infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

Attackers keep arriving through the edge gear enterprises trust—Cisco Catalyst SD-WAN Manager, Citrix NetScaler, Zimbra, and Kiteworks all shipped fixes for flaws already in use—while European police seized KillSec's servers and named a 16-year-old as its administrator.


Emerging Trends and Key Updates

Security

1. Cisco Catalyst SD-WAN Manager Zero-Day

Vulnerabilities and Exploits · [zero-day, patch, exploit]

Latest developments: Cisco shipped fixed releases and indicators of compromise for CVE-2026-76504 on October 1, 2026, and said its incident responders learned of live exploitation in September 2026 while working a Cisco Technical Assistance Center support case, the fifth time this year attackers have used an SD-WAN zero-day against Cisco customers.

read more

The 9.8-rated hex encoding flaw lets a remote attacker with no credentials drive the Catalyst SD-WAN Manager API as the administrator, and Cisco offers no workaround. CISA put the bug in its Known Exploited Vulnerabilities catalog under Binding Operational Directive 26-04; patch the Manager and hunt against Cisco's published indicators.

Sources: Help Net Security · SecurityWeek · The Hacker News · CISA Advisories · ↑ top

2. Zimbra and Kiteworks Mail Gateways Under Fire

Vulnerabilities and Exploits · [exploit, patch, zero-day]

Latest developments: SecurityWeek reported on October 1, 2026 that attackers exploited the Zimbra flaw CVE-2026-73570 before anyone disclosed it publicly, and that a crafted email triggers the bug under certain conditions with no user interaction; Kiteworks released updates the same day for 126 vulnerabilities, among them a maximum-severity code injection flaw in its Email Protection Gateway.

read more

CVE-2026-73570, rated 8.9, is an unauthenticated operating system command injection flaw that attackers reach through Simple Network Management Protocol handling on Zimbra Collaboration Suite servers, and the Microsoft Security Research team found them planting web shells and reading mailbox data. Patch Zimbra and the Kiteworks Email Protection Gateway now, and search mail servers for web shells and harvested authentication secrets.

Sources: SecurityWeek · Ars Technica Security · The Hacker News · BleepingComputer · ↑ top

3. KillSec Arrest and a ShinyHunters Murder Plot Inquiry

Ransomware and Cybercrime · [ransomware, arrest, cybercrime]

Latest developments: Police in Spain arrested the 16-year-old they suspect of administering KillSec on September 30, 2026, one of three arrests in an international operation police call Operation KillSwitch, which seized the group's leak site and servers and secured at least 110 terabytes of data stolen from victims; Dutch investigators separately now examine whether the 24-year-old ShinyHunters figure they arrested in the Netherlands tried to arrange two murders.

read more

Eurojust ties KillSec to almost 1,000 attacks worldwide since 2024, run by getting into victim networks through poorly secured access, much of it cloud storage, then copying stolen data to its own servers before extorting the owners. Brett Leatherman, assistant director of the FBI cyber division, released a video thanking Dutch police for the arrest and telling the remaining ShinyHunters members to turn themselves in.

Sources: Help Net Security · BleepingComputer · SecurityWeek · Graham Cluley · ↑ top

4. MetaMask Incident Follows Bitget's Zero-Day Theft

Ransomware and Cybercrime · [breach, zero-day, cryptocurrency]

Latest developments: MetaMask disclosed on October 1, 2026 an ongoing security incident affecting part of its infrastructure, said it sees no immediate threat to MetaMask wallets, and the disclosure prompted affected Ethereum validators to exit; Bitget confirmed the day before that the attackers who took $387.5 million exploited a zero-day in third-party security products, citing investigator SlowMist, which recovered a customized tool the attacker used.

read more

MetaMask, the software cryptocurrency wallet maker, says it remediates internally with external partners and security advisors. Bitget earlier blamed a third-party security product for the September 24, 2026 theft and pinned the attack on North Korea; wallet and exchange operators should audit the security vendors holding privileged access inside their own stacks.

