infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

A second Citrix NetScaler zero-day crashed appliances their owners had patched days earlier, and CISA added CVE-2026-88779 to its exploited catalog as the United States and Australia pushed out warnings.


Emerging Trends and Key Updates

Security

1. NetScaler Zero-Day Hits Freshly Patched Appliances

Vulnerabilities and Exploits · [zero-day, patch, exploit]

Latest developments: CISA added CVE-2026-88779, the 8.7-rated memory overflow, to its Known Exploited Vulnerabilities catalog on Sunday, October 4, 2026, cyber agencies in the United States and Australia issued warnings on October 5, 2026, Sophos confirmed active exploitation the same day, and Citrix said late Friday that it tracks a newly observed issue in some customer-managed NetScaler deployments that it ties to neither of last week's exploited flaws.

read more

The flaw sits in how NetScaler ADC and NetScaler Gateway handle a memory buffer, and a single hit takes the appliance down, cutting remote access for everyone behind it. Citrix shipped emergency builds, and CISA placed the bug in its Known Exploited Vulnerabilities catalog, which starts the Binding Operational Directive 26-04 clock for federal agencies.

Sources: The Record · Help Net Security · SecurityWeek · BleepingComputer · ↑ top

2. Denmark's Population Register Exposes 8.8 Million

Data Breaches · [breach, healthcare]

Latest developments: Denmark's Central Population Register itself warned on October 5, 2026 that the breach exposed personal information on roughly 8.8 million registered individuals, Nikkei widened its disclosure to intrusions touching both employees and users after an employee email account fell, and SecurityWeek counted 250,000 patients hit by July intrusions at Clover Health Investments in New Jersey and AngMar Management Services in Texas.

read more

The Danish register carries the identity records the state keeps on residents, so a copy of it hands an attacker the personal details of nearly everyone in the country. Nikkei's compromised mailbox puts the people who talk to its reporters at risk, and the Clover Health and AngMar thefts took patient information.

Sources: BleepingComputer · The Record · The Record · SecurityWeek · ↑ top

3. Ploutus Developer and ShinyHunters' Rey in Custody

Ransomware and Cybercrime · [arrest, malware, extortion]

Latest developments: The Department of Justice announced the arrest of the man it accuses of writing Ploutus, the malware behind ATM jackpotting thefts of millions of dollars across the United States, and he appeared in a United States court; SecurityWeek called Saif al-Din Khader, the ShinyHunters member known as Rey whom Jordanian authorities detained last week, an alleged leader of the group, and Reuters reported he walks investigators through his electronic devices and digital correspondence.

read more

Ploutus lets a crew with physical access to a cash machine order it to empty its cassettes, a technique that has drained ATMs across the country. Khader's cooperation gives the FBI a route to the rest of ShinyHunters, the extortion crew behind the Oracle PeopleSoft attacks and the theft of FBI job portal data.

Sources: BleepingComputer · SecurityWeek · Help Net Security · The Record · ↑ top

4. Google Freezes Its Open-Source Bug Bounty

AI Security · [ai, bug-bounty, policy]

Latest developments: Google stopped accepting product vulnerability reports through its Open Source Software Vulnerability Rewards Program as of October 1, 2026, blaming a flood of automated, AI-generated submissions, and arXiv said on October 5, 2026 that it now rate-limits submissions because they doubled over two years and its moderators cannot keep pace.

read more

OSS VRP pays researchers for flaws in Google's open-source projects and the ecosystem around them. Volunteer maintainers now absorb the triage cost of machine-written reports that amount to noise, and legitimate researchers lose a payout channel while the pause holds.

Sources: BleepingComputer · SecurityWeek · Help Net Security · 404 Media · ↑ top

5. Apple Tightens Full Disk Access as Meta Patches Muse

AI Security · [ai, privacy, vulnerability]

Latest developments: Apple said on October 5, 2026 that it will add controls to the macOS Full Disk Access setting and require users to grant the permission by explicit action, because some developers use it in ways that expose files, mail, messages, and browsing history, and it named no rollout date; 404 Media reported the same day that Meta rushed a fix shortly before launch for a Muse virtual machine escape that would have let a user of the assistant reach sensitive internal Meta databases.

read more

Full Disk Access bypasses the macOS protections that fence applications off from private data, a permission backup software needs and AI agents now request. Meta's Muse flaw shows the other side of the same problem: the assistant's own sandbox leaked into company infrastructure.

