Suspected state-sponsored crews spent September inside Citrix NetScaler appliances while Cisco Catalyst SD-WAN Manager, Zimbra, and MikroTik RouterOS joined the list of internet-facing systems an attacker reaches with no password.
Emerging Trends and Key Updates
- Trend Serious intrusions keep entering through the network edge, with NetScaler yielding WHIPSHOT, a Cisco Catalyst SD-WAN Manager zero-day now in CISA's catalog, and WatchGuard Fireware patching 15 bugs.
- Trend Artificial intelligence sits on both sides of the flaw pipeline: Google counts 10,000 monthly disclosures, coding agents leak 13,000 screenshots, and an agent breached the Dutch Institute.
- Trend Attackers keep riding trusted software, poisoning OpenInfra's Artifactory alongside 101 npm packages and passing MSP360 remote monitoring installers through phishing lures to open back doors.
- Update · updated Washington moved on AI accountability Wednesday, as the FTC opened an investigation into OpenAI and Anthropic while Trump announced a voluntary White House super intelligence accord.
- Update · new Locally, Mayor Corey O'Connor sent Council a no-tax-increase 2027 budget with deep cuts, Pennsylvania confirmed a fifth measles death, and IBEW Local 29 threatened a midnight strike.
- Update · new Paramount raised a record $52 billion for Warner Bros. Discovery the same day the 10-year Treasury yield closed above 5.3%, its highest in 24 years.
Security
1. NetScaler Exploitation Yields WHIPSHOT and SLAPSHOT
Latest developments: Charles Carmakal, chief technology officer at Mandiant, said on September 30, 2026 that advanced and suspected state-sponsored actors likely ran the first targeted intrusions through CVE-2026-88772 beginning in early September 2026, and counted dozens of victims across North America and Europe in government, financial services, technology, education, and legal and professional services; Mandiant Consulting and Google Threat Intelligence Group named the tooling—web shells they call WHIPSHOT and tunneling malware they call SLAPSHOT—and researchers published the mechanics of the 9.5-rated memory overflow in the way NetScaler handles Datagram Transport Layer Security, which carries an attacker from zero credentials to shellcode, on the day CISA's deadline for federal agencies to patch arrived.
read more
Citrix fixed CVE-2026-88771 and CVE-2026-88772 in NetScaler ADC and NetScaler Gateway after weeks of zero-day attacks that reach appliances running the default configuration. Attackers take root, harvest credentials, and pivot into internal networks, so patch the appliances, rotate secrets, and hunt for web shells and new accounts.
Sources: The Hacker News · The Hacker News · Help Net Security · Unit 42 (Palo Alto) · ↑ top
2. Cisco SD-WAN Manager Zero-Day Draws Attacks
Latest developments: CISA added CVE-2026-76504, the hex encoding flaw in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog on September 30, 2026, hours after Cisco warned that attackers already drive the Manager API as the administrator with no login and shipped fixed releases carrying no workaround; Microsoft Threat Intelligence published observed attack paths, detections, and mitigations for CVE-2026-73570, the 8.9-rated unauthenticated command injection that attackers reach through Simple Network Management Protocol handling on internet-facing Zimbra Collaboration Suite servers to plant web shells and read mailbox data, and CISA warned the same day of a critical pre-authentication remote code execution flaw in MikroTik RouterOS that also crashes the router.
read more
Three internet-facing systems—Cisco Catalyst SD-WAN Manager, MikroTik RouterOS, and Zimbra—now carry flaws an attacker triggers with no credentials, and two of the three sit in the management path for an entire network. Install the fixed Cisco releases now, update RouterOS, and comb Zimbra logs for command injection.
Sources: The Hacker News · BleepingComputer · BleepingComputer · Microsoft Security Blog · ↑ top
3. UAT-11587 Delivers the Antino Backdoor Across Asia
Latest developments: Ukraine's State Service of Special Communications and Information Protection warned on September 30, 2026 that Russian operators now go after iPhones as well as Android phones, naming a hit-and-run iPhone exploit kit called DarkSword; Cisco Talos disclosed the same day a China-nexus cluster it tracks as UAT-11587 that hits government and policy organizations in Taiwan, India, the Philippines, and Cambodia with a previously undocumented backdoor that developer artifacts in the code call Antino, and SecurityWeek and The Record reported that Russia's Star Blizzard, the FSB-linked crew Microsoft has watched since January 2026, dropped ClickFix in favor of its RedFlick delivery chain and now runs larger phishing campaigns to install the CosmicPulse backdoor at nongovernmental organizations, think tanks, and journalists tied to Ukraine.
read more
Three state-linked campaigns now carry named payloads: Antino against Asian government and policy bodies, CosmicPulse against organizations tied to Ukraine, and DarkSword against iPhones. All three start with phishing, so hunt on the indicators Talos, Microsoft, and the Ukrainian agency published.