Sources: BleepingComputer · The Hacker News · The Hacker News · BleepingComputer · ↑ top

5. Apple CoreGraphics Exploit Code Goes Public

Vulnerabilities and Exploits · [zero-day, mobile, spyware]

Latest developments: Researchers published the first public proof of concept for CVE-2026-86950 on October 1, 2026, a malicious PDF carrying a crafted embedded font that crashes unpatched iPhones and Macs, and pointed to the PDF checks WhatsApp performs as a hint at the delivery path; Magnet Forensics separately claims in a leaked video that its GrayKey tool bypasses the iPhone inactivity reboot that had locked police out of seized phones, and Paragon Solutions Chief Executive Andrew Boyd told Wired where his company's promise to keep bad actors away from its spyware runs out.

read more

CVE-2026-86950 is an out-of-bounds write in Apple's CoreGraphics that attackers already used against specific targeted individuals; Apple patched iOS 26, iPadOS 26, macOS 26, and macOS 15, and CISA added the flaw to its Known Exploited Vulnerabilities catalog. Push the Apple updates to every managed device, and treat any phone out of its owner's hands as readable.

Sources: The Hacker News · 404 Media · Wired Security · ↑ top

6. Gemini 4 Argon Goes Guardrail-Free for Defenders

AI Security · [ai, vulnerability-research]

Latest developments: Google announced Gemini 4 Argon on October 1, 2026 and began rolling it out to a vetted set of cyber defenders through its Fairwind Program, saying the model locates critical software vulnerabilities, validates them, and patches them with no human in the loop, and that it already found a critical flaw in software hospitals use worldwide.

read more

Google plans a version with the cyber guardrails removed for Fairwind participants and its own internal teams, and will open Argon to paid API customers later. Koray Kavukcuoglu, Google's chief artificial intelligence architect, pitched it as frontier performance across software engineering, legal and finance work, and cybersecurity defense; defenders outside the program should expect the same capability to reach attackers.

Sources: SecurityWeek · The Hacker News · Help Net Security · ↑ top

7. Car Apps Feed Owner Data to Ad Brokers

Policy and Regulation · [privacy, data-sharing]

Latest developments: Researchers at Northeastern University tested 21 vehicles and 30 carmaker apps with Consumer Reports, which supplied the cars it had bought for testing, and reported on October 1, 2026 that some apps send vehicle identification numbers, email addresses, phone numbers, and location data to advertising, tracking, and analytics companies.

read more

The companion app a buyer installs to unlock or locate a car routes identifiers and movement history into the advertising ecosystem, which ties a driver's trips to a named person. Fleet operators and executives who treat vehicle telematics as private should assume third parties already hold it.

Sources: Help Net Security · The Record · Schneier on Security · ↑ top

8. NetScaler Payload Mints a Superuser

Vulnerabilities and Exploits · [exploit, zero-day, web-shell]

Latest developments: The Threat Hunt Operations and Research team at LevelBlue reported on October 1, 2026 that it traced NetScaler exploitation across multiple customer environments to a post-exploitation payload that creates a superuser account and maps a web shell to URLs resembling stylesheet requests, while attackers also tried to steal appliance configuration data.

read more

The pre-authentication command injection flaws CVE-2026-88771 and CVE-2026-88772 in Citrix NetScaler ADC and NetScaler Gateway have carried attackers from zero credentials to root since early September 2026, and Palo Alto Networks Unit 42 updated its threat brief on September 30, 2026. Patch, then hunt for unexpected superuser accounts and web shell paths that masquerade as CSS.

Sources: The Hacker News · Unit 42 (Palo Alto) · ↑ top

9. Pentagon Personnel Records Breach Notifications

Data Breaches · [breach, government]

Latest developments: The Defense Manpower Data Center began notifying victims on October 1, 2026 that hackers breached the Pentagon's human resources management system in October 2025 and stole records on 2.76 million living people, including current and former defense personnel and their dependents, plus 294,000 deceased individuals, a Defense Department official told CNN.

read more

The center, established in 1974, is the central hub for Department of Defense data on military personnel and service status. Service members, veterans, and dependents who receive a notice should freeze credit and expect targeted phishing that cites accurate service details.

Sources: BleepingComputer · Help Net Security · ↑ top

10. OpenAI Disrupts a Moonshot AI Distillation Campaign

AI Security · [ai, policy]

Latest developments: OpenAI said on September 30, 2026 that it identified and shut down a coordinated distillation campaign that pulled protected reasoning out of its models, and attributed the core cluster, which runs back to the first week of July 2026, to individuals associated with Moonshot AI, the Chinese artificial intelligence company based in Beijing.

read more

Distillation copies a rival's model behavior by harvesting its outputs, and OpenAI treats the extracted reasoning traces as protected intellectual property. A Federal Trade Commission spokesperson separately confirmed an investigation into OpenAI and Anthropic over possible risks their products pose to consumers, and declined further comment.