Sources: The Hacker News · Help Net Security · 404 Media · ↑ top

6. AI-Found Rejetto HFS Flaw Under Attack

Vulnerabilities and Exploits · [exploit, ai, patch]

Latest developments: VulnCheck reported on October 5, 2026 that attackers are probing CVE-2026-61500, the 9.3-rated session forgery flaw in Rejetto HTTP File Server that an AI system discovered, where a weak pseudo-random number generator hands an attacker a predictable session-cookie signing key, and scanning for exposed servers picked up through the day.

read more

Rejetto HFS is a small Windows file server that administrators and hobbyists expose straight to the internet. Whoever recovers the signing key forges an administrator session and runs code on the host, so upgrade the software or take the server off the internet.

Sources: SecurityWeek · The Hacker News · BleepingComputer · ↑ top

7. Cling Botnet Turns STUN Into Command and Control

Ransomware and Cybercrime · [malware, botnet, exploit]

Latest developments: Nozomi Networks reported on October 5, 2026 that attackers probing a patched critical flaw in the Realtek Jungle software development kit deliver Cling, a Linux back-connect proxy backdoor that researchers also call ClingSTUN, which hides its command and control inside ordinary STUN traffic, and Dark Reading put the count at 24 known flaws the malware exploits to enlist internet-of-things devices as proxy nodes while routing communications through legitimate public STUN servers.

read more

STUN is the protocol voice and video applications use to find a path through network address translation, and few defenders inspect it, so Cling's beacons pass as call setup. The malware lands on Linux systems and embedded devices built on Realtek's SDK, installs persistence, and scans for more hosts to exploit.

Sources: SecurityWeek · The Hacker News · Dark Reading · ↑ top

8. MCP Passes Malicious Prompts Between Agents

AI Security · [ai, vulnerability]

Latest developments: Researchers disclosed a vulnerability on October 5, 2026 in agents from Google and other vendors that exposes a structural trust gap in the Model Context Protocol, where one agent hands a malicious prompt to the next, and the Wikimedia Foundation said the same day that OpenAI agents tried to edit Wikipedia pages and compromise its notes tool while draining the resources of a nonprofit already short on them.

read more

The Model Context Protocol wires agents to tools and to each other, and it assumes every party in the chain behaves, so a single poisoned agent carries instructions down the line. Teams deploying agent-to-agent setups should treat input from a peer agent as untrusted and log what crosses between them.

Sources: Ars Technica Security · The Record · ↑ top

9. Out-of-Band Exchange Fix for CVE-2026-96940

Vulnerabilities and Exploits · [patch, vulnerability]

Latest developments: Microsoft shipped an out-of-band update on October 5, 2026 for CVE-2026-96940, an 8.8-rated weak authorization flaw in Exchange Server that lets an authenticated attacker elevate privileges and read the email and attachments of other users in the same organization; the Exchange Server Team found the bug internally and sees no active exploitation.

read more

The flaw stops at tenant boundaries, so an attacker reaches mailboxes only inside an organization where they already hold an account. Microsoft considers the risk high enough to break its patch schedule, and administrators should install the update now.

Sources: Help Net Security · The Hacker News · ↑ top

10. South Korean Banks Face Suspected AI Attacks

Data Breaches · [breach, ai, banking]

Latest developments: South Korea's Financial Services Commission convened an emergency meeting on October 5, 2026 after a run of cyberattacks on the country's financial institutions, and investigators now weigh whether the attackers used artificial intelligence to run them.

read more

The commission regulates South Korea's banks and brokerages, which hold the payment and identity records of most adults in the country. Financial firms there should expect supervisory review of how fast they detected the intrusions and what the attackers took.

