infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Microsoft counted more than 1 million chief executive impersonation scam emails in three days while Anthropic chief executive Dario Amodei put an AI agent swarm capable of taking over the internet six to 12 months away.

Quiet day: only 13 security items in the last 48 hours.


Emerging Trends and Key Updates

Security

1. Passkey Lures and CEO Impersonation Hit Microsoft 365

Ransomware and Cybercrime · [phishing, identity, fraud]

Latest developments: Microsoft put numbers on the fraud wave on September 13, 2026, counting more than 1 million scam emails sent between August 3 and August 5, 2026 by operators who posed as chief executives and pushed the messages through third-party email delivery services, a campaign running alongside the passkey and single sign-on social engineering that ShinyHunters, Helix, and other extortion crews aim at corporate Microsoft accounts.

read more

The passkey lures talk employees into enrolling an authentication method the attacker controls, which yields durable access to Microsoft 365, SharePoint, OneDrive, and mail; the invoice and payment scams stack legitimacy tricks with AI help. Administrators should review recent authentication method enrollments and restrict which outside senders may deliver mail under the company's domain.

Sources: The Hacker News · BleepingComputer · The Record · ↑ top

2. Frontier Models Learn to Work on Humans

AI Security · [ai, research, phishing]

Latest developments: Fred Heiding of Menlo Park Intelligence told the Dark Reading News Desk that his tests of frontier models measure their ability to steer human behavior and cultivate emotional dependency in a target, and Bruce Schneier posted the DEF CON talk he gave last month on what follows when AI systems become the hackers, which passed 100,000 YouTube views within days.

read more

Persuasion now counts as an attack capability of large language models, on top of the exploit code they write for intruders. Dark Reading separately warned that adversaries can bend the reasoning of AI defensive tools to move through a network quietly, which puts every model an enterprise runs under the governance question.

Sources: Dark Reading · Schneier on Security · Dark Reading · ↑ top

3. Meta Faces AI Image Suit and Abuse Video Failures

Policy and Regulation · [ai, privacy, policy]

Latest developments: Wired reported that Meta has failed to stop AI-generated videos of child abuse from spreading across its platforms, days after plaintiffs filed a proposed class action accusing the company of harvesting Facebook and Instagram photos to train its AI image-generation models and to build NameTag, an unreleased face recognition feature.

read more

Meta's generative image work now draws pressure from two sides: civil claims over the photographs that trained the models and moderation failures on the synthetic media those tools help produce. Both threads feed the coming rules on training data and synthetic content.

Sources: Wired Security · Wired Security · ↑ top

4. Amodei Warns of Agent Swarms Within a Year

AI Security · [ai, policy]

Latest developments: Dario Amodei, chief executive of Anthropic, said on September 13, 2026 that within six to 12 months an AI system could direct a swarm of agents able to take over the entire internet, and he asked the industry to give safety measures time to catch up.

read more

Amodei runs the company that has spent the past week documenting its own model rebuilding malware for Russian operators, extracting secrets from 1.8 million Android applications, and helping users in Houthi-held Yemen test a guided rocket. His timeline puts a date on the distance between what the models do and what their builders can control.

Sources: SecurityWeek · ↑ top

5. Sogou Input Method Flaw Delivers GrayRabbit

Nation-State Activity · [apt, backdoor, exploit]

Latest developments: BleepingComputer identified the bug behind the China-aligned espionage campaign on September 13, 2026 as CVE-2026-51990, a critical flaw in Tencent's Sogou Input Method for Windows that operators exploit to plant the GrayRabbit backdoor.

read more

Sogou Input Method ranks among the most widely used ways to type Chinese characters on Windows, and the group UNC3569 starts each intrusion with a crafted link and finishes with a backdoor that carries the logged-in user's full rights. Organizations with Chinese-language staff should update the software or pull it off their desktops.

Sources: BleepingComputer · ↑ top

6. NSA Splits Into Five Mission Centers

Policy and Regulation · [policy, government]

Latest developments: The Record reported on September 13, 2026 that the National Security Agency is moving quickly through a thorough reorganization that will build five mission centers, among them one for cyber and one for artificial intelligence.

read more

The NSA runs signals intelligence collection and, through its Cybersecurity Collaboration Center, the defensive work that reaches United States companies and defense contractors. A restructuring at that scale moves the people and reporting lines industry calls for nation-state threat intelligence.