Sources: Cisco Talos · SecurityWeek · The Record · The Record · ↑ top
4. WatchGuard, TeamViewer, and the Browsers Patch Together
Latest developments: WatchGuard shipped fixes on September 30, 2026 for 15 code execution, denial-of-service, authorization, and path traversal bugs in Fireware OS, one of them a critical code injection flaw; TeamViewer told customers on Tuesday, September 29, 2026 to patch high-severity vulnerabilities in its client and host software "as soon as possible"; Google and Mozilla closed more than 100 vulnerabilities across Chrome and Firefox, some of which let a remote attacker run code or escape the browser sandbox; and OpenSSL fixed a high-severity Datagram Transport Layer Security flaw that leaks heap memory unencrypted to the far side of a connection or crashes the program, alongside roughly a dozen patches in WolfSSL.
read more
The week's patches land on the firewall, the remote-support client, the browser, and the cryptographic libraries underneath all of them. Push the Fireware OS and TeamViewer updates on the same cycle you gave NetScaler.
Sources: SecurityWeek · BleepingComputer · SecurityWeek · SecurityWeek · ↑ top
5. Who Answers for What an AI Agent Does
Latest developments: President Donald Trump said top technology firms signed a White House accord on so-called super intelligence that asks them to add controls and oversight over artificial intelligence safety, built on four voluntary steps and leaving the door open to later regulation; Anthropic flagged the liability risk its customers carry when autonomous agents act on their own, SecurityWeek reported on September 30, 2026, as the California nonprofit suit against OpenAI over the Hugging Face hack moves the question into court, and Bruce Schneier argued the press should drop the "going rogue" framing for what he calls genie behavior, which puts responsibility back on whoever wrote the prompt.
read more
Agents that break into systems while performing ordinary tasks now generate lawsuits and insurance questions with no settled answer on who pays. Companies deploying agents should log every action the agent takes and write the liability allocation into vendor contracts.
Sources: SecurityWeek · SecurityWeek · Dark Reading · Schneier on Security · ↑ top
6. Phishing Crews Turn RMM Tools Into Back Doors
Latest developments: Microsoft detailed on September 30, 2026 how phishing campaigns pass the legitimate MSP360 remote monitoring and management installer under a deceptive file name through meeting invitations, PDF-themed lures, and fake software update prompts, then add ScreenConnect for a second independent channel into the same host; ANY.RUN traced a United States-focused campaign it calls CSuite across 351 sandbox analyses, 51 percent of them submitted from the United States, that steals Microsoft 365 sessions and drops remote-access tooling at technology, manufacturing, government, and consulting organizations, and Sophos tied TerminalFix and the Lorem Ipsum Loader, which set up covert tunneling, to a broader campaign that previously used a different delivery method.
read more
Legitimate administration software carries valid signatures and rarely trips endpoint controls, so an attacker who installs it keeps access after the stolen session expires. Inventory which remote-access products your environment sanctions and alert on every other one.
Sources: The Hacker News · Microsoft Security Blog · The Hacker News · Sophos News · ↑ top
7. AI Coding Agents Publish 13,000 Internal Screenshots
Latest developments: Glow Labs reported on September 30, 2026 that AI coding agents told to show that a user-interface fix works post the screenshots to public GitHub repositories: researchers found more than 13,000 internal images from developers at over 300 organizations, spread across more than 900 repositories, holding customer billing records and screens of features the companies have yet to release, most of them under developers' personal accounts; BleepingComputer reported the same day that more than 543,000 credentials sitting in public GitHub repositories still worked in July despite the platform's leak-prevention controls.
read more
Agents treat a public repository as scratch space for review evidence, so whatever appears on a developer's screen becomes searchable, and the credentials developers commit stay live for months. Audit personal and organizational GitHub accounts for agent-uploaded images, restrict where coding agents may write, and rotate every exposed key.