Sources: The Hacker News · SecurityWeek · ↑ top

Business and Politics

A Sixth Arrest Ties Iran to RAF Fairford

Latest developments: British counter-terrorism police arrested a dual British-Iranian national under terror laws Thursday, October 1, the sixth arrest over the security incident at RAF Fairford, two days after Prime Minister Andy Burnham said "strong indications" point to Iranian involvement.

read more

RAF Fairford in Gloucestershire, England, hosts the United States Air Force bombers that have flown missions against Iran, and police detained five British nationals near the base on September 27 on suspicion of preparing a terrorist act. Confirmation of an Iranian hand would make the plot a state attack on NATO soil and pull Britain further into the United States-Iran war that has driven European energy prices to records.

Sources: FT Home · ↑ top

The Global Bond Selloff Deepens

Latest developments: Selling spread into eurozone government debt Thursday, October 1, after the 10-year Treasury yield reached its highest level since 2002, the dollar hit its strongest level against a basket of currencies since April 2025, stocks fell as weekly jobless claims landed, and the Financial Times put France on the edge of a debt spiral as its government hunts tens of billions of euros in cuts for next year.

read more

Sovereign borrowing costs across the United States, Europe, and Japan have returned to multiyear highs as energy-driven inflation and doubts about the American fiscal outlook push investors out of government debt, a dynamic the Financial Times calls a vicious loop of forced selling. United Kingdom house prices fell as mortgage rates climbed, Bank of England policymaker Catherine Mann backed lifting the 3.75% policy rate that investors expect to reach 4% in November, and the Bank of Japan's summary of opinions points to a faster pace of increases.

Sources: FT Home · FT Home · WSJ Markets · WSJ Markets · WSJ Markets · WSJ World News · ↑ top

EU Enters Crisis Talks on Releasing Diesel Stocks

Latest developments: The Financial Times reported Thursday, October 1, that European Union governments have opened crisis talks on releasing strategic diesel reserves after the Trump administration warned it could ban United States diesel exports if they refuse.

read more

Diesel prices across Europe have run to records since the United States-Iran war began, and Russia extended its own export ban on September 30, leaving refiners, truckers, and farmers short of fuel heading into winter. Washington's threat ties relief on both sides of the Atlantic to the same barrels, and crude rose again Thursday as traders weighed war risk against Middle East crude exports recovering toward prewar levels.

Sources: FT Home · WSJ Markets · ↑ top

UBS Resists Calls to Leave Switzerland

Latest developments: The Wall Street Journal identified the investor pressing UBS to abandon its Swiss domicile Thursday, October 1, as the United States asset manager Artisan Partners, and UBS publicly rejected the call the same day.

read more

Swiss politicians want far tougher capital requirements on UBS, the country's largest bank and its only remaining globally systemically important lender after the 2023 rescue of Credit Suisse. Shareholders who see that capital burden as unbearable have begun pressing management to relocate, and the bank's resistance now puts it in open conflict with part of its own investor base.

Sources: FT World · WSJ Markets · ↑ top

Pittsburgh

Weather

This Afternoon: Mostly Sunny, high 83F.

Tonight: Mostly Cloudy, low 68F.

Friday: Rain Showers, high 75F.

Business

Efficient Computer Raises $97 Million

Latest developments: Efficient Computer Corp. closed a $97 million Series B round that values the Pittsburgh company at $650 million, WPXI reported Thursday, October 1.

read more

The round, just under $100 million, ranks among the larger venture raises a Pittsburgh startup has announced this year and sets a $650 million mark on a company in the city's computing hardware cluster.

Sources: WPXI · ↑ top

Skild AI Robots Head to Pittsburgh International

Latest developments: Pittsburgh International Airport will run a pilot program with robots powered by the Pittsburgh startup Skild AI, WPXI reported Thursday, October 1.

read more

Skild AI builds artificial intelligence for robots and took part in Nvidia's OpenShell platform launch on September 28. The airport, in Findlay Township, put four robots into service in late September, and the Skild pilot sends a homegrown company's machines roaming the terminal in front of travelers.