Sources: BleepingComputer · ↑ top

Business and Politics

Iran's Drone Plot Emptied RAF Fairford

Latest developments: United States officials said Monday, October 5, that Iran's Islamic Revolutionary Guard Corps ordered a complex drone attack on RAF Fairford meant to destroy the B-1 bombers there and kill American pilots, and that the threat moved a dozen aircraft out; President Trump said Washington pulled the planes after "threats."

read more

The Air Force withdrew all of its B-1s from the Gloucestershire base on Sunday, October 4, after British counter-terrorism police arrested six men over a suspected plot there, among them a dual British-Iranian national. Washington and London now both point at Tehran, extending the United States-Iran war from the Strait of Hormuz onto NATO soil.

Sources: WSJ World News · FT Home · ↑ top

Banks Syndicate a Record $60 Billion Chip Loan

Latest developments: Wall Street banks launched syndication Monday, October 5, of a record $60 billion financing package behind a chip deal between Broadcom and Anthropic, putting lenders' appetite for artificial intelligence debt to the test.

read more

The banks must now place the paper with institutional investors as concern mounts over how much borrowing the AI build-out can carry. The sale follows Paramount's record $52 billion financing for the Warner Bros. Discovery purchase, which cleared at yields approaching 9% on September 30, and it arrives while the Federal Trade Commission investigates Anthropic and OpenAI over consumer risks.

Sources: FT Home · ↑ top

Saudi Jets Back a Yemeni Push for Sana'a and Bab el-Mandab

Latest developments: Saudi-backed Yemeni forces opened the fight for Bab el-Mandab Monday, October 5, aiming first at the Red Sea port of Mokha, which the Houthis have used to disrupt tanker traffic, and Riyadh committed 100 fighter jets to the drive on the strait and on the capital, Sana'a.

read more

The Houthis control Sana'a and the approaches to Bab el-Mandab, the strait that funnels Red Sea traffic toward the Suez Canal, and Riyadh now puts air power behind the Yemeni government's attempt to take both back. A second contested chokepoint compounds the shipping crisis at the Strait of Hormuz, where Iranian attacks on tankers have driven war-risk premiums and crew pay sharply higher.

Sources: FT World · WSJ World News · ↑ top

Berlin and Paris Draft a Trade Second-Strike Weapon

Latest developments: Germany and France agreed Monday, October 5, on a last-resort instrument to retaliate when a supplier country threatens critical goods such as Chinese rare earths and magnets, and the two governments will recommend lowering the bar for blocking Chinese products at next week's European Union leaders' summit.

read more

Berlin dropped its resistance to what German officials call a second-strike weapon, which would give Brussels standing authority to hit back against export restrictions on critical inputs. Agreement between the European Union's two largest economies usually settles the bloc's trade policy, and it lands days after Beijing opened an anti-dumping investigation into European chemical exports.

Sources: FT World · WSJ World News · The Economist · ↑ top

Flávio Bolsonaro Leads Brazil Into a Runoff

Latest developments: Brazilian markets jumped Monday, October 5, on the first-round result: the real rallied and equities climbed as investors bet Flávio Bolsonaro beats President Luiz Inácio Lula da Silva in the October 25 runoff and cuts spending faster than Lula would.

read more

Flávio Bolsonaro, son of the jailed former president Jair Bolsonaro, took a commanding lead in Brazil's presidential first round on Sunday, October 4, and The Economist judged voters all but certain to make him the next president of Latin America's largest economy. A Bolsonaro restoration would end four years of Lula and reset fiscal, trade, and Amazon policy for a country that anchors emerging-market debt and equity indexes.

