================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Wednesday, October 7, 2026 - 1:37 PM EDT ================================================================ Attackers converted a two-hour-old Atlassian proof of concept into live exploitation while the FBI and the Secret Service counted 86,644 Fortinet devices drained of administrator credentials. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Attackers hit Atlassian's CVE-2026-21589 within two hours of watchTowr's proof-of-concept, the same week Google shipped Chrome 155 and October Android fixes alongside SonicWall patches. see: Atlassian Flaw Exploited Two Hours After PoC; Chrome, Android, and SonicWall Ship Fixes * [TREND] AI infrastructure now sits on both sides of the ledger: PoeLLM enlists 3,400 exposed inference servers into a cryptomining botnet while Anthropic's Project Glasswing turns models into bug hunters. see: PoeLLM Mines Crypto on Exposed AI Servers; AI Agents Industrialize Vulnerability Discovery * [TREND] Breach notifications keep landing, with Southern Company telling 400,000 Georgia Power and Alabama Power customers, Arizona's court system losing a million records, and Advantest confirming stolen data. see: Southern Company Breach Hits 400,000 Utility Accounts; Arizona's Court System Loses a Million Records; Ransomware Hits Advantest and Osaka Metropolitan University * [UPDATE (updated)] The bond selloff resumed as the 30-year Treasury yield hit its highest since 2002 and the IMF urged cuts, while Houthi missiles on Riyadh pushed Brent past $100. see: The Bond Rout Resumes and the IMF Tells Governments to Cut; Houthi Missiles Reach Riyadh as Brent Tops $100 * [UPDATE (new)] Beijing's refusal of voluntary curbs pushes Brussels toward temporary limits on surging Chinese hybrid car imports, as Berlin separately blocks a Cosco deal. see: Brussels Weighs Hybrid Car Limits as Berlin Blocks Cosco * [UPDATE (new)] Allegheny County's satellite election offices opened with under a month to the November 3 vote, while legislators asked the state Supreme Court to delay the skill games deadline. see: Allegheny County's Satellite Election Offices Open; Springdale Seniors Fight the Skill Games Ban SECURITY ---------------------------------------------------------------- 1. ATLASSIAN FLAW EXPLOITED TWO HOURS AFTER POC Vulnerabilities and Exploits · [exploit, patch, vulnerability] Latest developments: Attackers began exploiting CVE-2026-21589, the 9.3-rated arbitrary file access flaw Atlassian disclosed on October 5, 2026, within two hours of watchTowr publishing a technical rundown and proof-of-concept code; the threat intelligence vendor Previdian reported hits on its honeypot network late Tuesday, October 6, 2026, the SANS Internet Storm Center logged broad scanning for the bug on October 7, 2026, and the attacks need no authentication. The bug lets an attacker with no login read specific files in the web application root directory of eight self-hosted Data Center products, among them Bitbucket, Confluence, Jira Software, and Jira Service Management, exposing configuration files and the secrets inside them. Anyone running those products should install Atlassian's fixed versions now and treat any internet-facing instance as probed. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/07/exploitation-critical-atlassian-flaw-cve-2026-21589/ - SANS Internet Storm Center: https://isc.sans.edu/diary/rss/33406 - The Hacker News: https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html 2. AI AGENTS INDUSTRIALIZE VULNERABILITY DISCOVERY AI Security · [ai, patch] Latest developments: Anthropic merged its Cyber Verification Program and Project Glasswing into one three-tier program on October 6, 2026, lifting automated blocks on malware analysis and vulnerability testing for approved security professionals, and said Glasswing verified at least 129,000 software vulnerabilities between April and July 2026; Google's PageBreak agent found 500 flaws in Google's own web applications, Microsoft's FORGE Lab described on October 7, 2026 how it carried the same machine-driven bug hunting from Windows into the Linux kernel, and the OpenSSH maintainers, shipping version 10.6, said AI models now generate so many of the security reports they receive that they will cut releases more