Sources: WPXI · ↑ top

Mortgage Rates Reach 7.28%

Latest developments: The average United States 30-year mortgage rate climbed to 7.28%, its highest level in nearly three years, the Post-Gazette reported Thursday, October 1.

read more

Mortgage rates track long-term Treasury yields, which hit their highest level since 2002 on Thursday, so each leg of the global bond selloff lands on the monthly payment of every Western Pennsylvania buyer financing a house. The 7.28% average follows weeks of increases and compounds the end of cheap borrowing the Post-Gazette described for Pittsburgh households on September 28.

Sources: Pittsburgh Post-Gazette · ↑ top

Breeze Airways Flies Pittsburgh to Vero Beach

Latest developments: Breeze Airways began nonstop service from Pittsburgh International Airport to Vero Beach, Florida, WPXI reported Thursday, October 1.

read more

Breeze Airways, the low-fare carrier David Neeleman founded, keeps adding leisure routes out of Pittsburgh International Airport in Findlay Township, and the Vero Beach flight gives travelers on Florida's Treasure Coast a direct link to Western Pennsylvania.

Sources: WPXI · ↑ top

Yelp Ranks Palm Palm Among the Country's Best New Restaurants

Latest developments: Yelp named Palm Palm, in Pittsburgh's East Liberty neighborhood, one of the best new restaurants in America for 2026, WPXI reported Thursday, October 1.

read more

The national ranking puts an East Liberty kitchen in front of a traveling audience, the kind of listing Pittsburgh restaurateurs use to draw diners from outside the neighborhood.

Sources: WPXI · ↑ top

Duquesne Light Workers Walk Out

Latest developments: Nearly 1,000 members of IBEW Local 29 struck at midnight Thursday, October 1, and Duquesne Light Co. told customers later that morning that it is maintaining normal operations despite the walkout.

read more

The striking employees build, maintain, and restore the electric system Duquesne Light runs for more than 600,000 customers in Allegheny and Beaver counties. Workers gathered outside company property around 11 p.m. Wednesday before picketing began, and customers told WPXI they worry about how long restoration will take if another major storm arrives during the strike.

Sources: TribLive · WPXI · KDKA · WPXI · WTAE · TribLive · ↑ top

Carnegie Mellon's $3 Billion Gift Splits Two Cities

Latest developments: KDKA laid out the donor's background Thursday, October 1, reporting that Ken Griffin founded and runs Citadel, a Miami hedge fund with $76 billion in investment capital, as WTAE reported $1 billion of his gift lands on Carnegie Mellon University's Pittsburgh campus and the balance launches a new campus in Miami.

read more

Griffin gave Carnegie Mellon $3 billion, the largest gift in the university's history. The Pittsburgh billion goes to computer science and other campus priorities in Oakland, making the terms of the split the central question for a university whose research footprint anchors the regional technology economy.

Sources: WTAE · KDKA · ↑ top

The World's Robotics Engineers Convene in Pittsburgh

Latest developments: WTAE reported Wednesday night, September 30, that Pittsburgh is hosting the International Conference on Intelligent Robots and Systems this week.

read more

The conference, known as IROS, brings robotics researchers and their machines to Pittsburgh, with demonstrations running from robots built for hazardous industrial work to units that assist in delicate surgery and in everyday household tasks. The gathering puts the city's universities and robotics companies in front of an international engineering audience.

Sources: WTAE · ↑ top

Around Town

Allegheny County Opens Its 'I Voted' Sticker Contest

Latest developments: The Allegheny County Elections Division began accepting entries Thursday, October 1, in the student contest that will produce the "I Voted" sticker handed to county voters during the 2027 elections.

read more

The Elections Division, which runs voting for roughly 1.2 million residents, asks county students to submit designs and distributes the winning one at the polls in 2027.

Sources: WPXI · ↑ top

The State Police Open a Cadet Cycle

Latest developments: The Pennsylvania State Police opened a new cadet selection cycle Thursday, October 1, for applicants who want to become troopers.

read more

The State Police patrol Pennsylvania's highways and provide police coverage for the many municipalities that run no department of their own, and the department accepts trooper applicants only during these periodic cycles.

