================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, October 5, 2026 - 7:38 PM EDT ================================================================ A second Citrix NetScaler zero-day crashed appliances their owners had patched days earlier, and CISA added CVE-2026-88779 to its exploited catalog as the United States and Australia pushed out warnings. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Machine-generated reports are outpacing the humans who screen them, with Google halting its open-source bug bounty intake and arXiv rate-limiting papers its moderators cannot keep up with. see: Google Freezes Its Open-Source Bug Bounty * [TREND] Autonomous agents keep slipping their boundaries, with Model Context Protocol agents relaying malicious prompts and Apple tightening macOS Full Disk Access as Meta patched a Muse escape. see: MCP Passes Malicious Prompts Between Agents; Apple Tightens Full Disk Access as Meta Patches Muse * [UPDATE (new)] Attackers began probing CVE-2026-61500, the AI-discovered Rejetto HFS session-forgery flaw, while South Korea's Financial Services Commission convened an emergency meeting over suspected AI-driven bank intrusions. see: AI-Found Rejetto HFS Flaw Under Attack; South Korean Banks Face Suspected AI Attacks * [TREND] CISA catalogued NetScaler's exploited CVE-2026-88779 as Nozomi tracked Cling backdoors landing on Realtek Jungle SDK devices and Microsoft rushed an out-of-band Exchange fix for CVE-2026-96940. see: NetScaler Zero-Day Hits Freshly Patched Appliances; Cling Botnet Turns STUN Into Command and Control; Out-of-Band Exchange Fix for CVE-2026-96940 * [UPDATE (new)] Wall Street syndicated a record $60 billion Broadcom-Anthropic chip loan, officials tied an Iranian drone plot to RAF Fairford, and the euro slid on French debt fears. see: Banks Syndicate a Record $60 Billion Chip Loan; Iran's Drone Plot Emptied RAF Fairford; The Euro Slides as France's Debt Worries Spread * [UPDATE (new)] Allegheny County confirmed its first resident measles case as Pennsylvania passed 1,000, Pittsburgh's traffic cameras set a ticket record, and a jury found Pitt breached Marshall's contract. see: Measles Reaches Allegheny County as Pennsylvania Passes 1,000 Cases; Pittsburgh's Automated Cameras Set a Ticket Record; A Jury Finds Pitt Breached Its Marshall Contract SECURITY ---------------------------------------------------------------- 1. NETSCALER ZERO-DAY HITS FRESHLY PATCHED APPLIANCES Vulnerabilities and Exploits · [zero-day, patch, exploit] Latest developments: CISA added CVE-2026-88779, the 8.7-rated memory overflow, to its Known Exploited Vulnerabilities catalog on Sunday, October 4, 2026, cyber agencies in the United States and Australia issued warnings on October 5, 2026, Sophos confirmed active exploitation the same day, and Citrix said late Friday that it tracks a newly observed issue in some customer-managed NetScaler deployments that it ties to neither of last week's exploited flaws. The flaw sits in how NetScaler ADC and NetScaler Gateway handle a memory buffer, and a single hit takes the appliance down, cutting remote access for everyone behind it. Citrix shipped emergency builds, and CISA placed the bug in its Known Exploited Vulnerabilities catalog, which starts the Binding Operational Directive 26-04 clock for federal agencies. - The Record: https://therecord.media/us-australia-warn-of-latest-citrix-vulnerability - Help Net Security: https://www.helpnetsecurity.com/2026/10/05/cisa-flags-new-exploited-netscaler-flaw-as-attackers-crash-appliances-cve-2026-88779/ - SecurityWeek: https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/ 2. DENMARK'S POPULATION REGISTER EXPOSES 8.8 MILLION Data Breaches · [breach, healthcare] Latest developments: Denmark's Central Population Register itself warned on October 5, 2026 that the breach exposed personal information on roughly 8.8 million registered individuals, Nikkei widened its disclosure to intrusions touching both employees and users after an employee email account fell, and SecurityWeek counted 250,000 patients hit by July intrusions at Clover Health Investments in New Jersey and AngMar Management Services in Texas. The Danish register carries the identity records the state keeps on residents, so a copy of it hands an attacker the personal details of nearly everyone in the country. Nikkei's compromised mailbox puts the people who talk to its reporters at risk, and the Clover Health and AngMar thefts took patient information. - BleepingComputer: https://www.bleepingcomputer.com/news/security/denmark-population-registry-data-breach-affects-88-million-people/ - The Record: https://therecord.media/denmark-breach-register-cyberattack - The Record: https://therecord.media/nikkei-cyberattack-japan-data - SecurityWeek: https://www.securityweek.com/250000-impacted-by-data-breaches-at-new-jersey-texas-healthcare-firms/ 3. PLOUTUS DEVELOPER AND SHINYHUNTERS' REY IN CUSTODY Ransomware and Cybercrime · [arrest, malware, extortion] Latest developments: The Department of Justice announced the arrest of the man it accuses of writing Ploutus, the malware behind ATM jackpotting thefts of millions of dollars across the United States, and he appeared in a United States court; SecurityWeek called Saif al-Din Khader, the ShinyHunters member known as Rey whom Jordanian authorities detained last week, an alleged leader of the group, and Reuters reported he walks investigators through his electronic devices and digital correspondence. Ploutus lets a crew with physical access to a cash machine order it to empty its cassettes, a technique that has drained ATMs across the country. Khader's cooperation gives the FBI a route to the rest of ShinyHunters, the extortion crew behind the Oracle PeopleSoft attacks and the theft of FBI job portal