often to keep up. Vendors run models as bug hunters at a volume human researchers cannot match, which shifts the bottleneck to triage, ownership, and patching inside the projects that receive the reports. OpenSSH 10.6 also turns on a post-quantum signature algorithm, so anyone holding the earlier experimental keys has to replace them. - The Hacker News: https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html - SecurityWeek: https://www.securityweek.com/anthropic-introduces-3-tier-cyber-verification-program-for-ai-access/ - Dark Reading: https://www.darkreading.com/application-security/google-pagebreak-ai-agent-500-flaws-web-apps - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research/ 3. CHROME, ANDROID, AND SONICWALL SHIP FIXES Vulnerabilities and Exploits · [patch, vulnerability] Latest developments: Google released Chrome 155 with 247 vulnerability fixes, four of them critical use-after-free defects in Chromecast, Browser, Navigation, and Track, and its October 2026 Android updates closed 25 flaws including a critical privilege escalation in the System component; SonicWall shipped hotfixes for four bugs in its Secure Mobile Access 1000 series appliances, among them the maximum-severity CVE-2026-102255, which lets an unauthenticated remote attacker direct the appliance to issue requests on the attacker's behalf and reach internal functionality; and X.Org fixed 12 flaws in xorg-server 21.1.25 and xwayland-24.1.14, nine of which carry arbitrary code execution. SonicWall says it sees no evidence that anyone exploits the SMA 1000 bugs yet, and those appliances sit at the network edge where attackers have hunted all year. Administrators should restart Chrome to take the update, push the October Android patch level, and rebuild X servers on Linux desktops and workstations. - SecurityWeek: https://www.securityweek.com/chrome-155-update-patches-247-vulnerabilities/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-max-severity-ssrf-flaw-in-sma1000-gateways/ - SecurityWeek: https://www.securityweek.com/androids-october-2026-updates-patch-25-vulnerabilities/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/ 4. FORTIBLEED LOCKS ADMINS OUT OF FORTINET FIREWALLS Vulnerabilities and Exploits · [exploit, credentials] Latest developments: The FBI and the United States Secret Service issued a joint advisory on Tuesday, October 6, 2026 saying the FortiBleed credential-harvesting campaign against internet-facing Fortinet FortiGate firewalls and SSL VPN gateways remains active, cited SOCRadar's verified count of 86,644 compromised devices in 194 countries, and warned that victims lose access to their own Fortinet devices when the attacker deletes or alters administrator credentials. FortiBleed works through reused and leaked credentials plus Fortinet's legacy SHA-256 password storage, which hands attackers working logins on gateways that terminate remote access for whole organizations. Administrators should rotate every account on the appliance, pull credentials that predate the current password scheme, restrict management interfaces, and check administrator lists for deletions and additions. - Help Net Security: https://www.helpnetsecurity.com/2026/10/07/fortinet-fortibleed-campaign-fbi-advisory/ - The Hacker News: https://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.html - The Record: https://therecord.media/fortibleed-warning-fbi-secret-service 5. POELLM MINES CRYPTO ON EXPOSED AI SERVERS Ransomware and Cybercrime · [ai, cryptomining, vulnerability] Latest developments: Researchers disclosed on October 7, 2026 a financially motivated campaign they call Canto Incognito that infects more than 3,400 exposed artificial intelligence and large language model servers with malware named PoeLLM, installs cryptocurrency miners, and turns each compromised host into a scanner and exploit launchpad for the next round; the same day, The Hacker News reported an unpatched critical flaw in LMCache, the open-source cache that speeds up LLM servers such as vLLM, where its multiprocess mode exposes a ZeroMQ listener that hands an unauthenticated attacker code execution on the cache server. Inference stacks sit on expensive graphics hardware and often face the internet without authentication, which makes them ideal mining capacity and ideal