Sources: The Record · ↑ top

7. Iran Bounty, QTFY Ties, and InjectEave

Nation-State Activity · [apt, policy, phishing]

Latest developments: SecurityWeek reported that the United States has posted a $10 million bounty for information on an Iranian cyber official whom it declines to name publicly, that researchers documented the military ties of the Chinese hacking group QTFY, and that a technique called InjectEave joins phishing which hides invisible Unicode characters to clear mail filters.

read more

The items trace state hacking crews back to their governments and show filter evasion moving down into character encoding, where a gateway that never normalizes text scores a malicious message as clean. Mail security teams should confirm their filters normalize Unicode before they score a message.

Sources: SecurityWeek · ↑ top

8. Mullenweg Says He Runs Automattic Again

Software Supply Chain Security · [supply chain, governance]

Latest developments: Matt Mullenweg says he is back in control of Automattic, three days after the company's board voted to put him on leave, and workers there told 404 Media the company has absorbed years of chaotic leadership decisions.

read more

Automattic owns WordPress.com and employs the people who operate WordPress.org, the channel that pushes plugin updates to millions of sites and that began screening every plugin release automatically last week. Who holds authority over that pipeline is a supply chain question for every organization running WordPress.

Sources: 404 Media · ↑ top

Business and Politics

Gulf Talks on Hormuz Collapse Into Delay

Latest developments: Gulf states postponed the crunch meeting with Iran over the Strait of Hormuz impasse for lack of consensus, the Financial Times reported Sunday, September 13, setting back efforts to restore shipping through the waterway.

read more

Iran's contested management of the Strait of Hormuz has kept roughly a fifth of the world's seaborne oil hostage, and the International Energy Agency has already written off a reopening this year. The Economist reported the same day that the Houthis' rapid advance in Yemen, an embarrassment for Saudi Arabia, hands Tehran further leverage over the region's shipping lanes.

Sources: FT Home · The Economist · ↑ top

Trump Presses Kyiv to Stop Hitting Russian Refineries

Latest developments: President Trump called on Ukraine Sunday, September 13, to halt its strikes on Russian oil refineries, blaming those attacks for record diesel prices, hours after a Russian drone hit a train line near the Polish border that David Petraeus, Boris Johnson, and Carl Bildt had traveled moments earlier.

read more

Ukrainian long-range strikes have knocked out Russian refining capacity through the summer, tightening a global diesel market already squeezed by the Gulf war, and U.S. retail diesel set a record above $6 a gallon on September 11. Trump's demand puts the White House at odds with Kyiv while Russia escalates attacks on civilian and rail targets.

Sources: FT Home · WSJ World News · FT Home · ↑ top

Brics Closes Ranks Over the Gulf War

Latest developments: The Financial Times reported Sunday, September 13, that the Brics summit produced rare unanimity, with the bloc pressing for peace in the Gulf and lining up against American tariffs and sanctions.

read more

Brics, the bloc built around Brazil, Russia, India, China, and South Africa, normally splits over agendas, and worry about the widening Iran conflict, U.S. tariffs, and U.S. sanctions handed this summit an easy consensus. Rivalry between India and China over trade and regional influence still caps how far their rapprochement runs.

Sources: FT World · FT World · ↑ top

A Banking Scandal Reaches Brazil's Supreme Court

Latest developments: The Financial Times reported Sunday, September 13, that a banking scandal has pulled Brazil's Supreme Federal Court into an unprecedented crisis, with a bitter feud between justices spilling into public view.

read more

Brazil's Supreme Federal Court settles the country's biggest political and financial disputes, and the fight among its justices lands weeks before the October presidential election, which the crisis could sway. Investors hold heavy exposure to Brazilian sovereign debt and to the banks now caught up in the affair.

Sources: FT World · ↑ top

Pittsburgh

Weather

Tonight: Chance Showers And Thunderstorms then Mostly Cloudy, low 58F.

Monday: Sunny, high 73F.

Monday Night: Mostly Clear, low 52F.

Business

Trade Schools Fill Up as AI Unsettles Office Work

Latest developments: The Post-Gazette reported Sunday, September 13, that trade and technical schools are posting enrollment increases as students weigh artificial intelligence against the security of white-collar careers.

read more

Students choosing welding, electrical, and other skilled trades over four-year degrees cite the reach of artificial intelligence into entry-level office jobs, along with the cost of college. The shift reaches Western Pennsylvania employers who have spent years short of licensed tradespeople.

