Jordanian authorities detained the ShinyHunters member known as "Rey," who now helps the FBI hunt the rest of the crew, while MI5 told British universities that China's Ministry of State Security funded research involving more than 100 academics.
Emerging Trends and Key Updates
- Trend MI5 named the China General Technology Research Institute a funding pipe into British academic research, while the Warlock crew encrypted water utilities, governments, and universities through Microsoft SharePoint flaws.
- Trend Google's Gemini may open any file on a Mac while Meta's Muse profiles contacts and moves into shopping against Amazon, as Newport urges investigation of the AI labs.
- Trend A detained ShinyHunters suspect in Jordan now guides the FBI toward his collaborators, even as newer crews like N0n keep stacking claimed victims onto dark web leak sites.
- Update · new The Technical University of Denmark says intruders reached its identity and access management system and downloaded data on as many as 200,000 users.
- Update · new The White House stood up an artificial intelligence task force with a 120-day clock and Director of National Intelligence Jay Clayton atop it as AI czar.
- Update · new Millvale's library broke ground on a tool lending building due in December, Caliente and Isaly's put a joint pizza on the menu, and overnight lows reach the 50s.
Security
1. Meta's Muse Profiles the People Around You
Latest developments: BleepingComputer reported on October 3, 2026 that Google will soon let Gemini reach any file on a macOS device, open applications, and browse the web without asking permission each time, hours after Wired described how Meta's Muse assistant, which millions of people have downloaded, builds detailed profiles of a user's friends and family as the price of carrying out their requests, and a day after Apple rewrote full-disk access permissions to curb what AI agents reach over Meta's argument that the permission alone does not let Muse read messages; 404 Media reported that human workers handle some of what Muse appears to do on its own.
read more
These assistants need broad device access to act for their users, and that access sweeps in contacts, messages, and files describing people who never agreed to anything. Review which agents hold full-disk access on corporate Macs, and treat an assistant's permission grant as a disclosure of everyone in the address book.
Sources: BleepingComputer · Wired Security · Ars Technica Security · 404 Media · ↑ top
2. Fortra BoKS Patches Close an Authentication Bypass
Latest developments: Fortra shipped fixes on October 3, 2026 for critical vulnerabilities in BoKS, its access control software for Unix and Linux servers, that carry an attacker from authentication bypass to shell command execution and memory corruption, and Dark Reading warned on October 2, 2026 that middleware banks and government agencies run alongside SWIFT messaging allows remote code execution that reaches hardware-based multifactor authentication.
read more
BoKS centralizes administrator logins and privilege across Unix and Linux estates, so a bypass there hands over the accounts that manage everything else. Patch BoKS and the SWIFT-adjacent middleware now, and audit administrator sessions created before the fix.
Sources: SecurityWeek · Dark Reading · ↑ top
3. Backdoors Pose as Zoom and Mail Security Appliances
Latest developments: SecurityWeek reported on October 2, 2026 that a counterfeit Zoom installer plants a macOS backdoor called CloudSyncD, with the dropper carrying a complete universal Mach-O binary inside itself, roughly 756 kilobytes in the development build, and extracting it at runtime, and Dark Reading described three newly discovered Linux backdoors built to look and behave like legitimate Asian mail security products.
read more
Both campaigns borrow the appearance of software people install deliberately, one a videoconferencing client and the other an email security appliance, which buys the operators time on the host. Restrict Mac users to installers from zoom.us, and verify the provenance and file hashes of mail gateway images before deployment.
Sources: SecurityWeek · Dark Reading · ↑ top
4. A ShinyHunters Suspect Cooperates From Jordan
Latest developments: BleepingComputer reported on October 3, 2026 that authorities in Jordan detained the suspected ShinyHunters member who goes by "Rey" online, and that he now cooperates with the FBI to help locate other members of the extortion group.
read more
ShinyHunters steals corporate data at scale and extorts the owners, most recently through the Oracle PeopleSoft flaw CVE-2026-35273, and it took FBI recruitment-portal data in September 2026. A cooperating insider raises the odds of further arrests, and any organization the group has touched should expect its name and data to surface in evidence.
Sources: BleepingComputer · ↑ top
5. MI5 Names a Chinese Institute Funding British Research
Latest developments: MI5 issued a Security Service Espionage Alert on September 30, 2026, reported October 3, 2026, saying the China General Technology Research Institute exists primarily to fund research that feeds Beijing's Ministry of State Security, and that more than 100 academics with United Kingdom ties have helped that intelligence gathering.
read more
The institute pays for academic work and routes the results to China's civilian intelligence service, which turns ordinary research collaboration into a collection channel. University research offices and corporate research partners should screen funding sources and co-author affiliations against the alert.