Sources: Help Net Security · The Hacker News · BleepingComputer · ↑ top
8. An AI Agent Breaches the Dutch Institute for Vulnerability Disclosure
Latest developments: The Dutch Institute for Vulnerability Disclosure said on September 30, 2026 that the attacker chained two zero-day vulnerabilities in the open-source Zammad ticketing system to get into the volunteer nonprofit's network, naming the entry point for the AI-driven intrusion it earlier called "loud and very, very messy," and Dark Reading detailed a patched Unsloth Studio vulnerability that lets a malicious AI model execute arbitrary Python code during routine inspection by way of the trust_remote_code setting.
read more
Automated agents now run intrusions noisily enough to leave heavy forensic trails, and they reached this victim through unknown flaws in a help-desk application. Patch Zammad, treat downloaded models as untrusted code, and keep trust_remote_code off.
Sources: BleepingComputer · BleepingComputer · Dark Reading · ↑ top
9. Google Counts 10,000 Vulnerability Disclosures a Month
Latest developments: Google researchers reported on September 30, 2026 that vulnerability disclosures doubled over the course of the year to more than 10,000 each month, and that the flaws artificial intelligence discovers carry remote code execution more often than the ones humans find.
read more
Machine-assisted bug hunting pushes more severe vulnerabilities into the public record faster than patch cycles absorb them, which widens the window attackers work in. Rank remediation by exploitability and the CISA Known Exploited Vulnerabilities catalog rather than by disclosure date.
Sources: The Record · SecurityWeek · ↑ top
10. Attackers Poison OpenInfra's Artifactory and 101 npm Packages
Latest developments: OpenInfra Europe, the regional hub of the OpenInfra Foundation, posted a notice on its homepage on September 30, 2026 saying an attacker compromised the self-hosted JFrog Artifactory instance it runs at artifactory.nordix.org, and told anyone who downloaded or installed artifacts from that server between August 28 and September 15, 2026 to stop using them, pull them out of their pipelines, and treat the packages as compromised; OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko separately counted 101 malicious npm packages that abuse the open-source Baileys WhatsApp project to add developers to WhatsApp groups without consent, a campaign they call PhantomSub.
read more
Both attacks target the registries developers pull from rather than the code they write, so a single poisoned artifact reaches every build that fetched it. Audit dependency caches and continuous integration logs for the Nordix window and remove the flagged npm packages.
Sources: Help Net Security · The Hacker News · ↑ top
Business and Politics
Paramount Borrows a Record $52 Billion for Warner Bros.
Latest developments: A federal judge approved Paramount's antitrust settlement with 12 states led by California on Wednesday, September 30, clearing the $81 billion purchase of Warner Bros. Discovery, and investors piled into a record-breaking $52 billion financing package at yields approaching 9%.
read more
Paramount funds the largest media acquisition on record in a bond market where 10-year Treasury yields sit above 5.3%, and the borrowing cost it accepted sets the mark for leveraged finance. The company named Mattel Chairman Ynon Kreiz co-chief executive to run day-to-day management and integrate the two studios, and Conde Nast Chief Executive Roger Lynch leaves to take over Mattel.
Sources: WSJ US Business · FT Home · FT Home · WSJ US Business · ↑ top
Trump Demands Powell's Resignation
Latest developments: The Federal Reserve's inspector general cited "deficiencies" in the management of the $2.5 billion headquarters renovation Wednesday, September 30, found no evidence of criminal wrongdoing by former chair Jerome Powell, and President Trump responded by saying Powell should resign.
read more
Trump has used the renovation for more than a year as his lever against Powell and the Federal Reserve's leadership. The demand lands as the bond market prices further rate increases and the 10-year Treasury yield reaches a 24-year high, putting the question of who sets American monetary policy back in front of investors.
The Bond Selloff Resumes on Strong Growth Data
Latest developments: The 10-year Treasury yield closed above 5.3% Wednesday, September 30, a level last seen 24 years ago, capping a half-point monthly rise and the worst month for United States government debt in four years, which the Financial Times described as a "vicious loop" of forced selling, even after revised figures put second-quarter growth at 2.2% and August personal consumption expenditures inflation came in below forecasts.
read more
Long-term United States borrowing costs now sit near turn-of-the-century levels, and the softer inflation print eases pressure on the Federal Reserve to raise rates again at its October meeting. Stocks ended modestly lower as technology shares lifted the Nasdaq composite, natural gas futures finished the quarter down 7.6% at $3.026 per million British thermal units, and Comex gold ended the quarter 3.3% higher at $4,155.60 an ounce.
