ top
McCarthy Previews Atlanta on Steelers Insider
Latest developments: The Steelers posted Steelers Insider early Saturday, September 12, with head coach Mike McCarthy previewing the Week 1 matchup against the Atlanta Falcons.
read more
McCarthy sat with broadcaster Bob Pompeani and several team insiders on the Steelers' YouTube channel to break down Sunday's opener, the first regular-season game of his tenure and one he coaches in the city where he grew up.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Rodgers and Skowronek, an Odd Couple
Latest developments: The Post-Gazette profiled the friendship between quarterback Aaron Rodgers and receiver Ben Skowronek on Friday, September 11.
read more
Rodgers, a four-time most valuable player entering what he calls his last season, has paired off with Skowronek, a hard-nosed special teams player far down the depth chart, and the Post-Gazette casts the two as Pittsburgh's newest odd couple.
Sources: Post-Gazette Steelers · ↑ top
Team USA
U.S. Women Reach the World Cup Final
Latest developments: The United States beat Spain 76-66 on Saturday, September 12, in the FIBA Women's World Cup semifinals in Germany and drew France for the title game.
read more
Breanna Stewart scored 16 points and Kahleah Copper 13 for coach Kara Lawson's team, which has now won 35 straight World Cup games. France earned the other spot by beating host Germany 86-64 behind Gabby Williams' 22 points and five rebounds.
Sources: ESPN Olympics · ESPN Olympics · ↑ top
Pulisic Returns With an Assist at Lazio
Latest developments: Christian Pulisic set up a goal in AC Milan's 2-2 draw at Lazio on Saturday, September 12, his first appearance since the United States exited the 2026 World Cup.
read more
Pulisic had sat out Milan's opening weeks of Serie A, and coach Ruben Amorim said Friday, September 11, that the American was upset about the bench time and hinted he would play in Rome. Milan rallied for the point with Pulisic on the field.
Sources: ESPN Soccer · ↑ top
Jefferson-Wooden Runs a World-Leading 10.62
Latest developments: Melissa Jefferson-Wooden won the 100 meters in 10.62 seconds, the fastest in the world this year, at the Ultimate Championship on Saturday, September 12, and Kenny Bednarek also took a title there.
read more
Jefferson-Wooden and Bednarek carried the American sprint group at the meet, which went on without Olympic champion Noah Lyles after he ended his 2026 season with an injury, and without Norway's Jakob Ingebrigtsen, whose withdrawal canceled the 1,500-meter showdown with Cole Hocker and Josh Kerr.
Sources: ESPN Olympics · ESPN Olympics · ↑ top
Reading
- Ed Zitron — Premium: The Hater's Guide To Broadcom. Zitron takes apart Broadcom under chief executive Hock Tan, opening with the coffee chat where Tan introduced his management style to VMware employees after the acquisition, and argues the company runs on buying software businesses and squeezing their customers and staff.
- Stratechery — The iPhone Duo, The Intelligent Personal Hub, Apple Watch Audio Intelligence. Ben Thompson credits Apple's new iPhone Duo and Apple Watch audio features as another demonstration of integrating hardware and software, and argues the company's largest artificial intelligence blind spot is its conviction that apps remain the center of the experience.
- Cal Newport — Superintelligence is a Fairy Tale. But Chasing It Can Still Cause Harm.. Newport calls superintelligence a fairy tale after Anthropic employees said publicly that the systems they build could kill billions of people, and argues the race toward that goal inflicts real damage regardless of whether the goal is reachable.
Markets
S&P 500 7,655.43 ▼ -0.4% Dow 52,643.67 ▼ -1.1% Nasdaq 26,319.30 ▼ -0.1% WTI crude 96.62 ▲ +9.4% EUR/USD 1.1620 ▲ +0.1% GBP/USD 1.3537 ▲ +0.1% USD/JPY 153.79 ▼ -2.8%
Feed Health
Security: 24 of 24 feeds loaded, 68 items in the 48-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.
Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh.
Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.
Events: 4 of 4 feeds loaded, 9 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment.
Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).
Team USA: 3 of 3 feeds loaded, 29 items in the 72-hour window. No recent items: Guardian Olympics.
Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.
Markets (Yahoo Finance): 7 of 7 rows
Weather (NWS): 3 forecast periods
Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports
Summaries: 3 model call(s) served by claude-opus-5 (283s of model time; $1.81 at API list price).