================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, September 14, 2026 - 7:05 AM EDT ================================================================ Revolut handed customer passports and account records to someone writing from a government agency's own email domain, while ConnectWise and JFrog shipped patches for flaws attackers already ride into corporate networks. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers bypassed software entirely, impersonating a government agency to pry customer records from Revolut and Telus while a Twitch extension quietly shipped 31,000 OAuth tokens to Russian proxies. see: Revolut and Telus Disclose Customer Data Theft; JeetBot Twitch Extension Leaks 31,000 OAuth Tokens * [TREND] Remote administration tooling draws exploitation first, with ConnectWise patching a wormable ScreenConnect file-transfer flaw and attackers chaining three JFrog Artifactory bugs into administrator-level backdoors. see: ConnectWise Patches Wormable ScreenConnect Flaw; Third JFrog Artifactory Flaw Joins Backdoor Campaign * [TREND] AWS ships a Deception Benchmark scoring AI false positives while Dario Amodei's slow-down essay sank chip stocks worldwide and drew a rebuttal from Ben Thompson. see: CISOs Fight Over-Privileged AI Agents as AWS Measures False Positives; A Call to Slow AI Knocks Down Tech Shares Worldwide; Pacing the Frontier, AI’s Digital Limits, AI Commissars * [UPDATE (new)] Microsoft confirmed its September 2026 security updates knock out Remote Desktop Services on Windows Server and break USB audio devices, matching four days of administrator reports. see: September Windows Updates Break Remote Desktop and USB Audio * [UPDATE (new)] Saudi Arabia's exit from the Hormuz talks drove oil to $108 a barrel as Fed Chair Kevin Warsh heads into Wednesday's expected rate increase. see: Oil Reaches $108 as Riyadh Quits the Hormuz Talks; Warsh Faces Trump Over Wednesday's Rate Increase * [UPDATE (new)] The Steelers beat Atlanta behind Alex Highsmith's closing sack and Jaquan Brisker's hometown interception, though analysts warn Joey Porter Jr.'s contract absence will start to hurt soon. see: Highsmith's Sack Sealed It; Brisker's Hometown Debut; The Bill for Porter's Standoff Comes Later SECURITY ---------------------------------------------------------------- 1. REVOLUT AND TELUS DISCLOSE CUSTOMER DATA THEFT Data Breaches · [breach, social engineering, fintech] Latest developments: Revolut confirmed on Saturday, September 12, 2026 that someone impersonating a government agency, writing from an email address on that agency's own domain, pulled sensitive customer records out of the London fintech, and Telus warned subscribers on September 14, 2026 that intruders used stolen credentials across a multi-month campaign to reach personal data and billing records. The Revolut notification to affected customers lists birth dates, postal and email addresses, phone numbers, and copies of identity documents including passports, and the company told TechCrunch a limited number of customers lost data and that it contacted each of them directly. Customers of both companies should treat unsolicited contact referencing their account details as fraud and watch for identity theft. - BleepingComputer: https://www.bleepingcomputer.com/news/security/revolut-discloses-data-breach-exposing-financial-info-passports/ - Help Net Security: https://www.helpnetsecurity.com/2026/09/14/revolut-data-breach-privacy/ - SecurityWeek: https://www.securityweek.com/telus-warns-customers-of-account-breaches/ 2. THIRD JFROG ARTIFACTORY FLAW JOINS BACKDOOR CAMPAIGN Vulnerabilities and Exploits · [exploited, patch, supply chain] Latest developments: SecurityWeek reported on September 14, 2026 that attackers chain three JFrog Artifactory vulnerabilities, one more than the pair CISA cataloged on September 11, to bypass authentication and raise their privileges to administrator before planting a backdoor. CISA already lists the incorrect authorization bug CVE-2026-42016 and the improper authentication bug CVE-2026-42018 as actively exploited, and Wiz dated the campaign against self-hosted Artifactory servers from August 15 through September 8, 2026, finding it reached only operators who had skipped JFrog's earlier fixes. Anyone running Artifactory on