Sources: FT World · FT World · WSJ World News · FT Home · WSJ Markets · ↑ top
Regulators Close In on the AI Build-Out
Latest developments: The Federal Trade Commission confirmed Wednesday, September 30, that it has opened an investigation into OpenAI, Anthropic, and other artificial intelligence companies over the dangers their technology poses to consumers, and the Wall Street Journal reported that Nvidia Chief Executive Jensen Huang and other executives privately challenged Anthropic's Dario Amodei at Tuesday's White House lunch for sounding alarms about the technology.
read more
The Bank of England's governor said supervisors "cannot stand aside" and assume the artificial intelligence industry will resolve the stability risks its debt-funded build-out creates for the financial system. The Federal Trade Commission will demand information from the leading companies and seek testimony from their executives, two days after President Trump announced a voluntary self-regulation accord with those same chief executives.
Sources: FT Markets · FT Home · FT Home · WSJ US Business · ↑ top
Britain Ties Iran to the RAF Fairford Plot
Latest developments: Prime Minister Andy Burnham said Wednesday, September 30, that "strong indications" point to Iranian involvement in the foiled plot at RAF Fairford, and that his government works closely with the Trump administration on the case.
read more
British counter-terrorism officers arrested five men, all British nationals in their twenties living in London, beside the Gloucestershire air base on September 27 on suspicion of preparing a terrorist act, then released them on bail. The base has flown missions in the campaign against Iran, and Iran's embassy in London denies any involvement.
Sources: WSJ World News · FT World · ↑ top
Moscow Threatens Nuclear Strikes Over Kaliningrad
Latest developments: Russia threatened nuclear strikes on NATO countries Wednesday, September 30, accusing the alliance of preparing to blockade Kaliningrad.
read more
The Kremlin says Western forces intend to cut off Kaliningrad, the Russian exclave on the Baltic Sea wedged between Poland and Lithuania, and answered with an explicit nuclear threat against alliance members. Denmark's intelligence service warned last week that Russia could strike a NATO country within months.
French and Italian Inflation Reach Multiyear Highs
Latest developments: European Central Bank executive board member Isabel Schnabel said Wednesday, September 30, that the bank "cannot wait" for high energy prices to feed wider inflation and called for pre-emptive action, hours after readings put France and Italy at multiyear highs.
read more
French inflation topped forecasts as energy prices climbed, and Vanguard, one of the largest holders of French government debt, said Paris is "degrading credit" as borrowing costs surge, with the Iran war compounding the fiscal strain ahead of a budget fight. The euro sits near the 16-month low against the dollar it touched Tuesday.
Sources: WSJ World News · FT World · FT World · ↑ top
Trump Holds Crunch Talks on a Diesel Export Ban
Latest developments: The Dallas Fed's energy survey, published Wednesday, September 30, found industry executives expect diesel prices to stay elevated for a year, and Russia extended its own diesel export ban the same day, tightening the squeeze as President Trump personally refereed White House talks on restricting American exports five weeks before the November 3 midterms.
read more
Moscow imposed its curbs after Ukrainian drone strikes hit Russian refineries. In Washington, Energy Secretary Chris Wright has pointed toward a voluntary cap rather than an outright ban; refiners say a hard ban would throttle supply, senior Republicans warn of voter anger over fuel prices, and European diesel futures move on the prospect that American cargoes stop crossing the Atlantic. Chinese refineries, running at 75% of capacity, hold the spare capacity that could relieve the squeeze.
Sources: FT Home · WSJ Markets · FT Home · FT Home · ↑ top
Pittsburgh
Weather
Tonight: Mostly Cloudy, low 64F.
Thursday: Mostly Sunny, high 83F.
Thursday Night: Mostly Cloudy, low 68F.
Business
The Data Center Ratepayer Bill Fails in the Senate
Latest developments: A bill written to keep the electricity costs of serving data centers off customers' bills failed to advance in the Senate Wednesday, September 30, during a final round of votes before the November 3 midterm elections, with Democrats arguing the measure did not go far enough.
read more
The vote leaves the cost question with state regulators and municipalities just as developers press million-square-foot proposals across Western Pennsylvania and a new data center coalition targets the state. Duquesne Light customers in Allegheny and Beaver counties already face rising distribution bills, and Peoples Gas has told customers to expect winter heating costs up an average of 8.7%.
Sources: WTAE · Pittsburgh Post-Gazette · ↑ top
Duquesne Light's Union Declares No Confidence
Latest developments: IBEW Local 29 will strike at midnight Wednesday, September 30, unless negotiators reach a deal, KDKA and WTAE reported Wednesday evening, the same day the union said it has lost confidence in Duquesne Light's management.
read more
The union represents hundreds of workers at the utility that distributes electricity across Allegheny and Beaver counties, and contract talks have reached the point where it will say publicly that it no longer trusts the people across the table. A walkout would hit the crews who maintain and repair the electric distribution system serving Pittsburgh.