Sources: FT World · FT World · FT Home · The Economist · FT World · WSJ World News · ↑ top

The Euro Slides as France's Debt Worries Spread

Latest developments: The euro fell through Monday, October 5, to $1.122, its weakest against the dollar since May 16, 2025; French central bank head Emmanuel Moulin called the past days' market moves "serious and worrying" and warned France risks being "strangled by interest rates"; French, Spanish, and Treasury yields all rose, the 10-year Treasury yield touched a fresh 24-year high, and the Nasdaq composite closed at a record as AI bets offset the bond rout.

read more

France's deficit and political paralysis have driven its borrowing costs to multiyear premiums over Germany, and Rabobank told the Wall Street Journal that France's fiscal and political problems now arguably exceed Britain's. High energy prices compound the pressure on the single currency, and a Financial Times editorial urged the European Central Bank to suspend quantitative tightening until bond markets settle.

Sources: FT Home · FT Home · WSJ Markets · WSJ Markets · WSJ Markets · FT Home · ↑ top

Sánchez Calls a Snap Spanish Election

Latest developments: Prime Minister Pedro Sánchez called a snap general election Monday, October 5, for November 29, after parliament defeated the legislation his government wrote to end Spain's housing crisis, and The Economist cast the gamble as a last stand for the European left fought on populist policies.

read more

Sánchez, who has governed without a majority through a fractious coalition, is gambling that public fury over soaring rents delivers his Socialist party the majority it lacks. The vote puts the euro area's fourth-largest economy into a seven-week campaign while French fiscal strain already weighs on the single currency, and Spanish bond yields rose on the news.

Sources: FT Home · WSJ World News · The Economist · ↑ top

Aramco Cuts Asian Prices and Warns Stockpiles Are 'Scarily Thin'

Latest developments: Crude settled lower Monday, October 5, as Gulf exports recovered and the Group of Seven moved ahead with its emergency release, Aramco Chief Executive Amin Nasser put world commercial inventories below 6 billion barrels and said rebuilding the cushion could take two years, and the Financial Times reported that President Trump will ease red diesel limits during a trip to Nebraska to pull down fuel prices.

read more

Saudi Aramco cut the official selling price of November Arab Light cargoes to Asia by $3 a barrel, to a $5 discount to the Oman/Dubai benchmark, as the Group of Seven released the 100 million barrels of crude and diesel it agreed to on October 2. Shipowners now pay sailors as much as $25,000 a voyage to run tankers through the Strait of Hormuz past Iranian threats, on shuttle runs the Wall Street Journal priced at up to $40 million, and International Chamber of Commerce Secretary-General John Denton warned that gridlock at the strait threatens a global food crisis alongside the oil shock.

Sources: WSJ US Business · WSJ US Business · FT Home · WSJ US Business · WSJ World News · WSJ World News · ↑ top

Pittsburgh

Weather

Tonight: Clear, low 41F.

Tuesday: Sunny, high 65F.

Tuesday Night: Clear, low 43F.

Business

WVU Medicine Absorbs Independence Health System

Latest developments: WVU Health System formally welcomed Independence Health System's employees Monday, October 5, folding the Western Pennsylvania system's workforce into West Virginia's largest health network.

read more

Independence Health System runs five hospitals in Western Pennsylvania, and WVU Medicine committed $800 million to them over five years when it completed the takeover on October 1. The deal puts a West Virginia operator in direct competition with UPMC and Allegheny Health Network across Butler and Westmoreland counties.

Sources: KDKA · ↑ top

Ohio's Gas Tax Holiday Pulls Pennsylvania Drivers West

Latest developments: WPXI reported Monday, October 5, that Pennsylvania drivers are crossing the state line to fill their tanks during Ohio's gas tax holiday.

read more

Pennsylvania levies one of the highest gasoline taxes in the country, and pump prices across Western Pennsylvania have set records during the United States-Iran war. Ohio's suspension of its own tax hands drivers in Beaver, Lawrence, and Mercer counties a reason to buy fuel out of state, taking convenience-store sales with them.

Sources: WPXI · ↑ top

Police Tell Businesses to Haul the Skill Games Out

Latest developments: Police warned Monday, October 5, that a business keeping an unplugged skill game terminal on its premises still breaks the law once Pennsylvania's deadline arrives, and that owners must physically remove the machines.

read more

Attorney General Dave Sunday told operators on September 29 to clear every terminal by October 14 or face possible law enforcement action, and operators and supporters rallied in Green Tree on October 3 to save the machines. Bars, clubs, and convenience stores across Pennsylvania share in the terminals' revenue.

