================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, September 22, 2026 - 1:36 PM EDT ================================================================ Microsoft's Digital Crimes Unit tore down the AI-assisted EvilTokens phishing service and British police arrested two people, the same morning Cisco Talos revealed CLOSEDQUORUM, an implant that takes its orders from an AI chatbot with no operator at the keyboard. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Check Point rushed hotfixes for an exploited Security Management Server zero-day while Arista's 10.0-rated VeloCloud flaw, unpatched D-Link routers, and looted Zyxel switches kept edge gear burning. see: Check Point Management Servers Face an Exploited Zero-Day; VeloCloud Orchestrator and D-Link Routers Under Fire; Chinese-Speaking Crew Loots 996 Zyxel Switches * [TREND] Criminals are wiring chatbots into their tooling, from CLOSEDQUORUM steering its own command loop to Patrick Wardle showing how a flipped Meta Muse setting siphons dictated prompts. see: CLOSEDQUORUM Runs Its Own Command and Control; Patrick Wardle Turns Meta Muse Into a Backdoor * [UPDATE (new)] Microsoft's Digital Crimes Unit tore down EvilTokens and British police made arrests, while Japan dismantled its first North Korean laptop farm as allies tallied the WaterPlum crypto thefts. see: EvilTokens Phishing Service Falls to Microsoft; Japan Dismantles Its First North Korean Laptop Farm * [UPDATE (new)] Hackers told 404 Media they hold records on every FBI employee, with a reviewed 5,000-person sample carrying names, home addresses, and phone numbers. see: Hackers Claim Data on Every FBI Employee * [TREND] Trump threatened to annihilate Iran at the United Nations as Brent slid near $98, the EU delisted Fridman and Usmanov, and Ineos idled three Hull plants. see: Trump Threatens to Annihilate Iran at the United Nations; Iran Dangles a Hormuz Reopening and Brent Breaks Below $100; The EU Delists Fridman and Usmanov to Extend Its Russia Sanctions; Ineos Idles Three Hull Chemical Plants as Gas Prices Soar * [UPDATE (new)] Pittsburgh broke ground on Smithfield Street where Point Park paid $1.7 million, JCPenney closed at Ross Park Mall, and Pittsburgh International repeated as Airport of the Year. see: Smithfield Street Breaks Ground Downtown; Point Park Pays $1.7 Million on Smithfield Street; JCPenney Closes at Ross Park Mall; Pittsburgh International Wins Airport of the Year Again SECURITY ---------------------------------------------------------------- 1. CLOSEDQUORUM RUNS ITS OWN COMMAND AND CONTROL AI Security · [ai, malware, threat-intel] Latest developments: Cisco Talos released CAIRN, a research toolkit that classifies AI-integrated malware entirely from file metadata such as submitter, import hash, domain, and AI provider, with no download and no detonation, and used it on September 22, 2026 to surface CLOSEDQUORUM, a binary that drives its entire command and control loop through AI chatbots with no operator involvement. CLOSEDQUORUM is the first reported implant that decides its own next actions through a language model instead of waiting on a human handler, which moves large stretches of the attack chain off the attacker's keyboard. Talos published CAIRN so defenders can hunt for the same pattern in their own telemetry. - Cisco Talos: https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/ - Cisco Talos: https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware/ - Wired Security: https://www.wired.com/story/a-tool-for-tracking-ai-integrated-malware-uncovered-an-autonomous-command-system/ - Help Net Security: https://www.helpnetsecurity.com/2026/09/22/cairn-open-source-framework-ai-malware-closedquorum/ 2. VELOCLOUD ORCHESTRATOR AND D-LINK ROUTERS UNDER FIRE Vulnerabilities and Exploits · [zero-day, exploit, patch] Latest developments: Arista said on September 22, 2026 that attackers exploit CVE-2026-93952, a 10.0-rated flaw in on-premises VeloCloud Orchestrator that lets a remote attacker with no login reach internal functions and the orchestrator host; D-Link warned the same day of CVE-2026-86296, a maximum-severity zero-day in legacy DIR-822A dual-band Wi-Fi routers that carries public proof-of-concept code and no patch; and Dinh Ho Anh Khoa of Viettel Cyber Security published details showing that CVE-2026-65660, which Microsoft first filed as a 6.5 spoofing bug, gives an authenticated user remote code execution on SharePoint Server 2016, 2019, and Subscription Edition. VeloCloud Orchestrator manages the Edge devices in a VeloCloud SD-WAN, and only orchestrators that authenticate their Edges with certificates carry the flaw. Microsoft has shipped SharePoint patches, D-Link owners of DIR-822A hardware have no fix and should retire the devices. - The Hacker News: https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/ - The Hacker News: https://thehackernews.com/2026/09/sharepoint-flaw-initially-listed-as.html - The Hacker News: https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html 3. CHINESE-SPEAKING CREW LOOTS 996 ZYXEL SWITCHES Vulnerabilities and Exploits · [exploit, patch, kev] Latest developments: GreyNoise reported on September 21, 2026 that a Chinese-speaking threat actor has exploited CVE-2026-7273 since August to pull sensitive data off 996 unpatched Zyxel GS1900 Smart Managed Switches in 48 countries, and CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day with a federal patch deadline of Thursday, September 24, 2026. CVE-2026-7273 is a stack-based buffer overflow rated 8.8 in the Zyxel GS1900 line of Gigabit Ethernet switches that yields arbitrary operating system command execution; the compromised devices sit mostly in Italy, the United States, Taiwan, South Korea, and other European Union countries. Zyxel has shipped fixes, and CISA cataloged a Veeam flaw granting SYSTEM access alongside it. - Help Net Security: https://www.helpnetsecurity.com/2026/09/22/zyxel-switches-cve-2026-7273-vulnerability-exploited/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/ - The Hacker News: https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html - SecurityWeek: https://www.securityweek.com/recent-zyxel-switch-vulnerability-exploited-by-chinese-hackers/ 4. EVILTOKENS PHISHING SERVICE FALLS TO MICROSOFT Ransomware and Cybercrime · [phishing, law-enforcement, ai] Latest developments: Microsoft's Digital Crimes Unit led a takedown of EvilTokens on September 22, 2026 after the platform compromised more than 12,000 Microsoft accounts at over 10,000 organizations, and police in the United Kingdom arrested two people. EvilTokens sold device code phishing on Telegram for a $1,500 initiation fee plus $500 a month, pairing AI-written lures and automated infrastructure with token theft that walks past passwords, then helping buyers mine the stolen inboxes for fraud. Organizations should block device code authentication flows they do not use and hunt for unfamiliar token grants. - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/ - The Record: https://therecord.media/two-arrested-in-uk-after-microsoft-takedown-eviltokens - BleepingComputer: https://www.bleepingcomputer.com/news/security/eviltokens-phaas-disrupted-after-compromising-12-000-microsoft-accounts/ 5. WORDPRESS CORE YIELDS TWO PATHS TO SERVER CODE Vulnerabilities and Exploits · [patch, rce, cms] Latest developments: Researchers published technical details and a working proof-of-concept exploit for Click2Shell on September 21, 2026, and a second core flaw surfaced the same week: Comment2Shell, CVE-2026-93485, which WordPress fixed on September 17, 2026 in version 7.1.1. Click2Shell is a cross-site request forgery bug in WordPress core that installs and previews a theme when a logged-in administrator opens a crafted link, ending in remote code execution; Comment2Shell lets an anonymous visitor leave a comment carrying a hidden script that runs code on the server once an administrator views the page. Site owners should move to WordPress 7.1.1 now. - BleepingComputer: https://www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/ - The Hacker News: https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html - SecurityWeek: https://www.securityweek.com/wordpress-patches-click2shell-vulnerability/ 6. NIGHTMARE ECLIPSE DROPS A DEFENDER ZERO-DAY Vulnerabilities and Exploits · [zero-day, exploit, endpoint] Latest developments: Abdelhamid Naceri, a former employee of Microsoft Germany, revealed that they are the exploit leaker known as Nightmare Eclipse and Chaotic Eclipse, and over the weekend released another Microsoft Defender zero-day exploit, this one blocking the antivirus from taking updates. A machine whose Defender cannot pull updates runs on stale detection while an attacker works, and Microsoft has no fix out. Administrators should monitor Defender update status and signature age across their fleets. - SecurityWeek: https://www.securityweek.com/nightmare-eclipse-drops-new-microsoft-defender-exploit-after-revealing-identity/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates/ 7. JAPAN DISMANTLES ITS FIRST NORTH KOREAN LAPTOP FARM Nation-State Activity · [apt, cryptocurrency, law-enforcement] Latest developments: Japanese authorities took down the country's first North Korean laptop farm, SecurityWeek reported on September 22, 2026, as the United States, Japan, Germany, and Australia published a joint report on the WaterPlum campaign that counts funds or credentials taken from more than 7,000 cryptocurrency wallets. WaterPlum, the operation also tracked as Contagious Interview, poses as artificial intelligence and blockchain companies, recruits through fake job postings, and has infected at least 30,000 