Sources: Pittsburgh Post-Gazette · ↑ top

Superloads Come With the Data Centers

Latest developments: TribLive's editorial board wrote Sunday, September 13, that the oversized hauls now crossing Western Pennsylvania roads are an inseparable part of the data center buildout, citing the Pew Research Center's count of roughly 1,500 data centers in development nationwide.

read more

Transporters started moving superloads carrying equipment as heavy as 380 tons through the region this month, slowing traffic on several busy roads across multiple counties for months. The deliveries feed the computing campuses developers are building around Pittsburgh, and the editorial argues residents weighing those projects should count the road disruption as part of the price.

Sources: TribLive · ↑ top

Around Town

NASA Flies Over the Steelers' Home Opener

Latest developments: The Post-Gazette reported Sunday, September 13, that NASA conducted its first flyover of an NFL game as tailgaters packed the North Shore lots for the Steelers' 1 p.m. home opener at Acrisure Stadium.

read more

The opener against the Atlanta Falcons drew the season's first full crowd to the North Shore, filling the parking lots, bars, and restaurants around Acrisure Stadium hours before kickoff. The flyover marked the space agency's debut over a professional football stadium.

Sources: Pittsburgh Post-Gazette · ↑ top

Measles Kills a Jefferson County Woman

Latest developments: The Jefferson County coroner confirmed Sunday, September 13, that a 40-year-old woman died Saturday from complications of measles, the county's first measles death.

read more

Pennsylvania has counted 676 measles cases this year, the most of any state, and about 100 of those arrived in the week before September 11. Two infants died of measles-related causes in the state last month, and this death is the first adult the outbreak has claimed.

Sources: KDKA · WTAE · ↑ top

Another Line of Storms Sunday Night

Latest developments: The National Weather Service posted a severe thunderstorm warning for parts of Allegheny, Butler, and Beaver counties until 7 p.m. Sunday, September 13, as a line of storms carrying damaging wind, hail, and heavy rain crossed the region ahead of a cold front, and WTAE expects a brief fall cool down behind it.

read more

Fast-moving water flooded roads and damaged homes, vehicles, and businesses across Washington and Allegheny counties Saturday night, and the flood-control work the city of Washington has planned keeps slipping as the rain returns; the city declared a state of emergency. Feels-like readings reached the mid-80s during the Steelers' 1 p.m. kickoff before the front arrived.

Sources: WPXI · WPXI · WTAE · WTAE · ↑ top

Clover Commons Residents Press for House Bill 1250

Latest developments: TribLive reported Sunday, September 13, that nearly 60 residents of Clover Commons in Plum took to the streets of their community last week over rising land rent and asked Pennsylvania senators to pass House Bill 1250.

read more

The Clover Commons residents own their homes and rent the ground beneath them, and the seniors among them live on fixed incomes that the rent increases outrun. House Bill 1250 would hold that land rent in check, and the protesters want the state Senate to move it.

Sources: TribLive · ↑ top

Events

'America's Tapestry' Opens at Seton Hill

Latest developments: The traveling exhibition "America's Tapestry" opened Sunday, September 13, at Seton Hill University in Greensburg, and TribLive covered the opening.

read more

"America's Tapestry" gathers textile panels depicting ordinary people who shaped the American Revolution, one panel per state. Textile artist Rachel Weinblum, who stitched part of the Pennsylvania panel, attended the Greensburg opening and saw her work on display for the first time.

Sources: TribLive · ↑ top

Game Lands Driving Tours Open September 20

Latest developments: TribLive reported Sunday, September 13, that the Pennsylvania Game Commission will again open state game lands to self-guided driving tours starting Sunday, September 20.

read more

The Game Commission lets drivers roll through wildlife habitat on state game lands roads normally closed to vehicles, a fall tradition aimed at people who want to watch wildlife without hiking. The tours begin Sunday, September 20, and run through the fall.