relays. Teams running vLLM, LMCache, or similar services should put them behind authenticated gateways, block the ZeroMQ ports from outside networks, and audit for miner processes. - The Hacker News: https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks/ - The Hacker News: https://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.html 6. RANSOMWARE HITS ADVANTEST AND OSAKA METROPOLITAN UNIVERSITY Ransomware and Cybercrime · [ransomware, breach] Latest developments: Advantest Corporation, the Japanese maker of semiconductor test equipment, began notifying individuals on October 7, 2026 that the ransomware attack it suffered in February 2026 took personal information off its servers, and Osaka Metropolitan University said on October 6, 2026 that a suspected ransomware attack had canceled classes and left its internal network, email, and a range of administrative and academic systems unavailable. Two Japanese institutions in the same week show both halves of the damage: Advantest faces breach notification duties eight months after the intrusion, and Osaka Metropolitan University lost the systems that run teaching. People who hear from Advantest should treat their data as public and monitor accounts. - BleepingComputer: https://www.bleepingcomputer.com/news/security/advantest-confirms-personal-information-stolen-in-ransomware-attack/ - SecurityWeek: https://www.securityweek.com/advantest-discloses-data-breach-months-after-ransomware-attack/ - The Record: https://therecord.media/osaka-university-cancels-classes-ransomware 7. COUNTERFEIT TLS CERTIFICATES OUT OF THREE REGISTRIES Identity and Trust Infrastructure · [dns, certificates] Latest developments: Google named the three country-code domain registries on Tuesday, October 6, 2026: attackers compromised the third-party operators of .gh for Ghana, .sl for Sierra Leone, and .as for American Samoa, changed the authoritative DNS records, and used that control to obtain HTTPS certificates for several Google domains and for domains belonging to other large organizations. Control of a registry's DNS puts every domain under that ending at risk, because certificate authorities validate ownership through DNS and will issue to whoever answers. Organizations holding domains under .gh, .sl, or .as should check Certificate Transparency logs for certificates they never requested and revoke them. - Help Net Security: https://www.helpnetsecurity.com/2026/10/07/google-unauthorized-https-certificates-cctld-hijacks/ - Ars Technica Security: https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/ 8. SHINYHUNTERS EXTORTED A BOEING SPIN-OFF Ransomware and Cybercrime · [arrest, ransomware, extortion] Latest developments: Brian Krebs reported on October 7, 2026 that police detained Rey, the teenager from Amman, Jordan whom investigators suspect of leading ShinyHunters, while the group was extorting a business unit Boeing recently divested, and SecurityWeek reported the same day that Japan detained a Qilin ransomware suspect in May 2026 and has now extradited him to Germany to face hacking charges. Rey cooperates with the FBI to identify other ShinyHunters members, the data theft and extortion crew behind a long run of corporate breaches. Organizations with Salesforce, Snowflake, and similar cloud tenancies should keep hunting for the group's access even as arrests mount. - Krebs on Security: https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/ - SecurityWeek: https://www.securityweek.com/qilin-ransomware-suspect-arrested-in-japan-extradited-to-germany/ 9. ARIZONA'S COURT SYSTEM LOSES A MILLION RECORDS Data Breaches · [breach] Latest developments: The Arizona Supreme Court said attackers copied personal information on more than 1 million people out of the state court system, reaching records as far back as 30 years. Anyone who passed through an Arizona court over three decades—as a party, a juror, or a witness—may sit in the stolen set. Those people should freeze credit, watch for identity theft, and take up whatever monitoring the court offers. - SecurityWeek: https://www.securityweek.com/personal-information-for-over-1-million-people-stolen-in-a-cyberattack-on-arizonas-court-system/ 10. SOUTHERN COMPANY BREACH HITS 400,000 UTILITY ACCOUNTS Data Breaches · [breach] Latest developments: Southern Company