================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, October 1, 2026 - 10:06 AM EDT ================================================================ Attackers burned fresh zero-days through the network edge—Cisco Catalyst SD-WAN Manager, Citrix NetScaler, and Zimbra mail servers—on the day Google handed vetted defenders a guardrail-free Gemini 4 Argon. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers hit Cisco Catalyst SD-WAN Manager, Zimbra mail gateways, and NetScaler before patches existed, with a LevelBlue payload minting superuser accounts on the compromised appliances. see: Cisco Catalyst SD-WAN Manager Zero-Day; Zimbra and Kiteworks Mail Gateways Under Fire; NetScaler Payload Mints a Superuser * [TREND] Google is handing Gemini 4 Argon to vetted defenders to find and patch flaws unsupervised, while OpenAI shut down a campaign distilling protected reasoning from its models. see: Gemini 4 Argon Goes Guardrail-Free for Defenders; OpenAI Disrupts a Moonshot AI Distillation Campaign * [TREND] Eurojust tied a 16-year-old to nearly 1,000 KillSec attacks as Dutch investigators opened a ShinyHunters murder-plot inquiry and Treasury sanctioned 10 Tren de Aragua ATM jackpotting targets. see: KillSec Arrest and a ShinyHunters Murder Plot Inquiry; Treasury Sanctions a Tren de Aragua ATM Network * [UPDATE (new)] The Defense Manpower Data Center began notifying 2.76 million people that hackers stole Pentagon human resources records in an October 2025 breach. see: Pentagon Personnel Records Breach Notifications * [UPDATE (new)] The 10-year Treasury yield hit 2002 highs with France now the epicenter, as EU governments opened crisis talks on releasing strategic diesel reserves under US export-ban pressure. see: The Global Bond Selloff Deepens; EU Enters Crisis Talks on Releasing Diesel Stocks * [UPDATE (updated)] Nearly 1,000 IBEW Local 29 members struck Duquesne Light at midnight, and KDKA detailed how Ken Griffin's $3 billion gift splits Carnegie Mellon and Miami. see: Duquesne Light Workers Walk Out; Carnegie Mellon's $3 Billion Gift Splits Two Cities SECURITY ---------------------------------------------------------------- 1. CISCO CATALYST SD-WAN MANAGER ZERO-DAY Vulnerabilities and Exploits · [zero-day, patch, exploit] Latest developments: Cisco shipped fixed releases and indicators of compromise for CVE-2026-76504 on October 1, 2026, and said its incident responders learned of live exploitation in September 2026 while working a Cisco Technical Assistance Center support case, the fifth time this year attackers have used an SD-WAN zero-day against Cisco customers. The 9.8-rated hex encoding flaw lets a remote attacker with no credentials drive the Catalyst SD-WAN Manager API as the administrator, and Cisco offers no workaround. CISA put the bug in its Known Exploited Vulnerabilities catalog under Binding Operational Directive 26-04; patch the Manager and hunt against Cisco's published indicators. - Help Net Security: https://www.helpnetsecurity.com/2026/10/01/new-cisco-sd-wan-zero-day-exploited-in-the-wild-cve-2026-76504/ - SecurityWeek: https://www.securityweek.com/cisco-patches-exploited-catalyst-sd-wan-zero-day-vulnerability/ - The Hacker News: https://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html - CISA Advisories: https://www.cisa.gov/news-events/alerts/2026/09/30/cisa-adds-one-known-exploited-vulnerability-catalog 2. ZIMBRA AND KITEWORKS MAIL GATEWAYS UNDER FIRE Vulnerabilities and Exploits · [exploit, patch, zero-day] Latest developments: SecurityWeek reported on October 1, 2026 that attackers exploited the Zimbra flaw CVE-2026-73570 before anyone disclosed it publicly, and that a crafted email triggers the bug under certain conditions with no user interaction; Kiteworks released updates the same day for 126 vulnerabilities, among them a maximum-severity code injection flaw in its Email Protection Gateway. CVE-2026-73570, rated 8.9, is an unauthenticated operating system command injection flaw that attackers reach through Simple Network Management Protocol handling on Zimbra Collaboration Suite servers, and the Microsoft Security Research team found them planting web shells and reading mailbox data. Patch Zimbra and the Kiteworks Email Protection Gateway now, and search mail servers for web shells and harvested authentication secrets. - SecurityWeek: https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/ - Ars Technica Security: https://arstechnica.com/security/2026/09/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails/ - The Hacker News: https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/kiteworks-patches-max-severity-email-protection-gateway-code-injection-vulnerability/ 3. METAMASK INCIDENT FOLLOWS BITGET'S ZERO-DAY THEFT Ransomware and Cybercrime · [breach, zero-day, cryptocurrency] Latest developments: MetaMask disclosed on October 1, 2026 an ongoing security incident affecting part of its infrastructure, said it sees no immediate threat to MetaMask wallets, and the disclosure prompted affected Ethereum validators to exit; Bitget confirmed the day before that the attackers who took $387.5 million exploited a zero-day in third-party security products, citing investigator SlowMist, which recovered a customized tool the attacker used. MetaMask, the software cryptocurrency wallet maker, says it remediates internally with external partners and security advisors. Bitget earlier blamed a third-party security product for the September 24, 2026 theft and pinned the attack on North Korea; wallet and exchange operators should audit the security vendors holding privileged access inside their own stacks. - BleepingComputer: https://www.bleepingcomputer.com/news/security/metamask-discloses-security-incident-affecting-its-infrastructure/ - The Hacker News: https://thehackernews.com/2026/10/metamask-security-incident-prompts-exit.html - The Hacker News: https://thehackernews.com/2026/10/bitget-confirms-third-party-zero-day.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/ 4. GEMINI 4 ARGON GOES GUARDRAIL-FREE FOR DEFENDERS AI Security · [ai, vulnerability-research] Latest developments: Google announced Gemini 4 Argon on October 1, 2026 and began rolling it out to a vetted set of cyber defenders through its Fairwind Program, saying the model locates critical software vulnerabilities, validates them, and patches them with no human in the loop, and that it already found a critical flaw in software hospitals use worldwide. Google plans a version with the cyber guardrails removed for Fairwind participants and its own internal teams, and will open Argon to paid API customers later. Koray Kavukcuoglu, Google's chief artificial intelligence architect, pitched it as frontier performance across software engineering, legal and finance work, and cybersecurity defense; defenders outside the program should expect the same capability to reach attackers. - SecurityWeek: https://www.securityweek.com/google-launches-gemini-4-argon-with-guardrail-free-access-for-vetted-defenders/ - The Hacker News: https://thehackernews.com/2026/10/google-rolls-out-gemini-4-argon-to.html - Help Net Security: https://www.helpnetsecurity.com/2026/10/01/google-gemini-4-argon/ 5. KILLSEC ARREST AND A SHINYHUNTERS MURDER PLOT INQUIRY Ransomware and Cybercrime · [ransomware, arrest, cybercrime] Latest developments: Eurojust said on October 1, 2026 that investigators arrested a 16-year-old they suspect of running KillSec, a ransomware group behind almost 1,000 attacks worldwide since 2024, and posted a seizure notice on its infrastructure; Dutch investigators separately now examine whether the 24-year-old ShinyHunters figure they arrested in the Netherlands tried to arrange two murders. KillSec got into victim networks through poorly secured access, much of it tied to cloud storage, then copied stolen data to its own servers before extorting the owners. Brett Leatherman, assistant director of the FBI cyber division, released a video thanking Dutch police for the arrest and telling the remaining ShinyHunters members to turn themselves in. - Help Net Security: https://www.helpnetsecurity.com/2026/10/01/killsec-ransomware-16-year-old-main-operator-arrested/ - Graham Cluley: https://www.bitdefender.com/en-us/blog/hotforsecurity/shinyhunters-suspect-arrested-now-investigated-alleged-murder-plots - Graham Cluley: https://www.bitdefender.com/en-us/blog/hotforsecurity/fbi-shinyhunters-turn-themselves-in-arrest-leader 6. CAR APPS FEED OWNER DATA TO AD BROKERS Policy and Regulation · [privacy, data-sharing] Latest developments: Researchers at Northeastern University tested 21 vehicles and 30 carmaker apps with Consumer Reports, which supplied the cars it had bought for testing, and reported on October 1, 2026 that some apps send vehicle identification numbers, email addresses, phone numbers, and location data to advertising, tracking, and analytics companies. The companion