Sources: TribLive · ↑ top

Sports

Pirates (75-75)

Sat Sep 12 · Pirates 3 · Cubs 4 · Final

Sun Sep 13 · Pirates 4 · Cubs 3 · Final

Up Next · Brewers @ Pirates · Tue Sep 15, 6:40 PM

Steelers (1-0, T-1st in AFC North)

Sun Sep 13 · Falcons 13 · Steelers 20 · Final

Up Next · Steelers @ Patriots · Sun Sep 20, 1:00 PM

Around the Teams

Watt and Highsmith Carry the McCarthy Debut

Latest developments: The Post-Gazette graded T.J. Watt and Alex Highsmith at A-plus in its Sunday, September 13, report card on the Steelers' opener against the Atlanta Falcons, crediting Watt's pick-six for deciding the game, while columnist Noah Hiles wrote that Mike McCarthy's first game felt unfortunately familiar.

read more

Watt, 31, returned an interception for a touchdown and added two sacks and two tackles for loss in his first game under McCarthy, with Aaron Rodgers at quarterback at Acrisure Stadium. Hiles argued the sloppy offense and reliance on the pass rush echoed the pattern of recent Steelers seasons, leaving McCarthy's promised new standard unproven.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · Post-Gazette Steelers · ↑ top

Porter Sits Out While Healthy Enough to Play

Latest developments: The Steelers ruled out cornerback Joey Porter Jr. for the opener Sunday, September 13, and sources told the Post-Gazette he is healthy enough to play, tying the absence to his unresolved contract.

read more

Porter, the 2023 second-round pick and a starting cornerback, said Friday, September 11, that he felt "not really" optimistic about signing a new deal before the season began. The standoff leaves Pittsburgh's secondary short of its top outside corner in the first week.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top

Kelly's Bench Move Salvages the Cubs Series

Latest developments: The Post-Gazette reported Sunday, September 13, that manager Don Kelly sent Brandon Lowe up as a pinch hitter and leaned on his bullpen to keep the Chicago Cubs from sweeping the Pirates at Wrigley Field, a day after second-guessing his own bullpen call.

read more

Bubba Chandler started the finale for Pittsburgh, which closed a six-game road trip through Chicago against the White Sox and Cubs. Kelly's relief decision in Saturday's blown save drew his own criticism before Sunday's moves worked.

Sources: Post-Gazette Pirates · ↑ top

Team USA

U.S. Women Win a Fifth Straight World Cup

Latest developments: The United States beat France 97-79 on Sunday, September 13, in Germany to claim its fifth consecutive FIBA Women's World Cup title, with Breanna Stewart scoring 22 points and Jackie Young adding 18.

read more

Kara Lawson's team ran the tournament unbeaten, surviving Italy 55-52, routing Hungary 108-56 in the quarterfinals, and holding off Spain 76-66 in the semifinals. The final was a rematch of the 2024 Olympic gold medal game, and Spain took bronze by beating host Germany 81-58 earlier Sunday.

Sources: ESPN Olympics · ESPN Olympics · ↑ top

Jefferson-Wooden Completes the Sprint Double

Latest developments: Melissa Jefferson-Wooden ran 21.47 seconds in the 200 meters Sunday, September 13, at the Ultimate Championship, the fourth-fastest time in history, finishing a $300,000 weekend.

read more

Jefferson-Wooden had won the 100 meters Saturday, September 12, in a world-leading 10.62 seconds at the same meet, where Kenny Bednarek also took a title. The double gives the American sprinter the season's fastest marks at both distances.

Sources: ESPN Olympics · ESPN Olympics · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,655.43  ▼ -0.4%
Dow        52,643.67  ▼ -1.1%
Nasdaq     26,319.30  ▼ -0.1%
WTI crude      96.62  ▲ +9.4%
EUR/USD       1.1623  ▲ +0.2%
GBP/USD       1.3534  ▲ +0.1%
USD/JPY       154.32  ▼ -2.9%

Feed Health

Security: 24 of 24 feeds loaded, 13 items in the 48-hour window. No recent items: Krebs on Security, Schneier on Security, Dark Reading, SANS Internet Storm Center, CISA Advisories, Ars Technica Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.

Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: Pittsburgh City Paper, NEXTpittsburgh, Pittsburgh Magazine.

Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.

Events: 4 of 4 feeds loaded, 9 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment.

Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).

Team USA: 3 of 3 feeds loaded, 28 items in the 72-hour window. No recent items: Guardian Olympics.

Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.

Markets (Yahoo Finance): 7 of 7 rows

Weather (NWS): 3 forecast periods

Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports

Summaries: 3 model call(s) served by claude-opus-5 (264s of model time; $1.62 at API list price).