began notifying customers on October 7, 2026 that hackers reached utility account information covering 400,000 accounts at its two largest subsidiaries, Georgia Power and Alabama Power. The stolen material concerns customer utility accounts at the electric utilities serving most of Georgia and Alabama. Customers of either company should change their online account passwords, turn on multifactor authentication, and treat billing and payment messages that arrive unprompted as phishing. - SecurityWeek: https://www.securityweek.com/georgia-power-alabama-power-data-breach-hits-400000-accounts/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Brussels Weighs Hybrid Car Limits as Berlin Blocks Cosco Latest developments: Beijing rejected the European Commission's request for voluntary curbs on surging Chinese hybrid car exports Wednesday, October 7, pushing the Commission toward temporary import limits that officials warn could trigger a serious trade conflict, and Germany on the same day blocked the state-owned Chinese shipping group Cosco from taking over a port logistics company in Hamburg, the country's largest seaport, on security grounds. Chinese plug-in hybrid shipments into Europe have climbed since the European Union imposed duties on battery-electric vehicles, and the Commission now considers quantitative restrictions that would widen the fight beyond cars. The moves follow the German and French agreement of October 5 on a last-resort retaliation instrument for critical-goods threats and Beijing's anti-dumping case against European chemical exports. - FT Home: https://www.ft.com/content/32e1c801-fe7d-4389-b3fc-ab687cbb087b?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/3616b259-723d-4797-a96c-be617d673feb?syn-25a6b1a6=1 * Court of Appeal Quashes Barclays Traders' Rate-Rigging Convictions Latest developments: London's Court of Appeal threw out the rate-rigging convictions of former Barclays traders Wednesday, October 7, extending the collapse of the Libor prosecutions that began when Tom Hayes's guilty verdict fell last year. The Serious Fraud Office built a decade of criminal cases against bank traders over manipulation of benchmark interest rates after the financial crisis, and the appeal judges have now unwound them. The ruling resets how British courts treat trader conduct that banks' own submission practices encouraged. - FT Markets: https://www.ft.com/content/9c61d1a4-c982-41d5-a96e-f06df406c7e9?syn-25a6b1a6=1 * The Bond Rout Resumes and the IMF Tells Governments to Cut Latest developments: The selloff restarted Wednesday, October 7, after a single day of relief: the 30-year Treasury yield reached its highest level since 2002, French, Italian, and British paper came under pressure in volatile trading, the Dow industrials, Nasdaq composite, and S&P 500 all fell back a day after two of them set records, French Finance Minister Roland Lescure told the Wall Street Journal that France will turn "strategic" about its funding and may sell more shorter-term debt, French central bank head Emmanuel Moulin said the European Central Bank need not intervene to calm the rout and denounced "Trump-style" threats against him from the far left, gold futures slipped as the dollar gained ahead of the Federal Reserve's meeting minutes, and International Monetary Fund Managing Director Kristalina Georgieva told governments to rein in spending and face "very tough political choices." Long-dated government debt has repriced worldwide for two weeks, with French paper carrying the widest risk premium in the euro area as the government of Finance Minister Roland Lescure fights for billions of euros in cuts. The Wall Street Journal describes France's economy as trapped in a negative feedback loop of weak growth and rising debt, and the Financial Times traces how United States mortgage bond hedging amplifies each move in Treasury yields. - WSJ Markets: https://www.wsj.com/finance/investing/u-s-european-government-bond-yields-rise-french-bonds-underperform-on-budget-worries-c068d9ae?mod=rss_markets_main - FT Home: https://www.ft.com/content/33c67aa0-bfdb-457b-84bb-960b4fed94b6?syn-25a6b1a6=1 - FT Home: https://www.ft.com/content/d9ba8e1f-54f9-4739-9ce3-94e62d585e26?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/europe/france-considers-issuing-more-shorter-term-debt-amid-bond-market-turmoil-db2966fd?