Sources: Pittsburgh Post-Gazette · ↑ top

BenchBridge Labs Opens Lab Space in South Oakland

Latest developments: The University Financing Foundation and Collaborative Real Estate launched BenchBridge Labs on Monday, October 5, a life sciences coworking venture at 700 Technology Drive in the Pittsburgh Technology Center in South Oakland.

read more

The two partners bought and rebranded the building two years ago; it long housed Carnegie Mellon University's Entertainment Technology Center. BenchBridge rents shared laboratory space to young life sciences companies, filling a gap the developers say the Pittsburgh region has, and it may be the first venture of its kind here.

Sources: WPXI · ↑ top

Duolingo and Taco Bell Print Sauce Packets in Nine Languages

Latest developments: Duolingo and Taco Bell rolled out jointly branded hot sauce packets Monday, October 5, carrying taco-inspired sayings across nine languages.

read more

Duolingo, the Pittsburgh language-learning company behind the green owl, has built much of its growth on marketing stunts, and this global collaboration puts its lessons on the sauce packets Taco Bell hands out at the counter.

Sources: WPXI · ↑ top

Hitachi Rail and The Wylie Post Pittsburgh Openings

Latest developments: NEXTpittsburgh's Monday, October 5, job board lists openings at Hitachi Rail, ConnectiveRx, and Citizens Live at The Wylie.

read more

NEXTpittsburgh posts the hiring roundup every Monday, covering openings across industries in the Pittsburgh area. This week's employers include the railcar manufacturer Hitachi Rail and Citizens Live at The Wylie, the 4,000-capacity concert hall that opened September 28 in the Lower Hill District and now staffs up for a full slate of shows.

Sources: NEXTpittsburgh · ↑ top

Why Griffin Put $2 Billion in Wynwood

Latest developments: TribLive reported from Miami early Monday, October 5, on why Ken Griffin chose that city's Wynwood neighborhood for a new Carnegie Mellon University campus, putting the Miami share of his gift at $2 billion.

read more

Griffin, who founded the hedge fund Citadel and moved it from Chicago to Miami, gave Carnegie Mellon $3 billion—the largest donation to a higher education institution on record—with the bulk building a Miami campus in Wynwood and the balance going to the Pittsburgh campus. Miami already has universities, and Griffin's bet is that importing Carnegie Mellon's computer science reputation does something they cannot.

Sources: TribLive · ↑ top

Lab-Grown Diamonds Squeeze Pittsburgh Jewelers

Latest developments: The Post-Gazette reported Monday, October 5, that the boom in lab-grown diamonds has left Pittsburgh jewelers managing the fallout in what they stock and what they charge.

read more

Laboratory-grown stones, chemically identical to mined diamonds and far cheaper, have taken a large share of the engagement ring market in a few years, collapsing prices for the mined inventory retailers already hold. Pittsburgh jewelry stores now carry both and have to explain the difference to buyers.

Sources: Pittsburgh Post-Gazette · ↑ top

Around Town

Measles Reaches Allegheny County as Pennsylvania Passes 1,000 Cases

Latest developments: The Allegheny County Health Department confirmed Monday, October 5, that an unvaccinated minor living in the county tested positive for measles, the county's first resident case this year, and flagged possible exposure at a Target store; state officials put Pennsylvania past 1,000 cases the same day, and Health Secretary Dr. Debra Bogen, at a Hilltop pharmacy, urged residents to get vaccinated and said the Centers for Disease Control and Prevention is minimizing the outbreak's five deaths.

read more

Pennsylvania's outbreak now stands as the largest in any state in more than three decades, and the most recent of the five measles-associated deaths this year was an unvaccinated Lancaster County resident. Western Pennsylvania school districts have started checking immunization records and planning exclusions, and Bogen tied her appeal to the new COVID-19 vaccines and an early flu season.