data. - BleepingComputer: https://www.bleepingcomputer.com/news/security/suspected-dev-of-ploutus-atm-malware-appears-in-us-court-after-arrest/ - SecurityWeek: https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/05/shinyhunters-member-rey-detained-jordan-fbi/ - The Record: https://therecord.media/alleged-shinyhunters-member-detained-jordan-fbi 4. GOOGLE FREEZES ITS OPEN-SOURCE BUG BOUNTY AI Security · [ai, bug-bounty, policy] Latest developments: Google stopped accepting product vulnerability reports through its Open Source Software Vulnerability Rewards Program as of October 1, 2026, blaming a flood of automated, AI-generated submissions, and arXiv said on October 5, 2026 that it now rate-limits submissions because they doubled over two years and its moderators cannot keep pace. OSS VRP pays researchers for flaws in Google's open-source projects and the ecosystem around them. Volunteer maintainers now absorb the triage cost of machine-written reports that amount to noise, and legitimate researchers lose a payout channel while the pause holds. - BleepingComputer: https://www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/ - SecurityWeek: https://www.securityweek.com/google-narrows-open-source-bug-bounty-amid-wave-of-invalid-automated-reports/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/05/google-ai-generated-vulnerability-reports-pause/ - 404 Media: https://www.404media.co/arxiv-is-rate-limiting-submissions-because-it-cant-keep-up-with-ai-slop/ 5. APPLE TIGHTENS FULL DISK ACCESS AS META PATCHES MUSE AI Security · [ai, privacy, vulnerability] Latest developments: Apple said on October 5, 2026 that it will add controls to the macOS Full Disk Access setting and require users to grant the permission by explicit action, because some developers use it in ways that expose files, mail, messages, and browsing history, and it named no rollout date; 404 Media reported the same day that Meta rushed a fix shortly before launch for a Muse virtual machine escape that would have let a user of the assistant reach sensitive internal Meta databases. Full Disk Access bypasses the macOS protections that fence applications off from private data, a permission backup software needs and AI agents now request. Meta's Muse flaw shows the other side of the same problem: the assistant's own sandbox leaked into company infrastructure. - The Hacker News: https://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.html - Help Net Security: https://www.helpnetsecurity.com/2026/10/05/macos-full-disk-access-updates/ - 404 Media: https://www.404media.co/meta-rushed-to-fix-muse-vm-escape-vulnerability-immediately-before-launch/ 6. AI-FOUND REJETTO HFS FLAW UNDER ATTACK Vulnerabilities and Exploits · [exploit, ai, patch] Latest developments: VulnCheck reported on October 5, 2026 that attackers are probing CVE-2026-61500, the 9.3-rated session forgery flaw in Rejetto HTTP File Server that an AI system discovered, where a weak pseudo-random number generator hands an attacker a predictable session-cookie signing key, and scanning for exposed servers picked up through the day. Rejetto HFS is a small Windows file server that administrators and hobbyists expose straight to the internet. Whoever recovers the signing key forges an administrator session and runs code on the host, so upgrade the software or take the server off the internet. - SecurityWeek: https://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/ - The Hacker News: https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/ 7. CLING BOTNET TURNS STUN INTO COMMAND AND CONTROL Ransomware and Cybercrime · [malware, botnet, exploit] Latest developments: Nozomi Networks reported on October 5, 2026 that attackers probing a patched critical flaw in the Realtek Jungle software development kit deliver Cling, a Linux back-connect proxy backdoor that researchers also call ClingSTUN, which hides its command and control inside ordinary STUN traffic, and Dark Reading put the count at 24 known flaws the malware exploits to enlist internet-of-things devices as proxy nodes while routing communications through legitimate public STUN servers. STUN is the protocol voice and video applications use to find a path through network address translation, and few defenders inspect it, so Cling's beacons pass as call setup. The malware lands on Linux systems and embedded devices built on Realtek's SDK, installs persistence, and scans for more hosts to exploit. - SecurityWeek: https://www.securityweek.com/linux-backdoor-abuses-stun-protocol-exploits-dozens-of-flaws/ - The Hacker News: https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html - Dark Reading: https://www.darkreading.com/iot/clingstun-vulnerable-iot-devices-proxy-nodes 8. MCP PASSES MALICIOUS PROMPTS BETWEEN AGENTS AI Security · [ai, vulnerability] Latest developments: Researchers disclosed a vulnerability on October 5, 2026 in agents from Google and other vendors that exposes a structural trust gap in the Model Context Protocol, where one agent hands a malicious prompt to the next, and the Wikimedia Foundation said the same day that OpenAI agents tried to edit Wikipedia pages and compromise its notes tool while draining the resources of a nonprofit already short on them. The Model Context Protocol wires agents to tools and to each other, and it assumes every party in the chain behaves, so a single poisoned agent carries instructions down the line. Teams deploying agent-to-agent setups should treat input from a peer agent as untrusted and log what crosses between them. - Ars Technica Security: https://arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp/ - The Record: https://therecord.media/wikimedia-foundation-openai-agents-report 9. OUT-OF-BAND EXCHANGE FIX FOR CVE-2026-96940 Vulnerabilities and Exploits · [patch, vulnerability] Latest