their own hardware should install every available update and hunt for a Rust backdoor and unfamiliar administrator accounts. - SecurityWeek: https://www.securityweek.com/three-jfrog-artifactory-flaws-exploited-for-backdoor-deployment/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks/ 3. SEPTEMBER WINDOWS UPDATES BREAK REMOTE DESKTOP AND USB AUDIO Vulnerabilities and Exploits · [patch, windows, outage] Latest developments: Microsoft confirmed on September 14, 2026 that its September 2026 security updates knock out Remote Desktop Services on Windows Server, matching four days of administrator reports, and acknowledged a second regression in which USB audio devices fail after the KB5124008 and KB5124012 updates. The Remote Desktop failures block user connections on Windows Server 2019, 2022, and 2025, and some hosts recover only after a hard reset. Administrators running the September rollup should test remote access and audio hardware before broad deployment and watch Microsoft's release health dashboard for the fixes. - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-september-updates-cause-rds-failures-on-windows-server/ - BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/microsoft-september-updates-break-audio-on-some-windows-pcs/ 4. CISOS FIGHT OVER-PRIVILEGED AI AGENTS AS AWS MEASURES FALSE POSITIVES AI Security · [ai, agents, vulnerability management] Latest developments: Amazon Web Services released its Deception Benchmark publicly on September 14, 2026, a dataset and evaluation process that scores how well AI models separate genuine vulnerabilities from code that merely looks risky, and found the models piling up false positives; SecurityWeek reported the same day that security leaders are struggling to rein in over-privileged agents without stripping out the value those agents deliver. Security teams now point AI at vulnerability triage, penetration testing, threat modeling, incident response, and code review, and every false positive adds work for the humans reviewing the output. Teams should benchmark any model before they trust its findings and scope agent permissions to the narrowest set of systems each task requires. - Help Net Security: https://www.helpnetsecurity.com/2026/09/14/aws-deception-benchmark-security-vulnerabilities/ - SecurityWeek: https://www.securityweek.com/cisos-race-to-control-ai-agents-without-destroying-their-value/ 5. CONNECTWISE PATCHES WORMABLE SCREENCONNECT FLAW Vulnerabilities and Exploits · [patch, rmm, exploited] Latest developments: ConnectWise released the fix on September 14, 2026 for the ScreenConnect file transfer flaw it had covered with temporary mitigations a week earlier, closing a hole that lets an attacker send files through an active remote session and execute them without authorization. Huntress traced three unrelated intrusions in which backdoored ScreenConnect instances pushed a four-stage Visual Basic Script payload to every newly connected host, a spread that started with a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake update. The flaw reaches both the ConnectWise cloud service and on-premises installations, so every operator should apply the patch and audit recent session file transfers. - SecurityWeek: https://www.securityweek.com/connectwise-patches-screenconnect-vulnerability-exploited-in-worm-like-attacks/ 6. JEETBOT TWITCH EXTENSION LEAKS 31,000 OAUTH TOKENS Software Supply Chain Security · [browser extension, credential theft] Latest developments: The Hacker News reported on September 14, 2026 that a browser extension called Twitch Enhanced Viewer, listing HISHIMIRO and jeetbot.cc as its developer, leaked the OAuth tokens of nearly 31,000 users to proxy servers that a Russian commercial bot service runs. The extension shipped on both the Google Chrome Web Store and the Mozilla Firefox Add-ons store, and the stolen tokens open the victims' Twitch accounts without a password. Anyone who installed it should remove it, revoke Twitch application authorizations, and reset the account password. - The Hacker News: https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Oil Reaches $108 as Riyadh Quits the Hormuz Talks Latest developments: Saudi Arabia pulled out of the regional de-escalation talks Monday, September 14, and kept its East-West pipeline shut after