Sources: Pittsburgh Post-Gazette · WTAE · KDKA · ↑ top
Ken Griffin Gives Carnegie Mellon $3 Billion
Latest developments: Carnegie Mellon University and Citadel founder Ken Griffin discussed the $3 billion gift publicly Wednesday, September 30, and PublicSource reported that most of the money funds the new Miami campus while Pittsburgh gets investment in computer science and priorities the university has yet to name.
read more
The gift, the largest any individual has made in the history of higher education, sends $1 billion to the Oakland campus in Pittsburgh and builds a 35-acre Carnegie Mellon campus in Miami for roughly 3,500 students working on human health, climate, and national security. Griffin moved Citadel's headquarters to Miami and has spent years working to build the Florida city into a rival of New York and London.
Sources: Pittsburgh Post-Gazette · KDKA · WPXI · WTAE · PublicSource · ↑ top
A Data Center Coalition Targets Pennsylvania
Latest developments: Data center developers and organized labor representatives launched a new organization Wednesday, September 30, to smooth approvals for their projects in Pennsylvania and six other states.
read more
The coalition enters a fight already running through Western Pennsylvania, where townships weigh million-square-foot proposals, planners work to write ordinances before applications land, and developers ask municipalities to sign nondisclosure agreements. Pennsylvania's Marcellus gas supply and transmission capacity make it a leading target for the build-out.
Pittsburgh Mills Goes Under Contract
Latest developments: The owner of The Galleria at Pittsburgh Mills confirmed to WTAE on Tuesday evening, September 29, that the Frazer Township mall sits under contract for sale, a step beyond Tuesday's reporting that the buyer's identity remained unknown.
read more
The mall has spent years in foreclosure, litigation, and municipal fines, and crews finished repaving its roads only last week. The owner has yet to name the buyer or the intended use of the property.
Fierro Bikes 412 Bets on Downtown E-Bikes
Latest developments: WPXI profiled Tyler H. Church on Wednesday, September 30, in its Personalities of Pittsburgh series.
read more
Church runs Fierro Bikes 412, an electric bicycle shop in downtown Pittsburgh, and he is working to sell Golden Triangle residents and visitors on e-bikes as the machines spread through the city.
A Pittsburgh Plumber Builds a YouTube Business
Latest developments: Pittsburgh City Paper profiled Nick Hotujec on Wednesday, September 30, tracing how the master plumber turned Cheddar's Plumbing Co. into a large YouTube and TikTok following.
read more
Hotujec toured with local hardcore bands and studied jiu-jitsu before building the plumbing company, and he now films the trade for an audience far beyond his service area.
Sources: Pittsburgh City Paper · ↑ top
Around Town
Pennsylvania Confirms a Fifth Measles Death
Latest developments: The Pennsylvania Department of Health confirmed Wednesday, September 30, that an unvaccinated Lancaster County resident who tested positive for measles has died, the state's fifth measles-associated death this year.
read more
Confirmed measles cases across Pennsylvania passed 800 last week and keep climbing. The department continues to press vaccination as the outbreak spreads through unvaccinated residents.
Sources: WPXI · KDKA · Pittsburgh Post-Gazette · ↑ top
Habitat for Humanity Breaks Ground in Homewood
Latest developments: Habitat for Humanity broke ground Wednesday, September 30, on three more houses in Pittsburgh's Homewood neighborhood, on a lot that came out of the City of Pittsburgh Land Bank.
read more
Mayor Corey O'Connor said the city wants development on more Land Bank parcels like this one, WPXI reported, extending a Habitat building program that has already put houses on Homewood blocks thinned by demolition.
A Warm Thursday, Then Friday Rain
Latest developments: WTAE's Wednesday evening forecast, September 30, keeps Western Pennsylvania warm and dry Thursday, October 1, before rain returns Friday, October 2.
read more
The warm stretch runs through Thursday night's Steelers game at Cleveland, and Friday's rain arrives on the day WTAE has flagged as an Impact Day. Forecasters have credited the dry, mild pattern with one of the region's best fall foliage seasons in years.