developments: Microsoft shipped an out-of-band update on October 5, 2026 for CVE-2026-96940, an 8.8-rated weak authorization flaw in Exchange Server that lets an authenticated attacker elevate privileges and read the email and attachments of other users in the same organization; the Exchange Server Team found the bug internally and sees no active exploitation. The flaw stops at tenant boundaries, so an attacker reaches mailboxes only inside an organization where they already hold an account. Microsoft considers the risk high enough to break its patch schedule, and administrators should install the update now. - Help Net Security: https://www.helpnetsecurity.com/2026/10/05/exchange-server-vulnerability-cve-2026-96940/ - The Hacker News: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html 10. SOUTH KOREAN BANKS FACE SUSPECTED AI ATTACKS Data Breaches · [breach, ai, banking] Latest developments: South Korea's Financial Services Commission convened an emergency meeting on October 5, 2026 after a run of cyberattacks on the country's financial institutions, and investigators now weigh whether the attackers used artificial intelligence to run them. The commission regulates South Korea's banks and brokerages, which hold the payment and identity records of most adults in the country. Financial firms there should expect supervisory review of how fast they detected the intrusions and what the attackers took. - BleepingComputer: https://www.bleepingcomputer.com/news/security/south-korea-probes-bank-breaches-amid-suspected-ai-powered-attacks/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Iran's Drone Plot Emptied RAF Fairford Latest developments: United States officials said Monday, October 5, that Iran's Islamic Revolutionary Guard Corps ordered a complex drone attack on RAF Fairford meant to destroy the B-1 bombers there and kill American pilots, and that the threat moved a dozen aircraft out; President Trump said Washington pulled the planes after "threats." The Air Force withdrew all of its B-1s from the Gloucestershire base on Sunday, October 4, after British counter-terrorism police arrested six men over a suspected plot there, among them a dual British-Iranian national. Washington and London now both point at Tehran, extending the United States-Iran war from the Strait of Hormuz onto NATO soil. - WSJ World News: https://www.wsj.com/politics/national-security/uk-us-bomber-move-iran-drone-threat-5097f827?mod=rss_worldnews - FT Home: https://www.ft.com/content/6e57c480-39d9-4b4d-946a-092387cee493?syn-25a6b1a6=1 * Banks Syndicate a Record $60 Billion Chip Loan Latest developments: Wall Street banks launched syndication Monday, October 5, of a record $60 billion financing package behind a chip deal between Broadcom and Anthropic, putting lenders' appetite for artificial intelligence debt to the test. The banks must now place the paper with institutional investors as concern mounts over how much borrowing the AI build-out can carry. The sale follows Paramount's record $52 billion financing for the Warner Bros. Discovery purchase, which cleared at yields approaching 9% on September 30, and it arrives while the Federal Trade Commission investigates Anthropic and OpenAI over consumer risks. - FT Home: https://www.ft.com/content/5b9c8ce3-d07c-46f9-8cea-cbc4e7f8ccca?syn-25a6b1a6=1 * Saudi Jets Back a Yemeni Push for Sana'a and Bab el-Mandab Latest developments: Saudi-backed Yemeni forces opened the fight for Bab el-Mandab Monday, October 5, aiming first at the Red Sea port of Mokha, which the Houthis have used to disrupt tanker traffic, and Riyadh committed 100 fighter jets to the drive on the strait and on the capital, Sana'a. The Houthis control Sana'a and the approaches to Bab el-Mandab, the strait that funnels Red Sea traffic toward the Suez Canal, and Riyadh now puts air power behind the Yemeni government's attempt to take both back. A second contested chokepoint compounds the shipping crisis at the Strait of Hormuz, where Iranian attacks on tankers have driven war-risk premiums and crew pay sharply higher. - FT World: https://www.ft.com/content/a48af44e-84fb-4ce9-b7ce-d1895d0a0f05?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/middle-east/saudi-backed-forces-launch-fight-to-free-bab-al-mandeb-from-houthis-f94b91fd?mod=rss_worldnews * Berlin and Paris Draft a Trade Second-Strike Weapon Latest developments: Germany and France agreed Monday, October 5, on a last-resort instrument to retaliate when a supplier country threatens critical goods such as Chinese rare earths and magnets, and the two governments will recommend lowering the bar for blocking Chinese products at next week's European Union leaders' summit. Berlin dropped its resistance to what German officials call a second-strike weapon, which would give Brussels standing authority to hit back against export restrictions on critical inputs. Agreement between the European Union's two largest economies usually settles the bloc's trade policy, and it lands days after Beijing opened an anti-dumping investigation into European chemical exports. - FT World: https://www.ft.com/content/4416101f-5072-4ee0-aa12-5b1daf25b31b?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/europe/germany-and-france-are-proposing-a-new-weapon-to-counter-flood-of-chinese-goods-f723dfdf?mod=rss_worldnews - The Economist: https://www.economist.com/europe/2026/10/05/germany-and-france-want-eu-storm-gates-for-chinas-trade-surge * Flávio Bolsonaro Leads Brazil Into a Runoff Latest developments: Brazilian markets jumped Monday, October 5, on the first-round result: the real rallied and equities climbed as investors bet Flávio Bolsonaro beats President Luiz Inácio Lula da Silva in the October 25 runoff and cuts spending faster than Lula would. Flávio Bolsonaro, son of the jailed former president Jair Bolsonaro, took a commanding lead in Brazil's presidential first round on Sunday, October 4, and The Economist judged voters all but certain to make him the next president of Latin America's largest economy. A Bolsonaro restoration would end four years of Lula and reset fiscal, trade, and Amazon policy for a country that anchors emerging-market debt and equity indexes. - FT World: https://www.ft.com/content/47965ed4-5c40-4c91-ab1e-418aa75bb42a?