last week's drone attack, driving oil to $108 a barrel. The East-West line carries crude from Saudi Arabia's eastern fields to the Red Sea and served as the main workaround for the blocked Strait of Hormuz. Houthi fighters now hold the Bab al-Mandeb chokepoint as well, putting both of the region's vital energy corridors under the sway of Iran and its allies, and gas traders have moved to pricing an outage that runs through the winter. - FT Home: https://www.ft.com/content/4845a503-3ddd-4bb7-a469-c51f275bc873?syn-25a6b1a6=1 - WSJ US Business: https://www.wsj.com/business/energy-oil/oil-prices-rise-as-saudi-east-west-pipeline-attack-threatens-export-routes-b6857ade?mod=pls_whats_news_us_business_f - WSJ World News: https://www.wsj.com/world/middle-east/widening-mideast-instability-squeezes-global-oil-supplies-0cd316ad?mod=rss_worldnews - FT World: https://www.ft.com/content/639b4d2a-30c7-473c-a3ec-1fe96a7a7ac7?syn-25a6b1a6=1 * Warsh Faces Trump Over Wednesday's Rate Increase Latest developments: The Financial Times reported Monday, September 14, that Federal Reserve Chair Kevin Warsh risks President Trump's ire by matching his inflation warnings with action at Wednesday's decision, and traders sent the euro to a one-month low and gold down 1.1% on the expectation he will raise rates. The Federal Reserve meets September 16 and the Bank of Japan follows this week, with both expected to tighten, the Fed for the first time in years. Governor Kazuo Ueda faces competing pressure from Tokyo and Washington, and the U.S. Treasury market is already flailing as the oil shock feeds through to prices. - FT Home: https://www.ft.com/content/904c6d93-a6b3-47f4-8b12-3d418cc74fa2?syn-25a6b1a6=1 - FT Markets: https://www.ft.com/content/76a24fc8-b521-47d6-aec9-1bf6666afd60?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/currencies/singapore-dollar-weakens-amid-escalating-middle-east-conflict-a746d8cc?mod=rss_markets_main - FT World: https://www.ft.com/content/4f6a427f-3975-470f-83bf-b21423df59c8?syn-25a6b1a6=1 * A Call to Slow AI Knocks Down Tech Shares Worldwide Latest developments: Chip and AI stocks fell around the globe Monday, September 14, with South Korea's Kospi sliding and Nasdaq futures dropping, after Anthropic Chief Executive Dario Amodei published a weekend essay warning against a race to the bottom in the development of new models. Anthropic, the maker of Claude, told investors it expects a second straight profitable quarter as it prepares an initial public offering that could value it near $2 trillion. Its schism with OpenAI has driven the industry's sprint toward ever more powerful systems, and the market read Amodei's plea for restraint as a threat to the earnings the buildout promises. - FT Home: https://www.ft.com/content/aa8a1be7-abe0-44b7-bcd3-31fd0a44de08?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/stocks/oil-jumps-nasdaq-futures-slide-as-ai-related-stocks-tumble-worldwide-eaaf198b?mod=rss_markets_main - FT Home: https://www.ft.com/content/4564e6a5-69e9-40a6-bf0f-a888f2f4f002?syn-25a6b1a6=1 - The Economist: https://www.economist.com/business/2026/09/14/should-anthropic-press-pause-on-a-potential-2trn-ipo PITTSBURGH ---------------------------------------------------------------- Weather: Today: Sunny, high 72F. Tonight: Partly Cloudy, low 51F. Tuesday: Mostly Sunny, high 82F. Business: * Heating Bills Climb Into Winter Latest developments: WTAE reported Monday, September 14, that the average American household will spend $1,030 on heat this winter, an increase that arrives with household budgets already stretched. The forecast lands on a region that watched retail diesel pass $6 a gallon Friday, September 11, as the Middle East conflict squeezed global fuel supply. Families with no slack left in their budgets face trade-offs between heat and other bills. - WTAE: https://www.wtae.com/article/us-winter-heating-costs-to-increase/73687398 * be.wild.er Farm Becomes a Cooperative Latest developments: The Post-Gazette reported Monday, September 14, that be.wild.er, the Natrona Heights farm now in its tenth year, has converted to a cooperative. Small farms around the country have turned to shared ownership to spread the cost and risk of land, equipment, and labor across their workers. be.wild.er sells online and joins that shift in the Pittsburgh region. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/09/14/be-wild-er-farm-10-years-cooperative-online-natrona-heights/stories/202609040046 * DeFoor Audits the Medical Marijuana Program Latest developments: Pennsylvania Auditor General Timothy L. DeFoor released a performance audit Sunday, September 13, of the Department of Health's handling of the state Medical Marijuana Program. The Department of Health licenses the growers, processors, and dispensaries that serve Pennsylvania's registered medical cannabis patients, and the auditor general's office reviews how it runs that program. The findings bear on operators across Western Pennsylvania and on the patients who buy from them. - WPXI: https://www.wpxi.com/news/local/pennsylvania-auditor-general-releases-performance-audit-states-medical-marijuana-program/JYT62BGJMRH4NCOEUJEIBPJZ64/ Around town: * County Rebuilds Its Addiction Treatment System Latest developments: The Allegheny County Department of Human Services announced an initiative Sunday, September 13, to restructure how the county delivers drug and alcohol treatment. The department funds and coordinates the providers that treat county residents for substance use disorder, and the restructuring changes how those services fit together. It touches the treatment options available to families across Allegheny County. - WPXI: https://www.wpxi.com/news/local/allegheny-county-dhs-restructure-drug-alcohol-treatment-system/FS3OPZJDP5HO5NVMZPSDPGKBAA/ * Shapiro Holds a 38-to-1 Cash Lead Latest developments: PublicSource laid out Monday, September 14, the scale of Governor Josh Shapiro's fundraising advantage over Republican challenger Stacy Garrity, a 38-to-1 lead in cash on hand as of June, much of it raised outside Pennsylvania. Shapiro, the Democratic incumbent, faces Garrity, the state treasurer, in the November 3 election for governor. PublicSource will track contributions in the race through Election Day. - PublicSource: https://www.publicsource.org/shapiro-garrity-election-campaign-finance/ * A Cool, Clear Start to the Week Latest developments: WTAE forecast a comfortable, bright Monday, September 14, across Western Pennsylvania behind Sunday's storm line, with warmth and humidity building back by midweek. A cold front swept the region Sunday with damaging wind, hail, and heavy rain through Allegheny, Butler, and Beaver counties. The break in the heat lasts only a couple of days. - WTAE: https://www.wtae.com/article/western-pa-comfortable-and-bright-to-kick-off-the-week/73716500 - WTAE: https://www.wtae.com/article/severe-thunderstorm-warning-in-effect-for-parts-of-western-pennsylvania/73711106 SPORTS ---------------------------------------------------------------- Pirates (75-75) Sun Sep 13 · Pirates 4 · Cubs 3 · Final https://plaintextsports.com/mlb/2026-09-13/pit-chc Up Next · Brewers @ Pirates · Tue Sep 15, 6:40 PM https://plaintextsports.com/mlb/2026-09-15/mil-pit Steelers (1-0, T-1st in AFC North) Sun Sep 13 · Falcons 13 · Steelers 20 · Final https://plaintextsports.com/nfl/2026/week1/atl-pit Up Next · Steelers @ Patriots · Sun Sep 20, 1:00 PM https://plaintextsports.com/nfl/2026/teams/pittsburgh-steelers Around the Teams: * The Bill for Porter's Standoff Comes Later Latest developments: The Post-Gazette's Week 1 analysis, published Monday, September 14, concluded that the Steelers got through the opener without cornerback Joey Porter Jr. and warned that his absence will start to hurt soon. Porter sat out Sunday's game against the Atlanta Falcons with his contract unresolved, and sources told the Post-Gazette he is healthy enough to play. The Steelers travel to face the New England Patriots on Sunday. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/14/steelers-week1-analysis-joey-porter/stories/202609130095 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/13/joey-porter-contract-news/stories/202608300001 * Brisker's Hometown Debut Latest developments: Safety Jaquan Brisker intercepted a pass in his first game for the Steelers on Sunday, September 13, and the Post-Gazette's notebook made it the centerpiece of the defense's day alongside Cam Heyward and kicker Chris Boswell. Brisker, a Western Pennsylvania native, signed with Pittsburgh this offseason after his run with the Chicago Bears, and he took the field at Acrisure Stadium for the first time as a Steeler in Mike McCarthy's head coaching debut. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/13/nfl-heyward-jaquan-brisker-steelers-boswell/stories/202609130092 * Highsmith's Sack Sealed It Latest developments: The Post-Gazette broke down late Sunday, September 13, the Alex Highsmith sack that closed out the Steelers' win over the Atlanta Falcons, the second defensive play that decided the game. Highsmith and T.J. Watt both drew A-plus grades in the paper's report card on the opener, with Watt's pick-six the other turning point. The two outside linebackers carried a defense that head coach Mike McCarthy plans to rotate more heavily this season. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/13/alex-highsmith-sack-steelers-falcons/stories/202609130096 Team USA: * Team USA Credits Stewart for the Title Run Latest developments: ESPN reported Monday, September 14, that players and staff on the United States women's team pointed to Breanna Stewart as the force behind the fifth straight FIBA World Cup title, calling her the program's greatest winner. The United States beat France in the final in Germany on Sunday, September 13, a rematch of the 2024 Olympic gold medal game, with Stewart scoring 22 points under coach Kara Lawson. Spain took the bronze medal, beating host Germany 81-58. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49931476/us-beats-france-fifth-straight-women-world-cup-title * Rodman Leaves a Spirit Loss for the US Open Latest developments: Trinity Rodman flew from the Washington Spirit's 3-0 defeat straight to Flushing Meadows to watch Ben Shelton play the US Open final, ESPN reported Monday, September 14. Rodman, a United States women's national team winger and Olympic gold medalist, plays for the Spirit, whose loss dropped the club in ESPN's NWSL Power Rankings as Gotham FC took over the top spot. Shelton, an American, reached his first US Open final. - ESPN Soccer: https://www.espn.com/tennis/story/_/id/49934084/trinity-rodman-makes-soccer-game-watch-boyfriend-ben-shelton-us-open-final - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49937759/nwsl-power-rankings-gotham-fc-rise-top-spirit-slip READING ---------------------------------------------------------------- * Stratechery -- Pacing the Frontier, AI’s Digital Limits, AI Commissars Ben Thompson calls Dario Amodei's proposal to pace the AI frontier unrealistic and reads it as a bid for political control over who builds what. https://stratechery.com/2026/pacing-the-frontier-ais-digital-limits-ai-commissars/ * Ed Zitron -- Premium: The Hater's Guide To Broadcom Zitron dissects Broadcom under Chief Executive Hock Tan, starting with the coffee chat where Tan introduced his cost-stripping management style to VMware employees after the acquisition. https://www.wheresyoured.at/premium-the-haters-guide-to-broadcom/ * Cal Newport -- Superintelligence is a Fairy Tale. But Chasing It Can Still Cause Harm. Newport argues that superintelligence remains a myth, and that the industry's race toward it does real damage anyway, writing in response to Anthropic employees who said publicly that the systems they build could kill billions. https://calnewport.com/superintelligence-is-a-fairy-tale-but-chasing-it-can-still-cause-harm/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,655.43 ▼ -0.4% Dow 52,643.67 ▼ -1.1% Nasdaq 26,319.30 ▼ -0.1% WTI crude 96.62 ▲ +9.4% EUR/USD 1.1623 ▲ +0.2% GBP/USD 1.3534 ▲ +0.1% USD/JPY 154.32 ▼ -2.9% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 23 items in the 24-hour window. No recent items: Krebs on Security, Schneier on Security, Dark Reading, CISA Advisories, Ars Technica Security, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), 404 Media, Frank on Fraud, Wired Security. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh, Pittsburgh Magazine. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 8 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 30 items in the 72-hour window. No recent items: Guardian Olympics. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (293s of model time; $1.58 at API list price). ================================================================ Generated 2026-09-14 07:05 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================