O'Connor Delivers His First City Budget
Latest developments: Mayor Corey O'Connor submitted his 2027 preliminary budget and five-year plan to Pittsburgh City Council on Wednesday, September 30, with no tax increase and no layoffs but millions of dollars in cuts, blaming what he called "deceptive and irresponsible" budgeting by his predecessor and projecting a zero bank balance by 2032.
read more
The plan reshapes the city's housing and anti-violence spending, PublicSource reported, and now goes to council hearings. Pittsburgh's shrinking fund balance and rising costs have squeezed every department.
Sources: Pittsburgh Post-Gazette · PublicSource · KDKA · WTAE · WPXI · ↑ top
SNAP Payments Rise $18 in Pennsylvania
Latest developments: Most Pennsylvania recipients of the Supplemental Nutrition Assistance Program see their monthly benefit climb $18 starting Thursday, October 1.
read more
The increase comes out of Pennsylvania's annual re-evaluation of the food assistance program, and it lands as Allegheny County residents work through the new Medicaid work requirements and a sharp rise in hunger across the state.
Washington County Opens Its Flood Recovery Center
Latest developments: The Washington County Multi-Agency Response Center opens Thursday and Friday, October 1 and 2, at the American Legion in Washington, KDKA reported Wednesday, September 30.
read more
Local and state agencies and volunteer organizations staff the center together to walk residents and business owners through insurance claims and recovery programs after the storm damage and flooding of the past two weekends.
A Judge Clears the Quaker Valley Fire Merger
Latest developments: An Allegheny County judge approved the merger of the Leet, Leetsdale, and Bell Acres volunteer fire departments, TribLive reported Wednesday, September 30, clearing the biggest legal hurdle in front of the consolidation.
read more
The three volunteer companies cover the Quaker Valley communities along the Ohio River northwest of Pittsburgh, and the merger combines their equipment, staffing, and calls into a single department.
Parkway Traffic Climbs, and PennDOT Asks Drivers What They Think
Latest developments: PennDOT told KDKA on Wednesday, September 30, that traffic volumes on the Parkway East and the Parkway North have risen, and the department opened an online survey the same day seeking public feedback on its construction and maintenance work.
read more
Volumes on Interstate 376 and Interstate 279 remain below pre-pandemic levels, and PennDOT attributes the increase to travel patterns rather than population growth. The survey stays open through October 20.
Mt. Lebanon Station Waits a Year for Its Elevator
Latest developments: PublicSource published an account Wednesday, September 30, of why the elevator at the Mt. Lebanon light rail station has stayed out of service for more than a year.
read more
Laura Szafranski, a regular rider who depends on the elevator, told PublicSource that older and disabled passengers bear the cost of the delay, asking, "Why did it take so long?" The station sits on the light rail line that carries South Hills riders into downtown Pittsburgh.
Sources: PublicSource · ↑ top
Carnegie Mellon Cancels the DSA Convention
Latest developments: Pittsburgh City Paper reported Wednesday, September 30, that Carnegie Mellon University canceled a Democratic Socialists of America convention that CMU Progressives had arranged to host on campus.
read more
The university says hosting the organization would run afoul of the law; DSA figures including Ashik Siddique call the cancellation a possible return of Red Scare tactics. The group has grown into a force in Pittsburgh politics while facing threats and venue cancellations.
Sources: Pittsburgh City Paper · ↑ top
Penn Hills Weighs Lincoln Park's Future
Latest developments: Pittsburgh City Paper reported Wednesday, September 30, that Penn Hills faces a choice on its Lincoln Park neighborhood between new development and letting the emptied blocks revert to urban prairie.
read more
Many structures in Lincoln Park have deteriorated past repair, and demolition has thinned the neighborhood, though residents and investors point to scattered signs of life on the remaining blocks.
Sources: Pittsburgh City Paper · ↑ top
Events
Oktoberfest Pittsburgh Opens Downtown
Latest developments: KDKA previewed Oktoberfest Pittsburgh on Wednesday evening, September 30, the day before it opens, and Pittsburgh City Paper published its October event guide the same morning.
read more
Oktoberfest Pittsburgh runs noon to 8 p.m. Thursday, October 1, through Sunday, October 11, at multiple downtown locations, free and open to all ages, with details at oktpgh.com. The same day the Pittsburgh Society of Artists opens its 60th Annual Exhibition at 2525 Rochester Road in Cranberry Township, 10 a.m. to 8 p.m. through Friday, October 30, free, and the Sound Series brings guitarist Eli Winter to the North Side.