Sources: The Hacker News · ↑ top
6. Warlock Widens Its SharePoint Campaign
Latest developments: The Symantec and Carbon Black Threat Hunter Team reported on October 3, 2026 that Warlock now disables security tools on the hosts it reaches before it deploys ransomware, that the campaign has spread into government and education organizations alongside critical infrastructure in Portuguese- and Spanish-speaking countries, and that the crew likely weaponizes newer Microsoft SharePoint flaws as well as the ones it has used since July 2025.
read more
Warlock, a suspected China-linked group, chains SharePoint vulnerabilities to reach on-premises servers, kills endpoint defenses, and encrypts the network; earlier victims include a water utility, a telecommunications provider, a regional government body, and a university in Spain and Portugal. Patch on-premises SharePoint, and alert on tamper events in endpoint protection rather than trusting its silence.
Sources: The Hacker News · ↑ top
7. DTU Loses Data on 200,000 Users
Latest developments: The Technical University of Denmark said on October 3, 2026 that attackers reached its identity and access management system, downloaded a large volume of data, and may have exposed information belonging to as many as 200,000 users.
read more
The breached system holds the accounts and attributes that govern access across the university, so the theft hands attackers both personal data and a map of who can reach what. DTU students, staff, and research partners should expect credential-stuffing and phishing attempts built from the stolen directory.
Sources: BleepingComputer · ↑ top
8. N0n Extortion Gang Fills Its Leak Site
Latest developments: Graham Cluley reported on October 3, 2026 that N0n, an extortion crew that surfaced in the middle of September 2026 and posted about a dozen claimed victims on its dark web leak site within days of appearing, keeps adding to that tally.
read more
N0n runs the familiar steal-and-publish model, naming organizations on a leak site to force payment. Treat it as an active double-extortion threat, and check offline backups and data exfiltration monitoring against the fast ramp new brands manage in their first weeks.
Sources: Graham Cluley · ↑ top
9. Judge Throws Out the El Faro Pegasus Suit
Latest developments: A judge dismissed the spyware suit brought by journalists at El Faro, the independent Salvadoran news outlet, on October 2, 2026, ruling that the plaintiffs failed to establish jurisdiction in California over the targeting of their phones with Pegasus, the NSO Group spyware.
read more
The El Faro reporters sued in the United States after forensic analysis found Pegasus on their phones, and the order ends the case on venue grounds without reaching the surveillance claims. Journalists and nongovernmental organizations relying on American courts for redress against commercial spyware lose a route with this ruling.
Sources: The Record · ↑ top
Business and Politics
A White House AI Task Force Gets 120 Days
Latest developments: The White House created an artificial intelligence task force Saturday, October 3, and put Director of National Intelligence Jay Clayton atop it as AI czar.
read more
The group has 120 days to report on the risks the technology carries and to decide what responsibility the federal government bears for them, and the White House formed it after industry executives and the public raised alarms. The move lands days after the Federal Trade Commission opened its investigation of OpenAI, Anthropic, and other artificial intelligence companies.
Sources: WSJ Politics · ↑ top
The Bond Rout Reaches Gilts and French Debt
Latest developments: British 30-year gilt yields passed 6% for the first time since 1998, pulling retail buyers into government paper, and the Wall Street Journal laid out Saturday, October 3, how hedge funds' leveraged summer bets on French bonds backfired.
read more
Government borrowing costs keep climbing in the United States, Britain, and the euro area, and the Financial Times' run through the most-cited causes finds no single explanation behind the move. Its Europe Express newsletter reports the sell-off has made France's budget the defining issue of the country's politics and a test for the far right, while the gap between French and German yields sits at a multiyear high.
Sources: FT World · WSJ Markets · FT World · FT World · ↑ top
Beijing Opens an Anti-Dumping Case on European Chemicals
Latest developments: China launched an anti-dumping investigation Saturday, October 3, into chemical exports from the European Union.
read more
The probe answers three similar investigations the European Union opened last week, and it widens the tit-for-tat between Beijing and Brussels into one of Europe's largest export industries.