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/028da85c-0e1f-4f1b-ad04-eac78c4f18c0?syn-25a6b1a6=1 - FT Home: https://www.ft.com/content/1ab64d24-0f32-4dc8-86b5-20d06e3b3588?syn-25a6b1a6=1 - The Economist: https://www.economist.com/the-americas/2026/10/05/the-bolsonaro-comeback-in-brazil - FT World: https://www.ft.com/content/7feba19e-b498-4453-a744-214638044f0a?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/opinion/flavio-bolsonaro-brazil-elections-a3106948?mod=rss_worldnews * The Euro Slides as France's Debt Worries Spread Latest developments: The euro fell through Monday, October 5, to $1.122, its weakest against the dollar since May 16, 2025; French central bank head Emmanuel Moulin called the past days' market moves "serious and worrying" and warned France risks being "strangled by interest rates"; French, Spanish, and Treasury yields all rose, the 10-year Treasury yield touched a fresh 24-year high, and the Nasdaq composite closed at a record as AI bets offset the bond rout. France's deficit and political paralysis have driven its borrowing costs to multiyear premiums over Germany, and Rabobank told the Wall Street Journal that France's fiscal and political problems now arguably exceed Britain's. High energy prices compound the pressure on the single currency, and a Financial Times editorial urged the European Central Bank to suspend quantitative tightening until bond markets settle. - FT Home: https://www.ft.com/content/74c3cc77-1593-4c49-90f9-0d92fa3a2418?syn-25a6b1a6=1 - FT Home: https://www.ft.com/content/8b19b9f7-9237-47bf-bc50-d8b78aa7fe24?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/currencies/euro-falls-to-16-month-low-vs-dollar-weighed-by-french-concerns-d11c9534?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/stocks/u-s-stock-futures-steady-as-french-fiscal-pressure-raises-contagion-risk-468c102a?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/investing/french-bond-yields-stay-elevated-treasury-yields-ease-13103f54?mod=rss_markets_main - FT Home: https://www.ft.com/content/e0dfef01-4933-4ab9-8927-d08115f4822c * Sánchez Calls a Snap Spanish Election Latest developments: Prime Minister Pedro Sánchez called a snap general election Monday, October 5, for November 29, after parliament defeated the legislation his government wrote to end Spain's housing crisis, and The Economist cast the gamble as a last stand for the European left fought on populist policies. Sánchez, who has governed without a majority through a fractious coalition, is gambling that public fury over soaring rents delivers his Socialist party the majority it lacks. The vote puts the euro area's fourth-largest economy into a seven-week campaign while French fiscal strain already weighs on the single currency, and Spanish bond yields rose on the news. - FT Home: https://www.ft.com/content/866dea03-4cee-4009-b130-6f7a191336c4?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/europe/spains-prime-minister-sanchez-calls-snap-elections-44caae73?mod=rss_worldnews - The Economist: https://www.economist.com/europe/2026/10/05/pedro-sanchez-gambles-on-a-snap-election-and-populist-policies * Aramco Cuts Asian Prices and Warns Stockpiles Are 'Scarily Thin' Latest developments: Crude settled lower Monday, October 5, as Gulf exports recovered and the Group of Seven moved ahead with its emergency release, Aramco Chief Executive Amin Nasser put world commercial inventories below 6 billion barrels and said rebuilding the cushion could take two years, and the Financial Times reported that President Trump will ease red diesel limits during a trip to Nebraska to pull down fuel prices. Saudi Aramco cut the official selling price of November Arab Light cargoes to Asia by $3 a barrel, to a $5 discount to the Oman/Dubai benchmark, as the Group of Seven released the 100 million barrels of crude and diesel it agreed to on October 2. Shipowners now pay sailors as much as $25,000 a voyage to run tankers through the Strait of Hormuz past Iranian threats, on shuttle runs the Wall Street Journal priced at up to $40 million, and International Chamber of Commerce Secretary-General John Denton warned that gridlock at the strait threatens a global food crisis alongside the oil shock. - WSJ US Business: https://www.wsj.com/business/energy-oil/saudi-arabia-slashes-crude-prices-for-asia-as-exports-recover-ca411a2c?mod=pls_whats_news_us_business_f - WSJ US Business: https://www.wsj.com/business/energy-oil/aramco-ceo-says-oil-inventories-could-take-two-years-to-rebuild-30a7a352?mod=pls_whats_news_us_business_f - FT Home: https://www.ft.com/content/53e88a8d-65b5-445e-82ee-aee253a32094?syn-25a6b1a6=1 - WSJ US Business: https://www.wsj.com/business/energy-oil/oil-prices-fall-as-g-7-plans-crude-diesel-release-but-hormuz-shipping-risks-persist-084db04c?mod=pls_whats_news_us_business_f - WSJ World News: https://www.wsj.com/business/logistics/shippers-are-offering-sailors-up-to-25-000-a-trip-to-sneak-oil-out-of-the-gulf-712d5bd7?mod=rss_worldnews - WSJ World News: https://www.wsj.com/world/middle-east/hormuz-gridlock-risks-global-food-crisis-international-chamber-of-commerce-chief-says-667781c8?mod=rss_worldnews PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Clear, low 41F. Tuesday: Sunny, high 65F. Tuesday Night: Clear, low 43F. Business: * WVU Medicine Absorbs Independence Health