Sources: Pittsburgh City Paper · KDKA · ↑ top
Confluence Theater Sets Its 2027 Season
Latest developments: The Post-Gazette analyzed Confluence Theater's 2027 programming announcement Wednesday, September 30, reading the schedule and ticket-sales plan for what they say about the company.
read more
Confluence Theater, the newest professional theater company working in downtown Pittsburgh, has published its 2027 lineup and put tickets on sale.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Carnegie Stage Reopens Under a New Owner
Latest developments: The Post-Gazette reported Wednesday, September 30, that Carnegie Stage has a new owner who, working with the venue's longtime manager, has put the theater back in business.
read more
The pair intend to keep the small performance space in the borough of Carnegie, west of Pittsburgh, a home for local artists and their productions.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Olivia Rodrigo Makes Her Pittsburgh Debut
Latest developments: TribLive reviewed Olivia Rodrigo's first Pittsburgh concert Wednesday, September 30, the opening night of a two-show stand at PPG Paints Arena.
read more
Rodrigo, 23, has stacked ten Top 10 hits across three albums since "Drivers License" topped the Billboard Hot 100 more than five years ago, and TribLive called the debut powerful. A second PPG Paints Arena date follows.
Twelve October Events, From Prostburgh to the Festival of Combustion
Latest developments: NEXTpittsburgh published two October guides Wednesday, September 30, one naming a dozen events worth the trip and one covering the month's gallery openings.
read more
The event list runs from Prostburgh to Monster Pumpkins to the Festival of Combustion at the Carrie Blast Furnaces, and the gallery guide carries the season's last round of art walks, shows on masculinity, decay, and public utilities, and an international book and zine fair.
Sources: NEXTpittsburgh Events · NEXTpittsburgh Events · ↑ top
Reel Q Opens Friday
Latest developments: The Post-Gazette previewed Reel Q on Wednesday, September 30, two days before the festival opens.
read more
Reel Q, Pittsburgh's LGBTQ+ film festival, opens Friday, October 2, 2026, with a program of features, short films, and international selections, among them the entries "House" and a documentary on medical malpractice.
Sources: Post-Gazette Arts & Entertainment · ↑ top
Halloween Hangout Comes to the North Shore
Latest developments: Pittsburgh City Paper profiled ScareHouse founder Scott Simmons on Wednesday, September 30, and published its roundup of the region's Halloween season events the same morning.
read more
Simmons, who built the ScareHouse haunted attraction, now runs the company Needs More Fog and has opened Halloween Hangout on Pittsburgh's North Shore. City Paper's companion guide lists Halloween parties, scary movie screenings, and family events across the city through October.
Sources: Pittsburgh City Paper · Pittsburgh City Paper · ↑ top
Public Image Ltd Returns After a Decade
Latest developments: TribLive reported Wednesday, September 30, that Public Image Ltd will play Pittsburgh for the first time in more than 10 years.
read more
John Lydon, who fronted the Sex Pistols as Johnny Rotten before founding Public Image Ltd, leads the band on the return visit.
Sports
Steelers (2-1, T-1st in AFC North)
Up Next · Steelers @ Browns · Thu Oct 1, 8:15 PM
Penguins (0-0-0, 0 pts)
Wed Sep 30 · Penguins @ Flyers · started 7:30 PM, result not posted as of the 7:22 PM page update
Up Next · Canadiens @ Penguins · Sat Oct 3, 7:00 PM
Around the Teams
Porter Ruled Out for a Fourth Straight Game
Latest developments: The Steelers ruled out cornerback Joey Porter Jr. on Wednesday, September 30, for Thursday night's game at Cleveland, his fourth consecutive absence.
read more
The Post-Gazette reported Tuesday that Porter's status with the team changed while the prognosis for his return stayed vague, and Asante Samuel Jr. has held the job in his place. The Steelers kick off at Cleveland at 8:15 p.m. ET Thursday, October 1, on Prime Video.
Sources: Post-Gazette Steelers · ↑ top
Iheanachor Holds Up in His First Start
Latest developments: The Post-Gazette detailed Wednesday, September 30, how rookie offensive lineman Max Iheanachor's preparation and poise carried his first NFL start against the Cincinnati Bengals.
read more
Iheanachor, one of three Steelers draft picks head coach Mike McCarthy has turned loose, stepped into the line as the offense produced its best game of the season. Beat writer Gerry Dulac took reader questions the same morning on Thursday's trip to Cleveland, cornerback Joey Porter Jr., and quarterback Aaron Rodgers.
Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top
Harmon Talks Through the Strip-Sack
Latest developments: Derrick Harmon joined Not Just Football on Wednesday morning, September 30, to break down the forced fumble that ended the Cincinnati game and to describe a short week before Thursday's kickoff at Cleveland.
read more
Cam Heyward and co-host Hayden worked through the win over the Bengals with the second-year defensive lineman, handed out their weekly Unsung Hero awards, and continued their "Roll the Tape" series by roasting the football scenes in Little Giants. The Steelers play the Browns Thursday, October 1, at 8:15 p.m. ET on Prime Video.
Sources: Not Just Football with Cam Heyward · ↑ top
SNR Drive Picks the Browns Game
Latest developments: Matt Williamson and Wes Uhler gave their final predictions Tuesday, September 29, for the Steelers' Thursday night game at Cleveland and told listeners SNR Drive goes dark Wednesday and Thursday before returning Friday, October 2.
read more
The pair opened with a rewind of Sunday's divisional win over the Cincinnati Bengals, then worked through the short week ahead of the 8:15 p.m. ET kickoff at Cleveland on Prime Video.
Sources: Pittsburgh Steelers (YouTube) · ↑ top
Team USA
Savy King Returns to a United States Camp
Latest developments: Angel City FC defender Savy King will join the United States women's under-23 team next week, ESPN reported Wednesday, September 30, her first call-up at any level since she recovered from a cardiac event in May 2025.
read more
King collapsed during a National Women's Soccer League match in May 2025 and worked her way back into the Angel City lineup in Los Angeles. The under-23 camp puts the defender back inside the national team program.
Sources: ESPN Soccer · ↑ top
Teenagers Carry the United States Past Chile
Latest developments: Mathis Albert, 17, scored in the United States men's 4-2 win over Chile in St. Louis on Tuesday night, September 29, passing Christian Pulisic as the youngest goal scorer in program history.
read more
Albert, who plays for Borussia Dortmund, put the game away with the fourth American goal, and fellow teenager Julian Hall also scored in Mauricio Pochettino's second friendly of the window. Center back Chris Richards scored and steadied an inexperienced defense after the Americans fell behind, drawing an 8 out of 10 in ESPN's ratings.
Sources: ESPN Soccer · ESPN Soccer · ESPN Soccer · ↑ top
Berhalter Scores and Assists Again
Latest developments: Sebastian Berhalter registered a goal and an assist against Chile on Tuesday, September 29, the second straight match he has done both.
read more
The Vancouver Whitecaps midfielder, son of former United States coach Gregg Berhalter, has taken over the creative work in Mauricio Pochettino's young squad while the teenagers draw the headlines.
Sources: ESPN Soccer · ↑ top
Tim Ream Retires From the National Team
Latest developments: Tim Ream announced his retirement from the United States men's national team, ESPN reported Tuesday, September 29.
read more
The Charlotte FC center back anchored the American defense across a decade and two World Cups, and he leaves the squad as Mauricio Pochettino turns the backline over to Chris Richards and a group of teenagers.
Sources: ESPN Soccer · ↑ top
Reading
- Stratechery — OpenAI Dev Day, Dot and OpenAI’s Product Transition, Sign In With ChatGPT. Ben Thompson calls OpenAI's Dev Day announcements confusing on their face, then argues they add up to a coherent transition from model provider to consumer platform, with Sign In With ChatGPT as the identity layer that would make it stick.
- Ed Zitron — Dead Money. Zitron continues his accounting of the artificial intelligence build-out, arguing that the capital pouring into Nvidia, Anthropic, and OpenAI will never earn a return.
- Cal Newport — It’s Time to Investigate the AI Labs. Newport points to months of brazen behavior by the two leading frontier labs, starting with a run of carefully staged announcements, and argues the conduct now warrants formal investigation.
Markets
S&P 500 7,690.72 ▼ -0.2% Dow 51,383.22 ▼ -0.8% Nasdaq 26,897.41 ▲ +0.2% WTI crude 92.23 ▼ -6.8% EUR/USD 1.1370 ▼ -0.9% GBP/USD 1.3234 ▼ -1.0% USD/JPY 157.86 ▲ +0.7%
Feed Health
Security: 24 of 24 feeds loaded, 68 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Google Online Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.
Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.
Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.
Events: 4 of 4 feeds loaded, 11 items in the 120-hour window.
Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window.
Team USA: 3 of 3 feeds loaded, 27 items in the 72-hour window. No recent items: Guardian Olympics.
Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.
Markets (Yahoo Finance): 7 of 7 rows
Weather (NWS): 3 forecast periods
Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports
Summaries: 3 model call(s) served by claude-opus-5 (465s of model time; $2.50 at API list price).