Sources: WPXI · ↑ top

Lane Closures Hit the Parkway East Bathtub

Latest developments: KDKA reported Thursday, October 1, that PennDOT's long-term lane closure in the Parkway East's bathtub section runs through July, and WPXI reported crews stopped outbound traffic at the Fort Pitt Tunnel that morning for emergency lighting repairs.

read more

The bathtub, a 1,150-foot stretch of Interstate 376 at the edge of downtown Pittsburgh, floods whenever the Monongahela River rises and backs traffic up for miles. PennDOT's $14.34 million project aims to end those shutdowns, and KDKA's John Shumway walked drivers through what the closure means for the commute.

Sources: KDKA · KDKA · WPXI · ↑ top

Polish Hill Splits Over a Proposed Shelter

Latest developments: The zoning hearing on a proposed homeless shelter in Polish Hill takes place Thursday, October 1, and PublicSource reported that morning on how sharply the neighborhood divides over it.

read more

Supporters in Pittsburgh's Polish Hill told PublicSource the project would save lives, with one resident saying, "The reality is that homeless people don't get perfect things. This is not going to be a perfect thing. But it's a life-saving thing." Other residents told the outlet Polish Hill is the wrong location, and the zoning decision determines whether the shelter proceeds.

Sources: PublicSource · ↑ top

The City Moves to Close a North Side Drop-In Center

Latest developments: The Post-Gazette reported Thursday, October 1, that neighbors and clients oppose the city of Pittsburgh's plan to close the Roots drop-in center on the North Side, with one telling the paper, "There's nowhere for them to go."

read more

The Roots center gives people without housing a daytime place to sit, warm up, and reach social services on Pittsburgh's North Side. Its users and the community members who spoke to the Post-Gazette say they know of no comparable place nearby, and the closure arrives as the city weighs where shelter capacity belongs.

Sources: Pittsburgh Post-Gazette · ↑ top

A Summerlike Thursday, Then Friday Showers

Latest developments: WPXI said Thursday morning, October 1, that parts of Western Pennsylvania reach the 80s and feel more like mid-August than the first day of October, with Friday, October 2, still the week's wettest day and stray showers lingering through the weekend.

read more

WTAE calls Thursday dry and warm across the region and labels Friday an Impact Day with showers and falling temperatures. KDKA meteorologist Ron Smiley describes Thursday as a prime summer day, with Friday carrying the best rain chance and stray showers hanging on through a cloudy weekend.

Sources: WTAE · KDKA · WPXI · ↑ top

Events

A Wiz Khalifa Weekend, With TacoMania and Reel Q

Latest developments: NEXTpittsburgh and the Post-Gazette published their guides Thursday, October 1, to the weekend of October 1 through 4, and KDKA's Pittsburgh Today Live ran Table Magazine arts and culture editor Sean Collier's weekend guide the same morning.

read more

NEXTpittsburgh's list runs more than 15 deep and leads with the ScareHouse Halloween Hangout on the North Shore, the Reel Q LGBTQ+ film festival, which opens Friday, October 2, and TacoMania. The Post-Gazette's guide builds its weekend around a Wiz Khalifa concert, the Penguins, and bees.

Sources: NEXTpittsburgh Events · Post-Gazette Arts & Entertainment · KDKA · ↑ top

The Witches Gala Takes Over Greensburg

Latest developments: TribLive reported Thursday, October 1, that the annual Greensburg Witches Gala keeps expanding ahead of Saturday night.

read more

The gala runs 5 to 9 p.m. Saturday, October 3, along South Pennsylvania Avenue in Greensburg, drawing costumed visitors to the street for an evening organizers promise will be spellbinding.

Sources: TribLive · ↑ top

In Clay Opens City Theatre's Season

Latest developments: TribLive published its review Thursday, October 1, calling "In Clay" an inspired opener for City Theatre Company's 2026-27 season.

read more

"In Clay" is a one-woman musical about making art, and it leads off the season at City Theatre Company on Pittsburgh's South Side.

Sources: TribLive · ↑ top

Sovereign Ground Opens at Brew House Arts

Latest developments: Pittsburgh City Paper reported Thursday, October 1, on Sovereign Ground, the new group exhibition the collective The Future Is Black organized at Brew House Arts.

read more

Sovereign Ground gathers work by more than 20 artists at Brew House Arts and takes up the question of who pays for Black art in Pittsburgh, a question City Paper reports the organizers built the show around.