devices in more than 100 countries, moving $10.71 million in stolen cryptocurrency to North Korea. Web designers, engineers, and cryptocurrency specialists are the primary targets. - SecurityWeek: https://www.securityweek.com/japan-dismantles-first-north-korean-laptop-farm-as-us-and-allies-detail-wider-scheme/ - The Hacker News: https://thehackernews.com/2026/09/contagious-interview-campaign.html 8. PATRICK WARDLE TURNS META MUSE INTO A BACKDOOR AI Security · [ai, zero-day, macos] Latest developments: Security researcher Patrick Wardle released a proof-of-concept on September 21, 2026 showing that malware already running on a Mac flips one hidden Muse setting so that a user's dictated prompts travel to the attacker rather than to Meta, opening a second route into the assistant beyond the ClickFix hijack Ars Technica described. Muse is the artificial intelligence assistant Meta launched with extraordinarily broad access to its owner's machine, and Meta has not patched the flaw. Whoever takes the assistant inherits every permission its owner granted the app. - The Hacker News: https://thehackernews.com/2026/09/one-hidden-meta-muse-setting-could-let.html - Ars Technica Security: https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/ 9. CHECK POINT MANAGEMENT SERVERS FACE AN EXPLOITED ZERO-DAY Vulnerabilities and Exploits · [zero-day, exploit, patch] Latest developments: Check Point Software shipped emergency hotfixes on September 22, 2026 for a critical Security Management Server flaw that lets an attacker run arbitrary scripts, and confirmed that attackers already exploit it, four days after the company said it saw no sign of exploitation against the same product line. A Security Management Server holds the policy, logs, and credentials for an organization's entire Check Point firewall fleet, so code execution there reaches every gateway it manages. Administrators should install the hotfix immediately and review management server logs for unexplained script execution. - BleepingComputer: https://www.bleepingcomputer.com/news/security/check-point-patches-management-server-zero-day-exploited-in-attacks/ 10. HACKERS CLAIM DATA ON EVERY FBI EMPLOYEE Data Breaches · [breach, extortion] Latest developments: Hackers told 404 Media on September 22, 2026 that they hold records on every Federal Bureau of Investigation employee, and a sample of 5,000 alleged agents that 404 Media reviewed carries names, home addresses, phone numbers, and details about employees' spouses. The FBI has not confirmed the claim or named a source system for the records. Home addresses and family details on federal agents expose them and their households to physical risk well beyond ordinary identity theft. - 404 Media: https://www.404media.co/we-hacked-the-fbi-hackers-say-they-have-data-on-all-fbi-employees/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Trump Threatens to Annihilate Iran at the United Nations Latest developments: President Trump told the United Nations General Assembly Tuesday, September 22, that he could "annihilate" Iran, defended his decision to start the war, and predicted Tehran will strike a deal after the United States midterm elections. The speech ran campaign-style: Trump declared a "Golden Age of America," called international efforts to slow artificial intelligence a "globalist scheme," panned the British proposal to cede sovereignty over the Chagos Islands, and suggested he could use further military force against America's neighbors. Oil traders heard it alongside reports that Iran offered to reopen the Strait of Hormuz, and crude kept falling through the session. - FT Home: https://www.ft.com/content/1434496d-0eaf-4270-8ad3-87724cd3721e?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/politics/policy/trump-tells-u-n-he-is-confronting-world-threats-and-putting-america-first-5fe48626?mod=rss_worldnews - WSJ World News: https://www.wsj.com/world/five-takeaways-from-trumps-speech-to-the-united-nations-4f0ba7da?mod=rss_worldnews - FT Home: https://www.ft.com/content/16d676c9-94c4-4df1-8fa6-56966b2c9aa7 * The EU Delists Fridman and Usmanov to Extend Its Russia Sanctions Latest developments: The Financial Times reported Tuesday, September 22, that the European Union will strike Mikhail Fridman and Alisher Usmanov from its sanctions list under a deal that extends the bloc's Russia measures for three years. Fridman co-founded Alfa Group, Russia's largest private banking business, and Usmanov built a fortune in metals and telecommunications; each has fought his listing in the European courts since 2022. The trade frees European banks and asset managers to deal again with two of the largest individual Russian exposures on their books while the wider restriction regime runs three more years. - FT World: https://www.ft.com/content/760091dd-20be-4152-aa0d-561475a99ee8?syn-25a6b1a6=1 * Iran Dangles a Hormuz Reopening and Brent Breaks Below $100 Latest developments: Oil fell for a fifth straight session Tuesday, September 22, reaching roughly $98 a barrel after Saudi Arabia signaled it will reopen the East-West pipeline, shut for two weeks by drone strikes, and after reports that Iran offered to reopen the Strait of Hormuz within seven days if the United States eases military pressure. The offer surfaced as world leaders gathered at the United Nations General Assembly, where President Trump spoke Tuesday morning. Markets swung with it: the dollar touched a seven-week high against a basket of currencies before giving the move back, gold traded inside a $4,300 to $4,400 range, Treasury yields slipped, and a global rally in artificial intelligence shares stalled. Hormuz carries roughly a fifth of the world's seaborne oil, and the diesel and inflation shock running through American prices hangs on whether the waterway opens. - WSJ World News: https://www.wsj.com/world/middle-east/oil-prices-rise-as-hormuz-shipping-risks-persist-363fbeb1?mod=rss_worldnews - FT Home: https://www.ft.com/content/5b4f8738-3b93-40c8-88d6-08c8ea684e83?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-edges-higher-focus-on-signs-of-diplomacy-in-mideast-conflict-2712f57a?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/stocks/ai-stock-rally-loses-steam-oil-prices-turn-negative-e19323a8?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/livecoverage/stock-market-today-dow-sp-500-nasdaq-09-22-2026?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/currencies/asian-currencies-mixed-on-hopes-for-u-s-iran-negotiations-95e21ec2?mod=rss_markets_main * Xi Brings Taiwan to the Summit With Trump Latest developments: Washington and Beijing agreed to open an "AI dialogue" ahead of the summit, the Financial Times reported Tuesday, September 22, and the Wall Street Journal reported the same morning that Chinese chief executives will likely skip the meeting, a sign both sides expect little business to come out of it. Chinese leader Xi Jinping goes into his coming summit with President Trump aiming first to extend the trade truce between the two economies, and he also plans to raise Taiwan, Iran, and the race to dominate artificial intelligence. Beijing quietly helped stage the mainland visit of Taiwan's opposition leader and reads Trump as a rare window to persuade the island that resistance is futile. Trump addressed the United Nations General Assembly Tuesday morning on wars, tariffs, and energy before the China talks. - WSJ World News: https://www.wsj.com/world/china/trump-xi-taiwan-f236f228?mod=rss_worldnews - FT Home: https://www.ft.com/content/9bea08f4-c9e8-450a-9d0f-0af0bf47b64e?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/china/before-the-trump-xi-summit-an-insiders-read-on-how-beijing-sees-taiwan-3f2f5535?mod=rss_worldnews - WSJ US Business: https://www.wsj.com/articles/trumps-u-n-speech-and-china-talks-put-tariffs-ai-and-energy-in-focus-36a90be6?mod=pls_whats_news_us_business_f - WSJ World News: https://www.wsj.com/world/china/trump-summit-with-xi-unlikely-to-include-chinese-ceos-7a9e90dd?mod=rss_worldnews - FT World: https://www.ft.com/content/cf151ce7-b284-4f8a-94e9-e27c4228a174?syn-25a6b1a6=1 * Ineos Idles Three Hull Chemical Plants as Gas Prices Soar Latest developments: Ineos, the conglomerate Jim Ratcliffe owns, suspended production at three chemical plants in Hull on Tuesday, September 22, as the oil and gas price surge touched off by the war with Iran made the factories uneconomic to run. The three plants employ 300 people, and the shutdown marks the energy shock moving from prices into shuttered European industrial capacity. Bank of America told clients the same morning that higher-for-longer natural gas prices on the continent will lift European utilities' earnings, the mirror image of the squeeze crushing gas-hungry manufacturers. - FT Markets: https://www.ft.com/content/7c176006-9ec9-4083-933f-3d5cf2752e6b - WSJ Markets: https://www.wsj.com/finance/stocks/nikkei-could-rally-on-modest-catalysts-as-shorts-pile-up-39640022?mod=rss_markets_main * DWS Weighs Emergency Curbs on Its German Property Fund Latest developments: The Financial Times reported Tuesday, September 22, that DWS, the asset manager Deutsche Bank controls, is considering emergency measures to limit withdrawals from its open-ended German real estate fund as retail investors pull money out. Open-ended property funds promise daily liquidity against buildings that take months to sell, and gating one of Germany's largest such retail products would mark the sharpest sign yet of strain in European commercial real estate. Investors across the German market have been redeeming steadily as valuations fall and financing costs stay high. - FT World: https://www.ft.com/content/d773c1d5-b515-48d7-9713-14c253972e3a?