app a buyer installs to unlock or locate a car routes identifiers and movement history into the advertising ecosystem, which ties a driver's trips to a named person. Fleet operators and executives who treat vehicle telematics as private should assume third parties already hold it. - Help Net Security: https://www.helpnetsecurity.com/2026/10/01/connected-car-apps-privacy-research/ - The Record: https://therecord.media/automakers-routinely-share-connected-car-data-third-parties - Schneier on Security: https://www.schneier.com/blog/archives/2026/10/connected-cars-are-a-surveillance-platform.html 7. NETSCALER PAYLOAD MINTS A SUPERUSER Vulnerabilities and Exploits · [exploit, zero-day, web-shell] Latest developments: The Threat Hunt Operations and Research team at LevelBlue reported on October 1, 2026 that it traced NetScaler exploitation across multiple customer environments to a post-exploitation payload that creates a superuser account and maps a web shell to URLs resembling stylesheet requests, while attackers also tried to steal appliance configuration data. The pre-authentication command injection flaws CVE-2026-88771 and CVE-2026-88772 in Citrix NetScaler ADC and NetScaler Gateway have carried attackers from zero credentials to root since early September 2026, and Palo Alto Networks Unit 42 updated its threat brief on September 30, 2026. Patch, then hunt for unexpected superuser accounts and web shell paths that masquerade as CSS. - The Hacker News: https://thehackernews.com/2026/10/citrix-netscaler-post-exploitation.html - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/ 8. PENTAGON PERSONNEL RECORDS BREACH NOTIFICATIONS Data Breaches · [breach, government] Latest developments: The Defense Manpower Data Center began notifying victims on October 1, 2026 that hackers breached the Pentagon's human resources management system in October 2025 and stole records on 2.76 million living people, including current and former defense personnel and their dependents, plus 294,000 deceased individuals, a Defense Department official told CNN. The center, established in 1974, is the central hub for Department of Defense data on military personnel and service status. Service members, veterans, and dependents who receive a notice should freeze credit and expect targeted phishing that cites accurate service details. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-breach-pentagon-human-resources-management-system-steal-data-of-nearly-3-million-people/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/01/pentagon-dmdc-data-breach-3-million-people/ 9. OPENAI DISRUPTS A MOONSHOT AI DISTILLATION CAMPAIGN AI Security · [ai, policy] Latest developments: OpenAI said on September 30, 2026 that it identified and shut down a coordinated distillation campaign that pulled protected reasoning out of its models, and attributed the core cluster, which runs back to the first week of July 2026, to individuals associated with Moonshot AI, the Chinese artificial intelligence company based in Beijing. Distillation copies a rival's model behavior by harvesting its outputs, and OpenAI treats the extracted reasoning traces as protected intellectual property. A Federal Trade Commission spokesperson separately confirmed an investigation into OpenAI and Anthropic over possible risks their products pose to consumers, and declined further comment. - The Hacker News: https://thehackernews.com/2026/10/openai-disrupts-reasoning-extraction.html - SecurityWeek: https://www.securityweek.com/ftc-is-investigating-openai-and-anthropic-over-possible-risks-to-consumers/ 10. TREASURY SANCTIONS A TREN DE ARAGUA ATM NETWORK Ransomware and Cybercrime · [sanctions, cybercrime, malware] Latest developments: The Office of Foreign Assets Control at the Treasury Department sanctioned 10 targets on September 30, 2026 over an ATM jackpotting scheme tied to the Venezuelan gang Tren de Aragua, hitting Venezuelan nationals, among them a most-wanted ATM malware developer, and several companies they control that launder the proceeds. Jackpotting malware forces a cash machine to dispense its entire cartridge, and this crew drained dozens of ATMs. The designations block the targets' United States assets and bar Americans from transacting with them, extending a federal campaign against Tren de Aragua's financial operations. - SecurityWeek: https://www.securityweek.com/treasury-blacklists-most-wanted-atm-malware-developer-and-his-network/ - The Record: https://therecord.media/us-sanctions-10-atm-jackpotting-tren-de-aragua BUSINESS AND POLITICS ---------------------------------------------------------------- * EU Enters Crisis Talks on Releasing Diesel Stocks Latest developments: The Financial Times reported Thursday, October 1, that European Union governments have opened crisis talks on releasing strategic diesel reserves after the Trump administration warned it could ban United States diesel exports if they refuse. Diesel prices across Europe have run to records since the United States-Iran war began, and Russia extended its own export ban on September 30, leaving refiners, truckers, and farmers short of fuel heading into winter. Washington's threat ties relief on both sides of the Atlantic to the same barrels, and crude rose again Thursday as traders weighed war risk against Middle East crude exports recovering toward prewar levels. - FT Home: https://www.ft.com/content/0234bcc7-386c-40b6-9f04-88aef3a1e24c?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-rises-as-supply-concerns-persist-despite-middle-east-crude-exports-recovering-to-prewar-levels-067a47d8?mod=rss_markets_main * The Global Bond Selloff Deepens Latest developments: The selling ran on Thursday, October 1, pushing the 10-year Treasury yield to its highest level since 2002 and the dollar to its strongest level against a basket of currencies since April 2025, with France now the epicenter as its government aims to cut tens of billions of euros from next year's spending and Bank of England policymaker Catherine Mann backed lifting the 3.75% policy rate that investors expect to reach 4% in November. Sovereign borrowing costs across the United States, Europe, and Japan have returned to multiyear highs as energy-driven inflation and doubts about the American fiscal outlook push investors out of government debt, a dynamic the Financial Times calls a vicious loop of forced selling. United Kingdom house prices fell as mortgage rates climbed, French credit warning lights flashed, and the Wall Street Journal reported the Federal Reserve will likely hold rates for a while as the Nasdaq's artificial-intelligence rally ran into the Treasury rout. - FT Home: https://www.ft.com/content/e485a228-1efe-426b-addc-26069ba48bf3?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/long-dated-treasury-yields-hit-24-year-highs-french-spread-widens-as-bond-selloff-ramps-up-3321e143?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/currencies/dollar-hits-3-month-high-on-prospect-of-higher-u-s-rates-6866460f?mod=rss_markets_main - WSJ World News: https://www.wsj.com/finance/france-is-ground-zero-in-the-global-bond-rout-4b743eb2?mod=rss_worldnews - WSJ World News: https://www.wsj.com/world/uk/boes-mann-backs-rate-rise-to-tame-inflation-b645ae0d?mod=rss_worldnews - FT World: https://www.ft.com/content/c8b3090e-8531-4911-8e9d-6eefbefb4c70 * UBS Resists Calls to Leave Switzerland Latest developments: The Wall Street Journal identified the investor pressing UBS to abandon its Swiss domicile Thursday, October 1, as the United States asset manager Artisan Partners, and UBS publicly rejected the call the same day. Swiss politicians want far tougher capital requirements on UBS, the country's largest bank and its only remaining globally systemically important lender after the 2023 rescue of Credit Suisse. Shareholders who see that capital burden as unbearable have begun pressing management to relocate, and the bank's resistance now puts it in open conflict with part of its own investor base. - FT World: https://www.ft.com/content/3334f6eb-5eab-4340-a5b7-a2bd0b5f46c8?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/banking/ubs-shareholder-calls-for-bank-to-leave-switzerland-9eae7536?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Today: Mostly Sunny, high 83F. Tonight: Partly Cloudy, low 67F. Friday: Rain Showers, high 76F. Business: * Breeze Airways Flies Pittsburgh to Vero Beach Latest developments: Breeze Airways began nonstop service from Pittsburgh International Airport to Vero Beach, Florida, WPXI reported Thursday, October 1. Breeze Airways, the low-fare carrier David Neeleman founded, keeps adding leisure routes out of Pittsburgh International Airport in Findlay Township, and the Vero Beach flight gives travelers on Florida's Treasure Coast a direct link to Western Pennsylvania. - WPXI: https://www.wpxi.com/news/local/breeze-airways-launches-non-stop-flights-pittsburgh-vero-beach/LATETRDISRG7VAYMJVXMSEMCDY/ * Yelp Ranks Palm Palm Among the Country's Best New Restaurants Latest developments: Yelp named Palm Palm, in Pittsburgh's East Liberty neighborhood, one of the best new restaurants in America for 2026, WPXI reported Thursday, October 1. The national ranking puts an East Liberty kitchen in front of a traveling audience, the kind of listing Pittsburgh restaurateurs use to draw diners from outside the neighborhood. - WPXI: https://www.wpxi.com/news/local/palm-palm-east-liberty-ranks-one-best-new-restaurants-america/5AO3ZTUP4RE6ZFK6DZ6L7SOQ3I/ * Duquesne Light Workers Walk Out Latest developments: Nearly 1,000 members of IBEW Local 29 struck at midnight Thursday, October 1, and Duquesne Light Co. told customers later that morning that it is maintaining normal operations despite the walkout. The striking employees build, maintain, and restore the electric system Duquesne Light runs for more than 600,000 customers in Allegheny and Beaver counties. Workers gathered outside company property around 11 p.m. Wednesday before picketing began, and customers told WPXI they worry about how long restoration will take if another major storm arrives during the strike. - TribLive: https://triblive.com/business/duquesne-light-workers-strike-as-contract-negotiations-fail/ - WPXI: https://www.wpxi.com/news/local/nearly-1k-duquesne-light-company-union-workers-go-strike/VDMCT4D2PBHVJPQAPIGDC4XIBY/ - KDKA: https://www.cbsnews.com/pittsburgh/news/duquesne-light-union-workers-will-strike-at-midnight-wednesday/ - WPXI: https://www.wpxi.com/news/local/duquesne-light-employees-gather-ahead-strike-customers-voice-concerns/BQO7N567HBFGDPQ64TF6OIEXW4/ - WTAE: https://www.wtae.com/article/duquesne-light-company-union-strike-ibew-local-29/73969050 - TribLive: https://triblive.com/business/duquesne-light-tells-customers-utility-is-maintaining-normal-operations-despite-strike/ * Carnegie Mellon's $3 Billion Gift Splits Two Cities Latest developments: KDKA laid out the donor's background Thursday, October 1, reporting that Ken Griffin founded and runs Citadel, a Miami hedge fund with $76 billion in investment capital, as WTAE reported $1 billion of his gift lands on Carnegie Mellon University's Pittsburgh campus and the balance launches a new campus in Miami. Griffin gave Carnegie Mellon $3 billion, the largest gift in the university's history. The Pittsburgh billion goes to computer science and other campus priorities in Oakland, making the terms of the split the central question for a university whose research footprint anchors the regional technology economy. - WTAE: https://www.wtae.com/article/carnegie-mellon-university-pittsburgh-miami-campuses/73955583 - KDKA: https://www.cbsnews.com/pittsburgh/news/who-is-ken-griffin-billionaire-donation-3-billion-carnegie-mellon/ * The World's Robotics Engineers Convene in Pittsburgh Latest developments: WTAE reported Wednesday night, September 30, that Pittsburgh is hosting the International Conference on Intelligent Robots and Systems this week. The conference, known as IROS, brings robotics researchers and their machines to Pittsburgh, with demonstrations running from robots built for hazardous industrial work to units that assist in delicate surgery and in everyday household tasks. The gathering puts the city's universities and robotics companies in front of an international engineering audience. - WTAE: https://www.wtae.com/article/pittsburgh-robots-iros-international-conference/73968273 Around town: * Lane Closures Hit the Parkway East Bathtub Latest developments: KDKA reported Thursday, October 1, that PennDOT's long-term lane closure in the Parkway East's bathtub section runs through July, and WPXI reported crews stopped outbound traffic at the Fort Pitt Tunnel that morning for emergency lighting repairs. The bathtub, a 1,150-foot stretch of Interstate 376 at the edge of downtown Pittsburgh, floods whenever the Monongahela River rises and backs traffic up for miles. PennDOT's $14.34 million project aims to end those shutdowns, and KDKA's John Shumway walked drivers through what the closure means for the commute. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-parkway-east-bathtub-flooding-construction-work-closure/ - KDKA: https://www.cbsnews.com/pittsburgh/video/long-term-lane-closures-to-begin-on-parkway-easts-bathtub/ - WPXI: https://www.wpxi.com/news/local/traffic-be-stopped-outbound-fort-pitt-tunnel-emergency-lighting-repair-work/57HYRLMK2JETBH2YUTIRZGRCCA/ * Polish Hill Splits Over a Proposed Shelter Latest developments: The zoning hearing on a proposed homeless shelter in Polish Hill takes place Thursday, October 1, and PublicSource reported that morning on how sharply the neighborhood divides over it. Supporters in Pittsburgh's Polish Hill told PublicSource the project would save lives, with one resident saying, "The reality is that homeless people don't get perfect things. This is not going to be a perfect thing. But it's a life-saving thing." Other residents told the outlet Polish Hill is the wrong location, and the zoning decision determines whether the shelter proceeds. - PublicSource: https://www.publicsource.org/polish-hill-shelter-homeless-zoning-hearing/ * The City Moves to Close a North Side Drop-In Center Latest developments: The Post-Gazette reported Thursday, October 1, that neighbors and clients oppose the city of Pittsburgh's plan to close the Roots drop-in center on the North Side, with one telling the paper, "There's nowhere for them to go." The Roots center gives people without housing a daytime place to sit, warm up, and reach social services on Pittsburgh's North Side. Its users and the community members who spoke to the Post-Gazette say they know of no comparable place nearby, and the closure arrives as the city weighs where shelter capacity belongs. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/social-services/2026/10/01/roots-north-side-closure/stories/202609300062 * A Summerlike Thursday, Then Friday Showers Latest developments: WPXI said Thursday morning, October 1, that parts of Western Pennsylvania reach the 80s and feel more like mid-August than the first day of October, with Friday, October 2, still the week's wettest day and stray showers lingering through the weekend. WTAE calls Thursday dry and warm across the region and labels Friday an Impact Day with showers. KDKA meteorologist Ron Smiley describes Thursday as a prime summer day, with Friday carrying the best rain chance and stray showers hanging on through a cloudy weekend. - WTAE: https://www.wtae.com/article/dry-and-warm-today-impact-day-with-showers-friday/73972287 - KDKA: https://www.cbsnews.com/pittsburgh/news/thursday-feels-like-a-prime-summer-day-in-pittsburgh-before-a-cloudy-and-possibly-rainy-weekend/ - WPXI: https://www.wpxi.com/weather/summer-like-temperatures-thursday-with-some-areas-making-it-into-80s/JIIHM6V4WREENNRF5MY4FKOO7E/ Events: * A Wiz Khalifa Weekend, With TacoMania and Reel Q Latest developments: NEXTpittsburgh and the Post-Gazette published their guides Thursday, October 1, to the weekend of October 1 through 4. NEXTpittsburgh's list runs more than 15 deep and leads with the ScareHouse Halloween Hangout on the North Shore, the Reel Q LGBTQ+ film festival, which opens Friday, October 2, and TacoMania. The Post-Gazette's guide builds its weekend around a Wiz Khalifa concert, the Penguins, and bees. - NEXTpittsburgh Events: https://nextpittsburgh.com/events/15-things-to-do-this-weekend-in-pittsburgh-oct-1-4-2026/ - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/recreation/2026/10/01/things-to-do-this-weekend-pittsburgh-oct-1-4/stories/202610010007 * The Witches Gala Takes Over Greensburg Latest developments: TribLive reported Thursday, October 1, that the annual Greensburg Witches Gala keeps expanding ahead of Saturday night. The gala runs 5 to 9 p.m. Saturday, October 3, along South Pennsylvania Avenue in Greensburg, drawing costumed visitors to the street for an evening organizers promise will be spellbinding. - TribLive: https://triblive.com/local/westmoreland/annual-greensburg-witches-gala-continues-to-expand/ * In Clay Opens City Theatre's Season Latest developments: TribLive published its review Thursday, October 1, calling "In Clay" an inspired opener for City Theatre Company's 2026-27 season. "In Clay" is a one-woman musical about making art, and it leads off the season at City Theatre Company on Pittsburgh's South Side. - TribLive: https://triblive.com/aande/theater-arts/review-city-theatres-in-clay-is-an-inspired-season-opener/ * Sovereign Ground Opens at Brew House Arts Latest developments: Pittsburgh City Paper reported Thursday, October 1, on Sovereign Ground, the new group exhibition the collective The Future Is Black organized at Brew House Arts. Sovereign Ground gathers work by more than 20 artists at Brew House Arts and takes up the question of who pays for Black art in Pittsburgh, a question City Paper reports the organizers built the show around. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/with-sovereign-ground-the-future-is-black-confronts-the-thorny-question-of-arts-funding/ * Chelsea Handler Plays The Wylie Latest developments: Pittsburgh City Paper previewed Chelsea Handler's Pittsburgh show Thursday, October 1, at the new Citizens Live at The Wylie. Handler, the comedian and talk-show host, brings a set heavy on her opinions and her experiences with LSD to Citizens Live at The Wylie in the Lower Hill District. Controversy follows the tour: comedian Salma Hindy says she lost her spot on it after she spoke with Handler about Palestine. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/chelsea-handler-pittsburgh-wylie-salma-hindy/ * The Wylie Starts Its First Week of Shows Latest developments: The Post-Gazette assessed Thursday, October 1, where the newly opened Citizens Live at The Wylie fits among Pittsburgh's concert venues as its first full week of programming begins. Citizens Live at The Wylie, the 4,000-capacity hall in Pittsburgh's Lower Hill District, opened Monday, September 28, after two years of construction, and it now competes for touring acts with Stage AE, the Benedum Center, and PPG Paints Arena. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/ae/music/2026/10/01/citizens-live-at-the-wylie-pittsburgh-1/stories/202610010014 * This Week's Picks, October 1 to 7 Latest developments: Pittsburgh City Paper published its week-ahead events list Thursday, October 1. The list covers Thursday, October 1, through Wednesday, October 7, and leads with art made for goats, a Disney villain drag show, an opera staged on the shore, and a walking tour of the South Side. - Pittsburgh City Paper: https://www.pghcitypaper.com/listings/pittsburghs-top-events-thu-oct-1-wed-oct-7/ SPORTS ---------------------------------------------------------------- Steelers (2-1, T-1st in AFC North) Up Next · Steelers @ Browns · Thu Oct 1, 8:15 PM https://plaintextsports.com/nfl/2026/week4/pit-cle Penguins (1-0-0, 2 pts) Wed Sep 30 · Penguins 7 · Flyers 0 · Final https://plaintextsports.com/nhl/2026-09-30/pit-phi Up Next · Canadiens @ Penguins · Sat Oct 3, 7:00 PM https://plaintextsports.com/nhl/2026-2027/teams/pittsburgh-penguins Around the Teams: * The Steelers Trade Joey Porter Jr. to Dallas Latest developments: The Post-Gazette reported early Thursday, October 1, that the Steelers are sending cornerback Joey Porter Jr. to the Dallas Cowboys for a pair of draft picks, and columnist Noah Hiles called the episode a sad saga that never should have happened. General manager Omar Khan moved Porter after a contract standoff and four consecutive absences, taking back a package that reporting pegs as including a second-round pick. Asante Samuel Jr. has handled Porter's spot on the outside, and Gerry Dulac spent much of his Wednesday chat with Post-Gazette readers on Porter's situation heading into Cleveland. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/30/steelers-trade-joey-porter-cowboys-nfl/stories/202609300069 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/30/joey-porter-update-injury-report/stories/202609300059 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/09/30/steelers-browns-joey-porter-aaron-rodgers/stories/202609300013 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/01/joey-porter-trade-analysis/stories/202610010038 * Thursday Night at Cleveland Latest developments: The Post-Gazette's scouting report, published Thursday morning, October 1, argues the more dominant defensive front decides the game, and Gerry Dulac released his Week 4 picks the same morning ahead of the 8:15 p.m. kickoff at Huntington Bank Field on Prime Video. The Steelers and Browns meet in an AFC North game that pits two strong defensive lines against each other. The Post-Gazette also traced a run of inexplicable Steelers losses in Cleveland that has shaped the rivalry lately, and head coach Mike McCarthy previewed the matchup with Bob Pompeani on Steelers Insider. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/01/cleveland-browns-scouting-report-nfl/stories/202610010005 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/01/cleveland-browns-rivalry-thursday-night-football/stories/202609300011 - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=Z0w7dg4h1Nk - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/01/nfl-week4-picks-gerry-dulac/stories/202609300066 Team USA: * Richards Steadies a Young American Back Line Latest developments: ESPN's player ratings for the United States' 4-2 win over Chile gave center back Chris Richards an 8 out of 10, crediting him with a goal and with calming an inexperienced defense after the team fell behind. The United States men beat Chile 4-2 in St. Louis on Tuesday, September 29, the second match of a window in which coach Mauricio Pochettino has handed debuts to a string of teenagers. Richards, the Crystal Palace defender, scored and anchored the back line, and Sebastian Berhalter added a goal and an assist for the second straight match. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50063781/usmnt-player-ratings-chris-richards-scores-steadies-backline-get-8-win-chile - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50064271/overshadowed-usmnt-talented-teens-cavan-sullivan-sebastian-berhalter-stealing-spotlight * Tebas Calls the Balogun Reversal Unprecedented Latest developments: LaLiga president Javier Tebas called the overturning of Folarin Balogun's World Cup red card "the most serious incident in the history of football," ESPN reported Thursday, October 1. Balogun, the United States forward, drew a red card at the 2026 World Cup that officials later reversed, a decision that still draws fire from the heads of European leagues. United States coach Mauricio Pochettino said last week he wishes he had pressed the appeal of the suspension himself. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50075538/folarin-balogun-red-card-u-turn-most-serious-incident-history-football-laliga-boss * DeMelo Re-Signs With Racing Louisville Latest developments: Racing Louisville FC signed midfielder Savannah DeMelo through the 2027 season with a club option for 2028, ESPN reported Thursday, October 1, ahead of her expected return to the field Saturday, October 3. DeMelo, the American midfielder who has played for the United States women's national team, has not played in more than a year following a cardiac event, and a lawsuit over that episode remains pending. The new contract keeps her in Louisville as she returns to National Women's Soccer League play. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50071703/demelo-re-signs-racing-amid-lawsuit-cardiac-event READING ---------------------------------------------------------------- * Stratechery -- An Interview with Jason Del Rey About Muse, Amazon, and Walmart Ben Thompson interviews retail journalist Jason Del Rey about Meta's Muse shopping agent and Amazon's response, arguing the fight is the latest round of the oldest rivalry in retail, Amazon against Walmart. https://stratechery.com/2026/an-interview-with-jason-del-rey-about-muse-amazon-and-walmart/ * Ed Zitron -- Dead Money Zitron extends his case against the economics of the artificial intelligence build-out, arguing the capital flowing into it amounts to dead money that will never earn a return. https://www.wheresyoured.at/dead-money/ * Cal Newport -- It's Time to Investigate the AI Labs Newport argues the two leading frontier artificial intelligence labs have behaved brazenly in a series of carefully staged announcements, and that their conduct now warrants formal investigation. https://calnewport.com/its-time-to-investigate-the-ai-labs/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,690.72 ▼ -0.2% Dow 51,383.22 ▼ -0.8% Nasdaq 26,897.41 ▲ +0.2% WTI crude 91.88 ▼ -5.2% EUR/USD 1.1370 ▼ -0.9% GBP/USD 1.3234 ▼ -1.0% USD/JPY 157.86 ▲ +0.7% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 69 items in the 24-hour window. No recent items: Krebs on Security, CISA Advisories, Securelist (Kaspersky), Google Online Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 13 items in the 120-hour window. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. Team USA: 3 of 3 feeds loaded, 28 items in the 72-hour window. No recent items: Guardian Olympics. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via plaintextsports; mlb: ESPN failed (mlb: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nfl: ESPN failed (nfl: HTTP 403 (server: AkamaiGHost)); used plaintextsports; nhl: ESPN failed (nhl: HTTP 403 (server: AkamaiGHost)); used plaintextsports Summaries: 3 model call(s) served by claude-opus-5 (340s of model time; $2.08 at API list price). ================================================================ Generated 2026-10-01 10:06 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================