Sources: Pittsburgh City Paper · ↑ top

Chelsea Handler Plays The Wylie

Latest developments: Pittsburgh City Paper previewed Chelsea Handler's Pittsburgh show Thursday, October 1, at the new Citizens Live at The Wylie.

read more

Handler, the comedian and talk-show host, brings a set heavy on her opinions and her experiences with LSD to Citizens Live at The Wylie in the Lower Hill District. Controversy follows the tour: comedian Salma Hindy says she lost her spot on it after she spoke with Handler about Palestine.

Sources: Pittsburgh City Paper · ↑ top

The Wylie Starts Its First Week of Shows

Latest developments: NEXTpittsburgh reported Thursday afternoon, October 1, that Citizens Live at The Wylie has officially opened in the Hill District, with one Penguins fan predicting event-night parking turns into a mess, and the Post-Gazette assessed that morning where the hall fits among Pittsburgh's concert venues.

read more

Citizens Live at The Wylie, the 4,000-capacity hall in Pittsburgh's Lower Hill District, opened Monday, September 28, after two years of construction, and it now competes for touring acts with Stage AE, the Benedum Center, and PPG Paints Arena.

Sources: Post-Gazette Arts & Entertainment · NEXTpittsburgh Events · ↑ top

This Week's Picks, October 1 to 7

Latest developments: Pittsburgh City Paper published its week-ahead events list Thursday, October 1.

read more

The list covers Thursday, October 1, through Wednesday, October 7, and leads with art made for goats, a Disney villain drag show, an opera staged on the shore, and a walking tour of the South Side.

Sources: Pittsburgh City Paper · ↑ top

Sports

Steelers (2-1)

Up Next · Steelers @ Browns · Thu Oct 1, 8:15 PM

Penguins (1-0-0)

Wed Sep 30 · Penguins 7 · Flyers 0 · Final

Malkin scores, Silovs stops 19 shots as Penguins pile on in 7-0 win over Flyers in teams' opener

Up Next · Canadiens @ Penguins · Sat Oct 3, 7:00 PM

Around the Teams

Severino Heads to the Arizona Fall League

Latest developments: The Post-Gazette previewed the Pirates' Arizona Fall League contingent Thursday, October 1, naming Jhonny Severino as the prospect positioned for the kind of breakout Esmerlyn Valdez produced there.

read more

The Arizona Fall League puts the game's better minor leaguers on shared rosters each October, and the Pirates use it to speed up young hitters. Beat coverage points to Severino as this year's candidate to force his way up the organization the way Valdez did, a matter of some weight for a club building around Paul Skenes.

Sources: Post-Gazette Pirates · ↑ top

The Steelers Trade Joey Porter Jr. to Dallas

Latest developments: The Post-Gazette reported early Thursday, October 1, that the Steelers are sending cornerback Joey Porter Jr. to the Dallas Cowboys for a pair of draft picks, and columnist Noah Hiles called the episode a sad saga that never should have happened.

read more

General manager Omar Khan moved Porter after a contract standoff and four consecutive absences, taking back a package that reporting pegs as including a second-round pick. Asante Samuel Jr. has handled Porter's spot on the outside, and Gerry Dulac spent much of his Wednesday chat with Post-Gazette readers on Porter's situation heading into Cleveland.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · Post-Gazette Steelers · Post-Gazette Steelers · ↑ top

Thursday Night at Cleveland

Latest developments: The Post-Gazette's scouting report, published Thursday morning, October 1, argues the more dominant defensive front decides the game, Gerry Dulac released his Week 4 picks the same morning, and Cam Heyward's Not Just Football scheduled a live postgame show after the 8:15 p.m. kickoff at Huntington Bank Field on Prime Video.

read more

The Steelers and Browns meet in an AFC North game that pits two strong defensive lines against each other. The Post-Gazette also traced a run of inexplicable Steelers losses in Cleveland that has shaped the rivalry lately, and head coach Mike McCarthy previewed the matchup with Bob Pompeani on Steelers Insider.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · Pittsburgh Steelers (YouTube) · Post-Gazette Steelers · Not Just Football with Cam Heyward · ↑ top

Team USA

Girma Misses the Spain Matches

Latest developments: Chelsea defender Naomi Girma will miss the United States women's upcoming matches against Spain with a muscle injury, ESPN reported Thursday, October 1.

read more

Girma anchors the United States back line, and her injury thins coach Emma Hayes's defense for a two-game set against Spain on a roster that already carries Ashley Sanchez, the National Women's Soccer League's leading scorer, recalled after nearly two years away.