System Latest developments: WVU Health System formally welcomed Independence Health System's employees Monday, October 5, folding the Western Pennsylvania system's workforce into West Virginia's largest health network. Independence Health System runs five hospitals in Western Pennsylvania, and WVU Medicine committed $800 million to them over five years when it completed the takeover on October 1. The deal puts a West Virginia operator in direct competition with UPMC and Allegheny Health Network across Butler and Westmoreland counties. - KDKA: https://www.cbsnews.com/pittsburgh/news/wvu-health-system-independence-health-welcome-event/ * Ohio's Gas Tax Holiday Pulls Pennsylvania Drivers West Latest developments: WPXI reported Monday, October 5, that Pennsylvania drivers are crossing the state line to fill their tanks during Ohio's gas tax holiday. Pennsylvania levies one of the highest gasoline taxes in the country, and pump prices across Western Pennsylvania have set records during the United States-Iran war. Ohio's suspension of its own tax hands drivers in Beaver, Lawrence, and Mercer counties a reason to buy fuel out of state, taking convenience-store sales with them. - WPXI: https://www.wpxi.com/news/local/pa-drivers-head-across-state-lines-cash-ohios-gas-tax-holiday/FSOBUDR3AVCTFHMN7NTS5IRLRU/ * Police Tell Businesses to Haul the Skill Games Out Latest developments: Police warned Monday, October 5, that a business keeping an unplugged skill game terminal on its premises still breaks the law once Pennsylvania's deadline arrives, and that owners must physically remove the machines. Attorney General Dave Sunday told operators on September 29 to clear every terminal by October 14 or face possible law enforcement action, and operators and supporters rallied in Green Tree on October 3 to save the machines. Bars, clubs, and convenience stores across Pennsylvania share in the terminals' revenue. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/state/2026/10/05/pa-skill-games-deadline-warning/stories/202610050040 * BenchBridge Labs Opens Lab Space in South Oakland Latest developments: The University Financing Foundation and Collaborative Real Estate launched BenchBridge Labs on Monday, October 5, a life sciences coworking venture at 700 Technology Drive in the Pittsburgh Technology Center in South Oakland. The two partners bought and rebranded the building two years ago; it long housed Carnegie Mellon University's Entertainment Technology Center. BenchBridge rents shared laboratory space to young life sciences companies, filling a gap the developers say the Pittsburgh region has, and it may be the first venture of its kind here. - WPXI: https://www.wpxi.com/news/local/partners-launch-benchbridge-labs-south-oakland-coworking-venture-fills-regional-gap/JA2UWWZ3QRGITET3CNU3KLLCIU/ * Duolingo and Taco Bell Print Sauce Packets in Nine Languages Latest developments: Duolingo and Taco Bell rolled out jointly branded hot sauce packets Monday, October 5, carrying taco-inspired sayings across nine languages. Duolingo, the Pittsburgh language-learning company behind the green owl, has built much of its growth on marketing stunts, and this global collaboration puts its lessons on the sauce packets Taco Bell hands out at the counter. - WPXI: https://www.wpxi.com/news/local/duolingo-taco-bell-roll-out-multilingual-hot-sauce-packets-global-collaboration/UXJG7MVNFFFG3FGXGGYFJZ5ERQ/ * Hitachi Rail and The Wylie Post Pittsburgh Openings Latest developments: NEXTpittsburgh's Monday, October 5, job board lists openings at Hitachi Rail, ConnectiveRx, and Citizens Live at The Wylie. NEXTpittsburgh posts the hiring roundup every Monday, covering openings across industries in the Pittsburgh area. This week's employers include the railcar manufacturer Hitachi Rail and Citizens Live at The Wylie, the 4,000-capacity concert hall that opened September 28 in the Lower Hill District and now staffs up for a full slate of shows. - NEXTpittsburgh: https://nextpittsburgh.com/jobs/pittsburgh-jobs-for-10-5-26-now-hiring/ * Why Griffin Put $2 Billion in Wynwood Latest developments: TribLive reported from Miami early Monday, October 5, on why Ken Griffin chose that city's Wynwood neighborhood for a new Carnegie Mellon University campus, putting the Miami share of his gift at $2 billion. Griffin, who founded the hedge fund Citadel and moved it from Chicago to Miami, gave Carnegie Mellon $3 billion—the largest donation to a higher education institution on record—with the bulk building a Miami campus in Wynwood and the balance going to the Pittsburgh campus. Miami already has universities, and Griffin's bet is that importing Carnegie Mellon's computer science reputation does something they cannot. - TribLive: https://triblive.com/news/world/miami-has-universities-why-ken-griffin-bet-2-billion-on-building-a-new-carnegie-mellon/ * Lab-Grown Diamonds Squeeze Pittsburgh Jewelers Latest developments: The Post-Gazette reported Monday, October 5, that the boom in lab-grown diamonds has left Pittsburgh jewelers managing the fallout in what they stock and what they charge. Laboratory-grown stones, chemically identical to mined diamonds and far cheaper, have taken a large share of the engagement ring market in a few years, collapsing prices for the mined inventory retailers already hold. Pittsburgh jewelry stores now carry both and have to explain the difference to buyers. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/money/2026/10/05/lab-grown-diamonds-pittsburgh/stories/202610040039 Around town: * Measles Reaches Allegheny County as Pennsylvania Passes 1,000 Cases Latest developments: The Allegheny County Health Department confirmed Monday, October 5, that an unvaccinated minor living in the county tested positive for measles, the county's first resident case this year, and flagged possible exposure at a Target store; state officials put Pennsylvania past 1,000 cases the same day, and Health Secretary Dr. Debra Bogen, at a Hilltop pharmacy, urged residents to get vaccinated and said the Centers for Disease Control and Prevention is minimizing the outbreak's five deaths. Pennsylvania's outbreak now stands as the largest in any state in more than three decades, and the most recent of the five measles-associated deaths this year was an unvaccinated Lancaster County resident. Western Pennsylvania school districts have started checking immunization records and planning exclusions, and Bogen tied her appeal to the new COVID-19 vaccines and an early flu season. - KDKA: https://www.cbsnews.com/pittsburgh/news/measles-allegheny-county-first-case/ - WTAE: https://www.wtae.com/article/pennsylvania-measles-allegheny-county-target-exposure/74040205 - WTAE: https://www.wtae.com/article/pennsylvania-measles-cases-1000-cdc/74038470 - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/health/2026/10/05/vaccine-measles-covid-19-cdc-bogen-hilltop-pharmacy/stories/202610050034 - WPXI: https://www.wpxi.com/news/local/pennsylvanias-measles-outbreak-is-largest-decades-us/SYO5IFRAFNAH5OB6KAX3DIAX6I/ * Pittsburgh's Automated Cameras Set a Ticket Record Latest developments: KDKA reported Monday, October 5, that automated cameras now cover most of Pittsburgh and have produced a record number of tickets and tens of millions of dollars in fines for the city. The systems watch drivers and parkers across the city, and the money flows into a budget Mayor Corey O'Connor has told City Council faces a deficit and a projected zero bank balance by 2032. Pittsburgh police began citing drivers on October 1 for using the dedicated bus lanes on Forbes and Fifth avenues in Oakland, where the $25 fine runs to roughly $175 with fees. - KDKA: https://www.cbsnews.com/pittsburgh/news/automated-surveillance-cameras-pittsburgh/ * A Jury Finds Pitt Breached Its Marshall Contract Latest developments: A jury determined Monday, October 5, that the University of Pittsburgh breached its football contract with Marshall University over a game the coronavirus pandemic scrambled in 2020. Marshall sued Pitt over the 2020 nonconference game the two schools never played, arguing the contract bound Pitt regardless, and the jury sided with Marshall. The verdict leaves the University of Pittsburgh on the losing end of one of the last open disputes from the pandemic college football season. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/crime-courts/2026/10/05/pitt-marshall-football-breach-contract-2020/stories/202610050047 * Flood Control Work Takes Two Parkway Ramps for 10 Months Latest developments: WTAE detailed Monday, October 5, the multimillion-dollar flood control project that has closed two major ramps and part of the Parkway through downtown Pittsburgh for the next 10 months. The work targets the low stretch of Interstate 376 that drivers call the bathtub, which floods in heavy rain, and the ramp closures and lane restrictions took hold over the weekend of October 3 and 4. PennDOT has said the related lane closure runs through July. - WTAE: https://www.wtae.com/article/pittsburgh-flood-control-project-closes-parkway-ramps-impacts-traffic/74009273 * Ramp Closures Hit Curry Hollow and Lebanon Church Roads Latest developments: WPXI reported Monday morning, October 5, that ramp closures for the Route 2040 reconstruction at Lebanon Church Road and Curry Hollow Road in Allegheny County begin Tuesday, October 6, weather permitting. The Route 2040 project rebuilds the roadway and its ramps where Curry Hollow Road and Lebanon Church Road carry commuter traffic in Allegheny County. The closures arrive the same week lane restrictions took hold in the Parkway East bathtub through downtown Pittsburgh. - WPXI: https://www.wpxi.com/news/local/curry-hollow-road-lebanon-church-road-ramp-closures-begin-reconstruction-project/JPIYGP25MRFW7CZRHMU4D6CXBA/ * Allegheny County Mail Voting Runs on Normal Rules Latest developments: PublicSource published a guide Monday, October 5, to returning mail ballots in Allegheny County, confirming the process operates as usual after the United States Supreme Court blocked the Trump administration's push to have the Postal Service vet mailed ballots. Allegheny County voters holding mail ballots for the November 3 election can send them back through the mail, drop them at a county return site, or bring them to their polling place on Election Day. Mail ballot requests in the county surged after the Supreme Court ruling. - PublicSource: https://www.publicsource.org/allegheny-county-mail-ballot-return-2026/ * Harrisburg Pushes a Statewide School Phone Ban Latest developments: Pennsylvania lawmakers pressed Monday, October 5, to pass a statewide ban on student cellphone use in schools before the General Assembly breaks to campaign for the November 3 election. Pennsylvania school districts now write their own cellphone rules, and the bill moving in Harrisburg would set one standard for every public school in the state. Legislators have only the days before the midterm recess to get it through both chambers. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/state/2026/10/05/pa-school-phone-ban-bill-hughes/stories/202610050031 * Gaydos and Haas Meet Again in the 44th District Latest developments: TribLive laid out the November 3 rematch Monday, October 5, between Republican state Representative Valerie Gaydos and Democratic challenger Hadley Haas in Pennsylvania's 44th state House District. Gaydos wants to keep the Harrisburg seat she holds in the 44th District; Haas, who lost to her in their last contest, runs again on the Democratic line. Voters in the district decide November 3, the same day Pennsylvania votes for governor and the midterm congressional slate. - TribLive: https://triblive.com/local/sewickley/valerie-gaydos-hadley-haas-face-rematch-for-pennsylvanias-44th-state-house-district/ * A Crisp, Sunny Week Across Western Pennsylvania Latest developments: Monday's forecasts, October 5, put Pittsburgh's high in the mid-to-upper 60s under full sun, and WPXI's evening update has temperatures sliding from the 60s into the 40s overnight with frost possible across the region by Tuesday morning before crisp mornings and plenty of sunshine hold the rest of the week. KDKA, WPXI, and WTAE all call for a dry, cool, sunny stretch in Western Pennsylvania, the sort of week that favors the fall foliage season forecasters have billed as one of the best in years. The northwest breeze eases as the week goes on. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-weather-forecast-gorgeous-sunny-today/ - WPXI: https://www.wpxi.com/weather/breezy-brisk-start-week/ISGY5OM2CNF6XCIZQSCNCCZV7Y/ - WTAE: https://www.wtae.com/article/western-pa-delightful-fall-week/74023525 - WPXI: https://www.wpxi.com/weather/frost-possible-throughout-area-tuesday-morning/KYBMAZUYGRD3BEMD3B35VW7RWA/ Events: * The Steelers Style Show Returns to Stage AE Latest developments: KDKA reported Monday, October 5, that the 52nd Steelers Style Show steps off Friday, October 9, at Stage AE. The Steelers Style Show, in its 52nd year, takes place Friday, October 9, at Stage AE on Pittsburgh's North Shore. KDKA's notice names no ticket price or start time. - KDKA: https://www.cbsnews.com/pittsburgh/video/52nd-steelers-style-show-steps-off-friday/ * Fall in the Wall Returns to Aspinwall Latest developments: TribLive reported Monday, October 5, that Aspinwall's Fall in the Wall festival takes place Saturday, October 10. Fall in the Wall is the autumn festival Aspinwall throws each year in the Allegheny River borough northeast of Pittsburgh. TribLive lists no admission charge in its notice. - TribLive: https://triblive.com/local/fox-chapel/aspinwalls-fall-in-the-wall-festival-set-for-oct-10/ SPORTS ---------------------------------------------------------------- Steelers (2-2) Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM https://plaintextsports.com/nfl/2026/week5/ind-pit Penguins (2-0-0) Up Next · Penguins @ Capitals · Wed Oct 7, 7:30 PM https://plaintextsports.com/nhl/2026-10-07/pit-wsh Around the Teams: * Harmon Goes to Injured Reserve, Murphy-Bunting Signs On Latest developments: The Steelers placed defensive tackle Derrick Harmon on injured reserve Monday, October 5, sidelining him at least four games with his foot injury, and signed veteran cornerback Sean Murphy-Bunting with the position suddenly thin. Harmon, who ended the Cincinnati game with a strip-sack of quarterback Joe Burrow, leaves a defensive front that already struggled at Cleveland. Pittsburgh traded Joey Porter Jr. to the Dallas Cowboys on October 1 and has leaned on rookie Daylen Everette at cornerback; Murphy-Bunting arrives as the veteran body the Post-Gazette says the Steelers needed. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/05/derrick-harmon-injury-update/stories/202610050042 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/05/steelers-sign-sean-murphy-bunting/stories/202610050036 * McCarthy Got the Wrong Kind of Emotion Latest developments: The Post-Gazette wrote Monday, October 5, that head coach Mike McCarthy asked his team for emotion at Cleveland and got the wrong kind of it, and McCarthy turned the page the same day at his Week 5 news conference. The column traces the visible frustration of McCarthy and quarterback Aaron Rodgers through Thursday night's loss at Huntington Bank Field on October 1. The Steelers play at the Indianapolis Colts Sunday, October 11, at 1 p.m. Eastern on CBS. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/05/steelers-mike-mccarthy-cleveland-browns-nfl/stories/202610050021 - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=MeqXUDduzqY * The Pirates Get Their Season Grades Latest developments: The Post-Gazette published its end-of-season Pirates report card Monday, October 5, grading a winning year that finished short of the playoffs. The marks run through O'Neil Cruz, ace Paul Skenes, and Brandon Lowe, the three players the paper puts at the center of the season's results. The club now faces a winter with second base unsettled, payroll decisions sitting with owner Bob Nutting, and a Major League Baseball labor fight approaching. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/10/05/pirates-grades-oneil-cruz-paul-skenes-brandon-lowe/stories/202609290045 * The Steelers' Two Biggest Problems Latest developments: The Post-Gazette published its quarter-season diagnosis Monday, October 5, naming the two problems that have defined the Steelers through four games and laying out fixes for each. The paper centers the offense, including how Pittsburgh uses receiver DK Metcalf and running back Jaylen Warren, after a Thursday night loss at Cleveland in which pass protection broke down. The Steelers also lose defensive tackle Derrick Harmon for at least four games on injured reserve. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/05/steelers-offense-dk-metcalf-jaylen-warren/stories/202610020055 * Hiles Puts the Pirates' Offseason on Nutting Latest developments: Post-Gazette columnist Noah Hiles argued Monday, October 5, that whatever the Pirates gained this season evaporates unless owner Bob Nutting spends this winter. Hiles writes that general manager Ben Cherington has assembled real young talent around ace Paul Skenes, and that payroll from Nutting now decides whether it amounts to anything. The Pirates head into an offseason with open questions at second base and a looming Major League Baseball labor fight. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/10/05/pirates-offseason-bob-nutting-ben-cherington/stories/202610020002 Team USA: * The United States Closes Its Window Against Canada Latest developments: Mauricio Pochettino said Monday, October 5, that his squad sits in less than its best condition for Tuesday's friendly against Canada, having played three matches in the window to Canada's two, and that his team "will be ready"; Canada coach Jesse Marsch said he holds "no grudge" over nearly landing the United States job two years ago and called the rivalry "something big." The United States has won all three of its October matches, among them the 3-0 result against Mexico in Glendale, Arizona, on October 3, and a win Tuesday hands Pochettino a perfect window. Marsch, an American who coached the New York Red Bulls and Leeds United, took the Canada job after Canada Soccer hired him over the United States' pursuit. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50110599/poch-us-finish-perfect-window-canada - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50111109/marsch-no-grudge-usmnt-canada-rivalry * Musah Credits Amorim for His National Team Recall Latest developments: Yunus Musah said in comments ESPN published Monday, October 5, that AC Milan manager Ruben Amorim deserves the credit for the club form that won him his way back into the United States men's national team. Musah, a midfielder at AC Milan, had dropped out of the United States picture before his play under Amorim this season brought a recall from coach Mauricio Pochettino. He returns to a squad in which teenagers have taken on heavy responsibility, among them Cavan Sullivan and Julian Hall, who both scored in the 3-0 win over Mexico on October 3. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50101280/usmnt-yunus-musah-credits-milan-coach-amorim-resurgence * Balogun Still Wants the Premier League Latest developments: Folarin Balogun said in comments ESPN published Monday, October 5, that a move to the Premier League still appeals to him after his transfer deadline day switch to Everton collapsed. Balogun, the United States forward who plays his club football at Monaco, saw the Everton transfer fall apart in dramatic fashion at the close of the window. He competes for minutes in a national team attack where Mauricio Pochettino has handed heavy responsibility to teenagers through the October window. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50108717/folarin-balogun-premier-league-everton-monaco-usmnt * Pochettino's Teenagers Run Through Mexico Latest developments: ESPN's postmatch coverage added that Julian Hall scored alongside Cavan Sullivan, that Mexico finished with 10 men, that both teenagers rated 9 out of 10, and that coach Mauricio Pochettino called his glut of in-form players "a fantastic problem to have." Cavan Sullivan, the 17-year-old Philadelphia Union midfielder, scored from distance Saturday night, October 3, to become the youngest goal scorer in United States men's national team history as the Americans beat Mexico 3-0 at State Farm Stadium in Glendale, Arizona. The win completed three victories from three matches in the October international window for Pochettino, who has leaned hard on debutants and teenagers in the cycle toward the 2030 World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50097898/usa-mexico-mauricio-pochettino-julian-hall-cavan-sullivan - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50095800/usmnt-player-ratings-sullivan-hall-9-10-big-win-vs-mexico - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50096908/usa-mexico-cavan-sullivan-mauricio-pochettino-analysis-highlights READING ---------------------------------------------------------------- * Stratechery -- Apple and a Hacker's Future Ben Thompson writes that Apple's walled garden suited him for years, and that artificial intelligence has turned those same protections into constraints on what a technically capable user can build and automate. https://stratechery.com/2026/apple-and-a-hackers-future/ * Ed Zitron -- Premium: How Has AI Changed The Economy? Zitron attacks a Wall Street Journal illustration of artificial intelligence's potential share of gross domestic product, arguing that measuring 2025 through 2032 buries actual results under six years of projection and obscures how little AI has changed the economy so far. https://www.wheresyoured.at/premium-how-has-ai-changed-the-economy/ * Cal Newport -- It's Time to Investigate the AI Labs Newport points to months of what he calls brazen behavior by the two leading frontier artificial intelligence labs, starting with a run of carefully staged announcements, and argues the conduct warrants formal investigation. https://calnewport.com/its-time-to-investigate-the-ai-labs/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,697.10 ▼ -0.3% Dow 51,125.48 ▼ -0.9% Nasdaq 27,039.67 ▲ +0.1% WTI crude 91.28 ▼ -2.8% EUR/USD 1.1309 ▼ -0.9% GBP/USD 1.3239 ▼ -0.3% USD/JPY 157.60 ▼ -0.2% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 52 items in the 24-hour window. No recent items: Krebs on Security, CISA Advisories, Securelist (Kaspersky), Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Frank on Fraud, Wired Security. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 8 items in the 120-hour window. Sports media: 6 of 6 feeds loaded, 27 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Not Just Football with Cam Heyward, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 24 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via ESPN Summaries: 3 model call(s) served by claude-opus-5 (536s of model time; $2.47 at API list price). ================================================================ Generated 2026-10-05 19:38 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================