Xi's Rest Breaks Shortened the Trump Summit
Latest developments: The Wall Street Journal reported Saturday, October 3, that Beijing pared back the schedule and insisted on private downtime for Xi Jinping, cutting hours out of China's leader's meetings with President Trump.
read more
Xi, 73, runs a government that settled none of the trade standoff during the state visit, and Washington and Beijing have agreed to two further meetings. The accommodations his aides demanded put the stamina of China's top decision-maker in front of foreign governments and investors.
Sources: WSJ World News · WSJ US Business · ↑ top
Pittsburgh
Weather
Tonight: Partly Cloudy, low 53F.
Sunday: Mostly Cloudy, high 74F.
Sunday Night: Partly Cloudy, low 51F.
Business
Caliente and Isaly's Build a Pizza Together
Latest developments: WPXI reported Saturday, October 3, that Caliente and Isaly's have put a jointly created pizza on the menu for a limited run.
read more
The pie sells for $24.99 at participating Caliente locations, pairing the Pittsburgh pizza chain with Isaly's, the Western Pennsylvania deli brand.
Arnold Palmer Regional Airport Courts Three Carriers
Latest developments: TribLive reported Saturday, October 3, that Allegiant Air, Breeze Airways, and Frontier Airlines head the list of carriers the airport is pursuing for its new gate.
read more
Arnold Palmer Regional Airport in Unity, Westmoreland County, finished a $22 million expansion that built an additional gate, and rows of chairs there sit empty while the airport recruits an airline to use it.
Carnegie Mellon Weighs Griffin's $3 Billion
Latest developments: The Post-Gazette gathered reaction from Carnegie Mellon University students and professors Saturday, October 3, to Ken Griffin's $3 billion gift and the Miami campus it pays for.
read more
Citadel founder Ken Griffin's donation sends $1 billion to Carnegie Mellon's Pittsburgh campus, with the balance launching a new campus in Miami. The split leaves faculty and students in Oakland assessing how much of the money reaches computer science and other Pittsburgh priorities the university has yet to name.
Sources: Pittsburgh Post-Gazette · ↑ top
A Manufacturing Lab Opens at Westmoreland County Community College
Latest developments: TribLive reported Saturday, October 3, that an advanced manufacturing lab has opened at Westmoreland County Community College near Youngwood.
read more
The lab puts computer-controlled machining equipment in front of students, among it a machine that cuts precision drill-bit holes in aluminum cylinders, and the college aims the training at machining jobs regional employers need filled now and in the years ahead.
Around Town
Millvale's Library Breaks Ground on a Tool Library
Latest developments: The Millvale Community Library broke ground Saturday, October 3, on a dedicated building for its tool lending program, WPXI reported, with completion expected in December.
read more
The library in Millvale, Allegheny County, lends tools to borrowers the way it lends books, and the program has outgrown its space. The new structure gives the collection a home of its own by year's end.
A Chilly Night, Then a Fine Week
Latest developments: WPXI's Saturday evening forecast, October 3, puts Western Pennsylvania's overnight lows in the 50s and the upper 40s in spots, with clouds building late and sun mixing with clouds on Sunday, October 4.
read more
Clear, cool air settled over the region after sunset Saturday. WTAE's Saturday evening outlook carries the dry, seasonal weather through the week ahead.
Mail Ballot Requests Surge in Allegheny County
Latest developments: TribLive reported Saturday, October 3, that mail-in ballot requests in Allegheny County have jumped since the United States Supreme Court blocked the Trump administration's push to overhaul mail-voting rules for this election.
read more
Pennsylvania votes November 3, and the Supreme Court's order leaves the state's existing mail-voting rules in force. Allegheny County's elections division now processes a rising volume of requests five weeks before the midterm.
Pitt Tests a Breast Cancer Vaccine
Latest developments: TribLive reported Saturday, October 3, that University of Pittsburgh and UPMC researchers have begun testing a vaccine designed to stop some breast cancers before they turn invasive.
read more
The experimental vaccine targets early disease, and the Pitt and UPMC team wants to halt the cancer at the stage before it spreads. Success would change screening and prevention for patients across Western Pennsylvania.
The Allegheny County Belt System Faces an Uncertain Future
Latest developments: TribLive traced the history and the murky future of the Allegheny County Belt System on Saturday, October 3, finding Jeff Mrvos among its last devoted users.
read more
The belt system routes drivers around Pittsburgh on existing county and state roads, marked by color-coded signs that date to the postwar decades. Maintenance of the signs and the public's reliance on them have both faded as drivers follow phone navigation instead.