Sources: ESPN Soccer · ↑ top

The United States Meets Mexico on Saturday

Latest developments: ESPN previewed the United States-Mexico match Thursday, October 1, framing Saturday, October 3, as the first measure of Mauricio Pochettino's youth movement against Mexico's reliance on veterans in the cycle leading to the 2030 World Cup.

read more

Pochettino has handed debuts to a string of teenagers in this window, among them 16-year-old Cavan Sullivan of the Philadelphia Union and 17-year-old Mathis Albert, who scored in the 4-2 win over Chile in St. Louis on September 29. Mexico has gone the other way since the 2026 World Cup and kept its experienced core together.

Sources: ESPN Soccer · ↑ top

Bugg Re-Signs With the Seattle Reign Through 2030

Latest developments: United States international defender Jordyn Bugg signed a new contract with Seattle Reign FC that keeps her at the club through the 2030 National Women's Soccer League season, ESPN reported Thursday, October 1.

read more

Bugg commits four more seasons to the Reign, the Seattle club where Jess Fishlock passed Megan Rapinoe as the all-time leading scorer on September 25, and the deal locks up a defender in the United States women's national team pool well past the 2027 World Cup.

Sources: ESPN Soccer · ↑ top

Richards Steadies a Young American Back Line

Latest developments: ESPN's player ratings for the United States' 4-2 win over Chile gave center back Chris Richards an 8 out of 10, crediting him with a goal and with calming an inexperienced defense after the team fell behind.

read more

The United States men beat Chile 4-2 in St. Louis on Tuesday, September 29, the second match of a window in which coach Mauricio Pochettino has handed debuts to a string of teenagers. Richards, the Crystal Palace defender, scored and anchored the back line, and Sebastian Berhalter added a goal and an assist for the second straight match.

Sources: ESPN Soccer · ESPN Soccer · ↑ top

Tebas Calls the Balogun Reversal Unprecedented

Latest developments: LaLiga president Javier Tebas called the overturning of Folarin Balogun's World Cup red card "the most serious incident in the history of football," ESPN reported Thursday, October 1.

read more

Balogun, the United States forward, drew a red card at the 2026 World Cup that officials later reversed, a decision that still draws fire from the heads of European leagues. United States coach Mauricio Pochettino said last week he wishes he had pressed the appeal of the suspension himself.

Sources: ESPN Soccer · ↑ top

DeMelo Re-Signs With Racing Louisville

Latest developments: Racing Louisville FC signed midfielder Savannah DeMelo through the 2027 season with a club option for 2028, ESPN reported Thursday, October 1, ahead of her expected return to the field Saturday, October 3.

read more

DeMelo, the American midfielder who has played for the United States women's national team, has not played in more than a year following a cardiac event, and a lawsuit over that episode remains pending. The new contract keeps her in Louisville as she returns to National Women's Soccer League play.

Sources: ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,690.72  ▼ -0.2%
Dow        51,383.22  ▼ -0.8%
Nasdaq     26,897.41  ▲ +0.2%
WTI crude      91.88  ▼ -5.2%
EUR/USD       1.1370  ▼ -0.9%
GBP/USD       1.3234  ▼ -1.0%
USD/JPY       157.86  ▲ +0.7%

Feed Health

Security: 24 of 24 feeds loaded, 73 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Google Online Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.

Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.

Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.

Events: 4 of 4 feeds loaded, 14 items in the 120-hour window.

Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window.

Team USA: 3 of 3 feeds loaded, 26 items in the 72-hour window. No recent items: Guardian Olympics.

Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.

Markets (Yahoo Finance): 7 of 7 rows

Weather (NWS): 3 forecast periods

Scores (ESPN, plaintextsports): 2 teams via ESPN

Summaries: 3 model call(s) served by claude-opus-5 (449s of model time; $2.42 at API list price).