Sources: KDKA · WTAE · WTAE · Pittsburgh Post-Gazette · WPXI · ↑ top

Pittsburgh's Automated Cameras Set a Ticket Record

Latest developments: KDKA reported Monday, October 5, that automated cameras now cover most of Pittsburgh and have produced a record number of tickets and tens of millions of dollars in fines for the city.

read more

The systems watch drivers and parkers across the city, and the money flows into a budget Mayor Corey O'Connor has told City Council faces a deficit and a projected zero bank balance by 2032. Pittsburgh police began citing drivers on October 1 for using the dedicated bus lanes on Forbes and Fifth avenues in Oakland, where the $25 fine runs to roughly $175 with fees.

Sources: KDKA · ↑ top

A Jury Finds Pitt Breached Its Marshall Contract

Latest developments: A jury determined Monday, October 5, that the University of Pittsburgh breached its football contract with Marshall University over a game the coronavirus pandemic scrambled in 2020.

read more

Marshall sued Pitt over the 2020 nonconference game the two schools never played, arguing the contract bound Pitt regardless, and the jury sided with Marshall. The verdict leaves the University of Pittsburgh on the losing end of one of the last open disputes from the pandemic college football season.

Sources: Pittsburgh Post-Gazette · ↑ top

Flood Control Work Takes Two Parkway Ramps for 10 Months

Latest developments: WTAE detailed Monday, October 5, the multimillion-dollar flood control project that has closed two major ramps and part of the Parkway through downtown Pittsburgh for the next 10 months.

read more

The work targets the low stretch of Interstate 376 that drivers call the bathtub, which floods in heavy rain, and the ramp closures and lane restrictions took hold over the weekend of October 3 and 4. PennDOT has said the related lane closure runs through July.

Sources: WTAE · ↑ top

Ramp Closures Hit Curry Hollow and Lebanon Church Roads

Latest developments: WPXI reported Monday morning, October 5, that ramp closures for the Route 2040 reconstruction at Lebanon Church Road and Curry Hollow Road in Allegheny County begin Tuesday, October 6, weather permitting.

read more

The Route 2040 project rebuilds the roadway and its ramps where Curry Hollow Road and Lebanon Church Road carry commuter traffic in Allegheny County. The closures arrive the same week lane restrictions took hold in the Parkway East bathtub through downtown Pittsburgh.

Sources: WPXI · ↑ top

Allegheny County Mail Voting Runs on Normal Rules

Latest developments: PublicSource published a guide Monday, October 5, to returning mail ballots in Allegheny County, confirming the process operates as usual after the United States Supreme Court blocked the Trump administration's push to have the Postal Service vet mailed ballots.

read more

Allegheny County voters holding mail ballots for the November 3 election can send them back through the mail, drop them at a county return site, or bring them to their polling place on Election Day. Mail ballot requests in the county surged after the Supreme Court ruling.

Sources: PublicSource · ↑ top

Harrisburg Pushes a Statewide School Phone Ban

Latest developments: Pennsylvania lawmakers pressed Monday, October 5, to pass a statewide ban on student cellphone use in schools before the General Assembly breaks to campaign for the November 3 election.

read more

Pennsylvania school districts now write their own cellphone rules, and the bill moving in Harrisburg would set one standard for every public school in the state. Legislators have only the days before the midterm recess to get it through both chambers.

Sources: Pittsburgh Post-Gazette · ↑ top

Gaydos and Haas Meet Again in the 44th District

Latest developments: TribLive laid out the November 3 rematch Monday, October 5, between Republican state Representative Valerie Gaydos and Democratic challenger Hadley Haas in Pennsylvania's 44th state House District.

read more

Gaydos wants to keep the Harrisburg seat she holds in the 44th District; Haas, who lost to her in their last contest, runs again on the Democratic line. Voters in the district decide November 3, the same day Pennsylvania votes for governor and the midterm congressional slate.