Events
Trundle Manor Shows Its Oddities in Swissvale
Latest developments: TribLive's Offbeat Pittsburgh column profiled Trundle Manor on Saturday, October 3, as the Halloween season opens.
read more
Trundle Manor is the house museum of oddities that Anton Raphael Miriello and Rachel Rech keep in their Swissvale home, a collection TribLive describes as an Addams Family influence made real, and the two met when Rech accepted Miriello's invitation to see it.
Sports
Steelers (2-2)
Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM
Penguins (1-0-0)
Sat Oct 3 · Canadiens 1 · Penguins 0 · 11:19 - 1st (in progress at last update)
Up Next · Jets @ Penguins · Mon Oct 5, 7:30 PM
Around the Teams
The Steelers Corners Inherit Porter's Job
Latest developments: The Post-Gazette wrote Saturday, October 3, that rookie Daylen Everette and the rest of the Steelers' cornerbacks must now embrace the assignment Joey Porter Jr. leaves behind.
read more
The Steelers traded Porter to the Dallas Cowboys for two draft picks on October 1, days after he sat out a fourth straight game, and the secondary then gave up the winning drive in Cleveland on Thursday night. Everette, a rookie whom head coach Mike McCarthy has pushed into the rotation, draws the largest share of the work that remains.
Sources: Post-Gazette Steelers · ↑ top
Team USA
Tyler Adams Takes the Captaincy
Latest developments: Coach Mauricio Pochettino announced Friday, October 2, that Tyler Adams will captain the United States men's national team for the new World Cup cycle.
read more
Adams, the holding midfielder who wore the armband at the 2022 World Cup in Qatar, now leads a squad Pochettino has rebuilt around teenagers and debutants since the 2026 tournament, with the 2030 World Cup as the target.
Sources: ESPN Soccer · ↑ top
The United States Meets Mexico in Glendale
Latest developments: Mexico coach Rafa Marquez confirmed Friday, October 2, that the teenage forward Gilberto Mora has cleared his injury and can play against the United States on Saturday, October 3, in Glendale, Arizona.
read more
Mauricio Pochettino's young United States side, which beat Peru 4-1 and Chile 4-2 over the past week, faces an El Tri team that Marquez took over as head coach and that leans on veterans. ESPN frames the match as the first measure of which approach serves its country better through the 2030 World Cup cycle.
Sources: ESPN Soccer · ESPN Soccer · ↑ top
Reading
- Ed Zitron — Premium: How Has AI Changed The Economy?. Zitron attacks the Wall Street Journal's chart of artificial intelligence's potential share of gross domestic product, arguing that stretching the measure from 2025 to 2032 turns mostly projection into apparent fact, and he asks what the technology has actually changed in the economy so far.
- Stratechery — An Interview with Jason Del Rey About Muse, Amazon, and Walmart. Ben Thompson and Jason Del Rey treat Meta's Muse assistant and its move into shopping as the newest front in retail's oldest fight, Amazon against Walmart, and they weigh how each company's distribution advantages carry into agent-driven commerce.
- Cal Newport — It’s Time to Investigate the AI Labs. Newport catalogs what he calls brazen behavior by the two leading frontier artificial intelligence labs over recent months, starting with a run of carefully staged announcements, and he argues the conduct now warrants formal investigation.
Markets
S&P 500 7,679.05 ▼ -0.7% Dow 51,168.20 ▼ -1.1% Nasdaq 26,908.29 ▼ -0.6% WTI crude 91.28 ▼ -2.8% EUR/USD 1.1310 ▼ -0.9% GBP/USD 1.3238 ▼ -0.3% USD/JPY 157.54 ▼ -0.2%
Feed Health
Security: 24 of 24 feeds loaded, 12 items in the 24-hour window. No recent items: Krebs on Security, Schneier on Security, Dark Reading, CISA Advisories, The Record, Ars Technica Security, Help Net Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.
Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: NEXTpittsburgh.
Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.
Events: 4 of 4 feeds loaded, 12 items in the 120-hour window.
Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube).
Team USA: 3 of 3 feeds loaded, 25 items in the 72-hour window.
Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.
Markets (Yahoo Finance): 7 of 7 rows
Weather (NWS): 3 forecast periods
Scores (ESPN, plaintextsports): 2 teams via ESPN
Summaries: 3 model call(s) served by claude-opus-5 (243s of model time; $1.63 at API list price).