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Chance Rain Showers, high 64F. Tonight: Chance Rain Showers, low 55F. Wednesday: Chance Rain Showers then Partly Sunny, high 65F. Business: * Pittsburgh International Wins Airport of the Year Again Latest developments: Air Transport World named Pittsburgh International Airport its 2027 Airport of the Year, KDKA and Pittsburgh Magazine reported Tuesday, September 22. Pittsburgh International took the same award in 2017, the first United States airport to win it, and now becomes the first American airport to win it twice. The honor arrives while the Findlay Township airport works to rebuild passenger traffic lost when Spirit Airlines shut down in May. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-international-named-airport-of-the-year-by-air-transport-world/ - Pittsburgh Magazine: https://www.pittsburghmagazine.com/pittsburgh-international-airport-airport-of-the-year-2027/ * JCPenney Closes at Ross Park Mall Latest developments: TribLive reported Tuesday, September 22, that the JCPenney at Ross Park Mall has closed, taking with it the last of the mall's original anchor stores. Ross Park Mall, in Ross Township north of Pittsburgh, now operates without any of the anchors it opened with. Three JCPenney stores remain in the immediate Pittsburgh area. - TribLive: https://triblive.com/local/north-hills/ross-park-mall-loses-final-original-anchor-with-closing-of-jcpenney/ * Point Park Pays $1.7 Million on Smithfield Street Latest developments: WPXI reported Tuesday, September 22, that Point Park University paid $1.7 million for a nearly vacant three-story commercial building in the middle of Smithfield Street downtown, according to public transaction records. Point Park's campus already occupies a cluster of buildings around Wood Street and Boulevard of the Allies in downtown Pittsburgh. The purchase puts more of Smithfield Street in university hands as the city starts its reconstruction of that street between Liberty Avenue and Fort Pitt Boulevard. - WPXI: https://www.wpxi.com/news/local/heres-what-point-park-university-paid-its-new-building-smithfield-street-downtown/DNCJRJLXWJDGHKJJTNTNA7QP4A/ * Tandem Foods Expands in Allegheny County Latest developments: Governor Josh Shapiro announced Tuesday, September 22, a $42 million expansion by the nutritional snack food manufacturer Tandem Foods in Allegheny County. Tandem Foods will add 83 jobs and hold onto 446 existing full-time positions over the next three years under the project. The expansion lands as Pennsylvania courts food manufacturers, among them Chobani's new Lehigh Valley plant. - WPXI: https://www.wpxi.com/news/local/gov-shapiro-announces-42m-expansion-project-by-tandem-foods-allegheny-county/RHAKLNNIJJAOZNYGR5OI6JCWZU/ * Home Heating Oil Prices Balloon Across Western Pennsylvania Latest developments: The Post-Gazette reported Tuesday, September 22, that home heating oil prices across Western Pennsylvania have ballooned heading into winter, with one customer saying, "I might not make it." Roughly one in ten Pennsylvania households burns oil for heat, and the distillate squeeze that carried the average United States diesel price above $6.50 a gallon feeds the same barrel into home furnaces. Households on fixed incomes in rural Westmoreland, Armstrong, and Indiana counties, where natural gas lines never reached, absorb the increase directly. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/money/2026/09/22/western-pennsylvania-home-heating-oil-prices/stories/202609150058 * Chobani's Lehigh Valley Plant Needs Pennsylvania Milk Latest developments: The Post-Gazette reported Tuesday, September 22, that state officials call Chobani's new Lehigh Valley plant a game-changer for Pennsylvania dairy and now need farmers to supply it. Governor Josh Shapiro, Agriculture Secretary Russell Redding, and Community and Economic Development Secretary Rick Siger courted the yogurt maker to Pennsylvania, and filling the plant's tanks depends on dairy farms that have been shrinking in number for two decades. Pittsburgh's Turner Dairy figures in the supply picture. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/pittsburgh-company-news/2026/09/22/chobani-lehigh-valley-turner-dairy-shapiro-siger-redding/stories/202609160003 * Rural King Looks at Hillcrest Shopping Center in Lower Burrell Latest developments: TribLive reported Tuesday, September 22, that the farm-and-home chain Rural King is eyeing the Hillcrest Shopping Center in Lower Burrell for a new store. Rural King sells livestock feed, tools, clothing, and hardware, and a Lower Burrell location would give the Alle-Kiski Valley a single stop for home, clothing, and farming goods. Hillcrest Shopping Center sits along Leechburg Road in Westmoreland County. - TribLive: https://triblive.com/local/valley-news-dispatch/rural-king-eyeing-hillcrest-shopping-center-in-lower-burrell-for-new-location/ Around town: * Smithfield Street Breaks Ground Downtown Latest developments: City officials held the groundbreaking Tuesday, September 22, for the Smithfield Street reconstruction, which covers the stretch from Liberty Avenue to Fort Pitt Boulevard in downtown Pittsburgh. The project redesigns the street end to end and brings traffic and bus detours through the heart of downtown for about two years. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-smithfield-street-reconstruction-project/ - WPXI: https://www.wpxi.com/news/local/groundbreaking-held-smithfield-street-reconstruction-project-downtown-pittsburgh/57JZWI4C4JFSFDT3KQ3RKBMW44/ * Transit Proposes Seven-Day Service Between Harrison and New Kensington Latest developments: TribLive reported Tuesday, September 22, that Pittsburgh Regional Transit has proposed a bus connection running seven days a week between Harrison Township in Allegheny County and New Kensington in Westmoreland County. The two Allegheny River communities sit across the county line from each other in the Alle-Kiski Valley, and transit leaders describe the link as part of a round of proposed route changes. - TribLive: https://triblive.com/local/valley-news-dispatch/pittsburgh-regional-transit-proposal-creates-7-day-service-between-harrison-and-new-kensington/ * Upstream Rebuilds the Creek Under Fern Hollow Latest developments: TribLive reported Tuesday, September 22, on the work to restore the Fern Hollow ecosystem in Pittsburgh's Frick Park more than four years after the bridge came down. Mike Hiller had just taken over as executive director of Upstream, a Pittsburgh group that works on urban waterways, when the Fern Hollow Bridge collapsed on January 28, 2022, dropping tons of steel into the creek below and damaging its ecosystem. - TribLive: https://triblive.com/local/environmentalists-work-to-restore-fern-hollow-ecosystem-after-bridge-collapse/ * Pennsylvania Creates Teaches Teenagers to Use AI Latest developments: TribLive reported Tuesday, September 22, on Pennsylvania Creates, an initiative that aims to make teenagers artificial intelligence literate and responsible in their use of it. West Allegheny High School senior Trevor Manno, who leans on the tools for schoolwork, describes their usefulness firsthand. The program arrives as Pittsburgh universities bargain over guardrails for the same technology in their classrooms. - TribLive: https://triblive.com/news/education-classroom/pennsylvania-creates-initiative-aims-to-make-teenagers-ai-literate-and-responsible/ * Westmoreland County Gives Away Narcan Next Week Latest developments: TribLive reported Tuesday, September 22, that Westmoreland County officials will blanket the region with free doses of the overdose-reversing drug naloxone during an annual statewide prevention event next week. The giveaway rides on Pennsylvania's yearly prevention push, and county officials want the medication in as many hands as they can reach across Westmoreland's boroughs and townships. - TribLive: https://triblive.com/local/westmoreland/free-narcan-doses-available-in-westmoreland-county/ * The Flood Watch Runs to Wednesday Morning on the First Day of Fall Latest developments: The Post-Gazette reported Tuesday, September 22, that the flood watch will likely expire Tuesday morning for Allegheny County with a dry week behind it, while the watch holds through 8 a.m. Wednesday, September 23, for other parts of Southwestern Pennsylvania, and WTAE marked Tuesday and Wednesday as Impact Days. Thick clouds and an east wind hold highs in the low 60s Tuesday and Wednesday, with scattered rounds of showers rather than all-day washouts. Washington County residents along a swollen creek told WTAE they expect another round of flooding after two straight weekends of high water, one saying, "My trailer might go down the creek next." - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/09/22/flood-watch-likely-to-expire-tuesday-morning-for-allegheny-county-dry-week-ahead/stories/202609220026 - TribLive: https://triblive.com/local/regional/flood-watch-extended-for-southwestern-pa-to-midweek/ - WTAE: https://www.wtae.com/article/impact-day-more-rain-with-a-flood-watch-for-southwestern-pa/73815572 - WTAE: https://www.wtae.com/article/pennsylvania-flooding-creek-swells-washington-county/73829099 - KDKA: https://www.cbsnews.com/pittsburgh/news/cooler-temperatures-in-place-today-for-the-first-day-of-fall-in-the-pittsburgh-area/ * Sto-Rox Climbs Out of the Red Latest developments: The Post-Gazette reported Tuesday, September 22, that the Sto-Rox School District has balanced its books after years of financial struggle. Sto-Rox, which serves McKees Rocks and Stowe Township in Allegheny County, has spent years among the most financially distressed districts in Western Pennsylvania, running deficits that drew state scrutiny and repeated warnings about its ability to stay solvent. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/09/22/sto-rox-school-district-budget/stories/202609170039 * Pitt's Faculty Union Bargains Over AI Teachers Latest developments: PublicSource reported Tuesday, September 22, that college unions in Pittsburgh are writing protections against artificial intelligence teachers and evaluators into their contract talks. Tyler Bickford, president of the University of Pittsburgh faculty union, said universities have moved fast to adopt AI tools with what he called "much more kind of inconsistent thinking and policy development about guardrails," leaving open whether software grades student work or stands in for instructors. - PublicSource: https://www.publicsource.org/pitt-unions-ai-bargaining/ Events: * CCAC Turns 60 With a North Side Festival Latest developments: WPXI reported Tuesday, September 22, that the Community College of Allegheny County will hold a festival Saturday, September 26, for its 60th anniversary, with street closures on Pittsburgh's North Side taking effect Friday. The celebration centers on CCAC's Allegheny Campus on the North Side. Drivers should expect closed streets around the campus from Friday through the event Saturday. - WPXI: https://www.wpxi.com/news/local/street-closures-planned-pittsburghs-north-side-ccacs-60th-anniversary-celebration/PGAD53LXVZEPXFJ3BIGIANAB7Y/ * Wiz Khalifa Opens the Wylie in the Hill District Latest developments: Wiz Khalifa told Pittsburgh City Paper in an interview published Tuesday, September 22, that he will open the Hill District's new venue, Citizens Live at The Wylie, on Friday, October 2, promising "lots of energy and a lot of weed smoke." The Pittsburgh rapper, who grew up in the city and broke through with "Black and Yellow," headlines the first show at Citizens Live at The Wylie, the new concert hall on Wylie Avenue in the Hill District. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/music/wiz-khalifa-citizens-live-at-the-wylie/ * Backyard Docs Spreads Across Several Venues Latest developments: Pittsburgh City Paper reported Tuesday, September 22, that the Backyard Docs Film Festival, which started as a do-it-yourself backyard screening series, has grown into a multi-day event running at several Pittsburgh venues. This year's program takes up labor fights, immigration enforcement in the courts, a campaign to stop a pipeline, a fresh look at the East Palestine derailment, and a popular local haunt with a grim history. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/backyard-docs-highlights-labor-issues-ice-in-the-courts-and-more/ * October Fills With Oktoberfests, Apples, and Giant Pumpkins Latest developments: The Post-Gazette published its October food calendar Tuesday, September 22, listing Oktoberfest celebrations, apple harvest events, and giant pumpkin weigh-offs across the Pittsburgh region. Pittsburgh City Paper's food column the same morning reported that Oktoberfest season has opened around the city and that the Pleasure Bar has closed. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/09/22/october-food-events/stories/202609270029 - Pittsburgh City Paper: https://www.pghcitypaper.com/food-drink/oktoberfest-kicks-off-pleasure-bar-closes-and-more-pittsburgh-food-news/ SPORTS ---------------------------------------------------------------- Pirates (79-77) Up Next · Cardinals @ Pirates · Tue Sep 22, 6:40 PM https://plaintextsports.com/mlb/2026-09-22/stl-pit Steelers (1-1, T-2nd in AFC North) Up Next · Bengals @ Steelers · Sun Sep 27, 1:00 PM https://plaintextsports.com/nfl/2026/teams/pittsburgh-steelers Around the Teams: * Beazley Fields Pirates Questions Latest developments: Post-Gazette beat writer Colin Beazley held his Pirates chat Tuesday, September 22, taking reader questions with ace Paul Skenes among the subjects. The chat follows the Pirates' elimination from playoff contention on Saturday, September 19, and Skenes' interview with the paper describing the struggles that marked his 2026 season and the part the World Baseball Classic played in them. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/09/22/colin-beazley-live-chat-mlb-paul-skenes/stories/202609220028 * Week 2 Grades Fall Hardest on Rodgers and the Line Latest developments: The Post-Gazette published its Week 2 grades Tuesday morning, September 22, handing poor marks to quarterback Aaron Rodgers, receiver DK Metcalf, and the offensive line after the trip to New England. The grades follow a week in which the Steelers' offense produced almost nothing at Gillette Stadium, head coach Mike McCarthy took the blame publicly, and the team began weighing changes up front, with rookie tackle Max Iheanachor in the conversation. Pittsburgh hosts the Cincinnati Bengals Sunday, September 27, at 1 p.m. ET on CBS. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/22/steelers-week2-grades-rodgers-metcalf-offensive-line/stories/202609220016 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/21/joey-porter-contract-max-iheanachor/stories/202609210038 * SNR Drive Takes Apart the Trip to Foxborough Latest developments: Matt Williamson and Wes Uhler spent Monday evening's SNR Drive, posted September 21 on the Steelers' channel, working through the Week 2 game at New England, with Steelers radio voice Rob King calling into the show. The pair opened with first impressions of the offense, brought King on for roughly 25 minutes, returned to the game, then ran through the rest of the league's Week 2 results and Monday night's game. The Steelers host the Cincinnati Bengals at Acrisure Stadium Sunday, September 27, at 1 p.m. ET on CBS. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=ubHFY0RmqJI * Louis Lipps Cooks Louisiana Food on the North Shore Latest developments: The Post-Gazette profiled former Steelers receiver Louis Lipps on Tuesday, September 22, and printed the recipes he brings to his tailgate outside Acrisure Stadium. Lipps, who grew up in Louisiana and caught passes for the Steelers from 1984 through 1991, feeds his tailgate crowd the food he was raised on before home games on the North Shore. - Post-Gazette Steelers: https://www.post-gazette.com/life/food/2026/09/22/tailgating-steelers-louis-lipps-acrisure-stadium-pittsburgh-recipes/stories/202609270022 Team USA: * Pepi Calls His Injury a Minor Setback Latest developments: Ricardo Pepi said Tuesday, September 22, that the injury that took him out of PSV Eindhoven's match amounts to a "minor setback" and that his recovery has already begun. The United States striker came off hurt Sunday, September 20, and Damion Downs took his place on Mauricio Pochettino's roster for four coming friendlies. Pepi aims to return to action with his club in the Netherlands. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50006307/united-states-ricardo-pepi-calls-injury-minor-setback-recovery-started * The USWNT Pipeline Draws Alarms Latest developments: ESPN published an assessment Tuesday, September 22, asking whether the United States women's national team's grip on the world game is slipping as its youth sides keep losing. The piece follows a run of poor results at the under-20 and under-17 levels, among them Brazil's penalty-shootout elimination of the United States in the round of 16 at the Under-20 Women's World Cup, and weighs how much of the alarm the numbers actually support. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50000963/is-uswnt-talent-pipeline-risk-running-dry READING ---------------------------------------------------------------- * Stratechery -- Amazon Blocks Muse, Amazon’s Moat, Aggregator v Aggregator Ben Thompson argues Amazon's move to block the AI agent Muse was predictable, and that the two sides still have room to strike a deal because Amazon's warehouses, delivery network, and physical-world investments amount to a moat artificial intelligence cannot cross on its own. https://stratechery.com/2026/amazon-blocks-muse-amazons-moat-aggregator-v-aggregator/ * Ed Zitron -- Premium: The Hater's Guide To AI Debt (Part 1) Zitron traces how hyperscalers finance their graphics-processor buildouts, arguing that the debt piling up behind the AI boom rests on revenue that has yet to appear. https://www.wheresyoured.at/premium-the-haters-guide-to-ai-debt-part-1/ * Cal Newport -- Superintelligence is a Fairy Tale. But Chasing It Can Still Cause Harm. Newport dismisses the notion that current systems lead to a superintelligence capable of killing billions, a claim Anthropic employees floated publicly, and argues that the race to build it does real damage regardless. https://calnewport.com/superintelligence-is-a-fairy-tale-but-chasing-it-can-still-cause-harm/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,638.10 = +0.0% Dow 51,812.90 ▼ -1.2% Nasdaq 26,404.59 ▲ +0.6% WTI crude 101.25 ▲ +2.7% EUR/USD 1.1502 ▼ -1.0% GBP/USD 1.3421 ▼ -0.8% USD/JPY 155.77 ▲ +1.3% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 71 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Graham Cluley, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 9 items in the 120-hour window. No recent items: NEXTpittsburgh Events, NEXTpittsburgh Arts & Entertainment. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Not Just Football with Cam Heyward, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 25 items in the 72-hour window. No recent items: Guardian Olympics. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (347s of model time; $2.21 at API list price). ================================================================ Generated 2026-09-22 13:36 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================