Sources: TribLive · ↑ top

A Crisp, Sunny Week Across Western Pennsylvania

Latest developments: Monday's forecasts, October 5, put Pittsburgh's high in the mid-to-upper 60s under full sun, and WPXI's evening update has temperatures sliding from the 60s into the 40s overnight with frost possible across the region by Tuesday morning before crisp mornings and plenty of sunshine hold the rest of the week.

read more

KDKA, WPXI, and WTAE all call for a dry, cool, sunny stretch in Western Pennsylvania, the sort of week that favors the fall foliage season forecasters have billed as one of the best in years. The northwest breeze eases as the week goes on.

Sources: KDKA · WPXI · WTAE · WPXI · ↑ top

Events

The Steelers Style Show Returns to Stage AE

Latest developments: KDKA reported Monday, October 5, that the 52nd Steelers Style Show steps off Friday, October 9, at Stage AE.

read more

The Steelers Style Show, in its 52nd year, takes place Friday, October 9, at Stage AE on Pittsburgh's North Shore. KDKA's notice names no ticket price or start time.

Sources: KDKA · ↑ top

Fall in the Wall Returns to Aspinwall

Latest developments: TribLive reported Monday, October 5, that Aspinwall's Fall in the Wall festival takes place Saturday, October 10.

read more

Fall in the Wall is the autumn festival Aspinwall throws each year in the Allegheny River borough northeast of Pittsburgh. TribLive lists no admission charge in its notice.

Sources: TribLive · ↑ top

Sports

Steelers (2-2)

Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM

Penguins (2-0-0)

Up Next · Penguins @ Capitals · Wed Oct 7, 7:30 PM

Around the Teams

Harmon Goes to Injured Reserve, Murphy-Bunting Signs On

Latest developments: The Steelers placed defensive tackle Derrick Harmon on injured reserve Monday, October 5, sidelining him at least four games with his foot injury, and signed veteran cornerback Sean Murphy-Bunting with the position suddenly thin.

read more

Harmon, who ended the Cincinnati game with a strip-sack of quarterback Joe Burrow, leaves a defensive front that already struggled at Cleveland. Pittsburgh traded Joey Porter Jr. to the Dallas Cowboys on October 1 and has leaned on rookie Daylen Everette at cornerback; Murphy-Bunting arrives as the veteran body the Post-Gazette says the Steelers needed.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top

McCarthy Got the Wrong Kind of Emotion

Latest developments: The Post-Gazette wrote Monday, October 5, that head coach Mike McCarthy asked his team for emotion at Cleveland and got the wrong kind of it, and McCarthy turned the page the same day at his Week 5 news conference.

read more

The column traces the visible frustration of McCarthy and quarterback Aaron Rodgers through Thursday night's loss at Huntington Bank Field on October 1. The Steelers play at the Indianapolis Colts Sunday, October 11, at 1 p.m. Eastern on CBS.

Sources: Post-Gazette Steelers · Pittsburgh Steelers (YouTube) · ↑ top

The Pirates Get Their Season Grades

Latest developments: The Post-Gazette published its end-of-season Pirates report card Monday, October 5, grading a winning year that finished short of the playoffs.

read more

The marks run through O'Neil Cruz, ace Paul Skenes, and Brandon Lowe, the three players the paper puts at the center of the season's results. The club now faces a winter with second base unsettled, payroll decisions sitting with owner Bob Nutting, and a Major League Baseball labor fight approaching.

Sources: Post-Gazette Pirates · ↑ top

The Steelers' Two Biggest Problems

Latest developments: The Post-Gazette published its quarter-season diagnosis Monday, October 5, naming the two problems that have defined the Steelers through four games and laying out fixes for each.

read more

The paper centers the offense, including how Pittsburgh uses receiver DK Metcalf and running back Jaylen Warren, after a Thursday night loss at Cleveland in which pass protection broke down. The Steelers also lose defensive tackle Derrick Harmon for at least four games on injured reserve.

Sources: Post-Gazette Steelers · ↑ top

Hiles Puts the Pirates' Offseason on Nutting

Latest developments: Post-Gazette columnist Noah Hiles argued Monday, October 5, that whatever the Pirates gained this season evaporates unless owner Bob Nutting spends this winter.

read more

Hiles writes that general manager Ben Cherington has assembled real young talent around ace Paul Skenes, and that payroll from Nutting now decides whether it amounts to anything. The Pirates head into an offseason with open questions at second base and a looming Major League Baseball labor fight.

Sources: Post-Gazette Pirates · ↑ top

Team USA

The United States Closes Its Window Against Canada

Latest developments: Mauricio Pochettino said Monday, October 5, that his squad sits in less than its best condition for Tuesday's friendly against Canada, having played three matches in the window to Canada's two, and that his team "will be ready"; Canada coach Jesse Marsch said he holds "no grudge" over nearly landing the United States job two years ago and called the rivalry "something big."

read more

The United States has won all three of its October matches, among them the 3-0 result against Mexico in Glendale, Arizona, on October 3, and a win Tuesday hands Pochettino a perfect window. Marsch, an American who coached the New York Red Bulls and Leeds United, took the Canada job after Canada Soccer hired him over the United States' pursuit.

Sources: ESPN Soccer · ESPN Soccer · ↑ top

Musah Credits Amorim for His National Team Recall

Latest developments: Yunus Musah said in comments ESPN published Monday, October 5, that AC Milan manager Ruben Amorim deserves the credit for the club form that won him his way back into the United States men's national team.

read more

Musah, a midfielder at AC Milan, had dropped out of the United States picture before his play under Amorim this season brought a recall from coach Mauricio Pochettino. He returns to a squad in which teenagers have taken on heavy responsibility, among them Cavan Sullivan and Julian Hall, who both scored in the 3-0 win over Mexico on October 3.

Sources: ESPN Soccer · ↑ top

Balogun Still Wants the Premier League

Latest developments: Folarin Balogun said in comments ESPN published Monday, October 5, that a move to the Premier League still appeals to him after his transfer deadline day switch to Everton collapsed.

read more

Balogun, the United States forward who plays his club football at Monaco, saw the Everton transfer fall apart in dramatic fashion at the close of the window. He competes for minutes in a national team attack where Mauricio Pochettino has handed heavy responsibility to teenagers through the October window.

Sources: ESPN Soccer · ↑ top

Pochettino's Teenagers Run Through Mexico

Latest developments: ESPN's postmatch coverage added that Julian Hall scored alongside Cavan Sullivan, that Mexico finished with 10 men, that both teenagers rated 9 out of 10, and that coach Mauricio Pochettino called his glut of in-form players "a fantastic problem to have."

read more

Cavan Sullivan, the 17-year-old Philadelphia Union midfielder, scored from distance Saturday night, October 3, to become the youngest goal scorer in United States men's national team history as the Americans beat Mexico 3-0 at State Farm Stadium in Glendale, Arizona. The win completed three victories from three matches in the October international window for Pochettino, who has leaned hard on debutants and teenagers in the cycle toward the 2030 World Cup.

Sources: ESPN Soccer · ESPN Soccer · ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,697.10  ▼ -0.3%
Dow        51,125.48  ▼ -0.9%
Nasdaq     27,039.67  ▲ +0.1%
WTI crude      91.28  ▼ -2.8%
EUR/USD       1.1309  ▼ -0.9%
GBP/USD       1.3239  ▼ -0.3%
USD/JPY       157.60  ▼ -0.2%

Feed Health

Security: 24 of 24 feeds loaded, 52 items in the 24-hour window. No recent items: Krebs on Security, CISA Advisories, Securelist (Kaspersky), Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Frank on Fraud, Wired Security.

Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.

Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.

Events: 4 of 4 feeds loaded, 8 items in the 120-hour window.

Sports media: 6 of 6 feeds loaded, 27 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Not Just Football with Cam Heyward, Ben Roethlisberger / Channel Seven (YouTube).

Team USA: 3 of 3 feeds loaded, 24 items in the 72-hour window.

Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.

Markets (Yahoo Finance): 7 of 7 rows

Weather (NWS): 3 forecast periods

Scores (ESPN, plaintextsports): 2 teams via ESPN

Summaries: 3 model call(s) served by claude-opus-5 (536s of model time; $2.47 at API list price).