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/finance/stocks/stocks-futures-steady-as-bond-selloff-extends-oil-prices-rise-ddd8a40e?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/commodities-futures/gold-ticks-lower-as-investors-await-fed-meeting-minutes-1e95b0b1?mod=rss_markets_main * Houthi Missiles Reach Riyadh as Brent Tops $100 Latest developments: Houthi rebels fired a new missile barrage at Riyadh and at Aden on Wednesday, October 7, widening Tuesday's strikes on two Saudi airports, Brent crude climbed back above $100 a barrel in the morning, and United States crude then turned lower in the afternoon even after the Energy Information Administration reported commercial crude stocks fell 3.2 million barrels to 424.1 million barrels in the week ended October 2, against a Wall Street Journal survey that looked for a 1.7 million barrel build; Tropical Storm Isaias formed in the southwestern Gulf of Mexico the same morning, curtailing some United States Gulf oil output and lifting natural gas futures. The barrage follows the Saudi-backed Yemeni government offensive launched October 5 to retake the Bab el-Mandab strait, which the Houthis have used to disrupt tanker traffic, and it now reaches the Saudi capital itself. Shell said the Middle East conflict and the global fuel squeeze will push its third-quarter refining margin to a record high. - FT Home: https://www.ft.com/content/6a2dc960-c9fd-4795-b5ea-78f9bb77309d?syn-25a6b1a6=1 - WSJ US Business: https://www.wsj.com/business/energy-oil/oil-prices-rise-as-houthi-attacks-u-s-gulf-storm-raise-supply-risks-9a0aacf8?mod=pls_whats_news_us_business_f - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-rises-amid-ongoing-mideast-tensions-2c446a1e?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/business/energy-oil/u-s-crude-oil-stockpiles-post-weekly-drop-948f4817?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/commodities-futures/u-s-natural-gas-extends-gains-with-eyes-on-storm-a8a32ad9?mod=rss_markets_main - WSJ US Business: https://www.wsj.com/business/energy-oil/shells-refining-margin-surges-to-record-high-after-middle-east-conflict-upends-fuel-markets-39e45d67?mod=pls_whats_news_us_business_f * India Raises Rates for the First Time in Three Years Latest developments: The Reserve Bank of India raised its policy rate Wednesday, October 7, its first increase in three years, citing higher inflation and energy costs and shifting its stance to tightening. India's central bank joins the global turn back toward tighter money as the war around Iran drives up crude and refined fuel prices in a country that imports most of its oil. The move lands the same week the Bank of Japan's wage data cleared the way for further tightening there and markets priced a Bank of England increase. - FT World: https://www.ft.com/content/713ccee6-855f-48d8-acf1-161265041ad8?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/2895a744-9538-4bc9-ac9b-686677f5cdb2 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Sunny, high 73F. Tonight: Mostly Clear, low 55F. Thursday: Sunny, high 72F. Business: * PNC Opens Its First Premier Branch in Cranberry Latest developments: PNC unveiled its renovated Cranberry Township branch Wednesday, October 7, the first premier branch in the Pittsburgh area and part of a $25 million local renovation program. The premier branch anchors the premier client program PNC Financial Services Group announced early in 2026, which pairs remodeled offices with advisers for wealthier customers. PNC runs its headquarters downtown and will rework additional Pittsburgh-area locations under the same spending plan. - WPXI: https://www.wpxi.com/news/local/pnc-unveils-first-premier-branch-pittsburgh-area-part-25m-local-renovation-initiative/ER6TYM26MVBMTMG5PIQULXVSAU/ * Gecko Robotics Buys the Duquesne Jersey Patch Latest developments: Duquesne University's men's basketball team will wear Gecko Robotics on its uniforms, WPXI reported Wednesday, October 7, the program's first jersey sponsor. Gecko Robotics, the Pittsburgh company whose wall-climbing robots inspect power plants, ships, and industrial equipment, puts its name on the jerseys of an Atlantic 10 program playing on the Bluff in Uptown. Jersey patches arrived in college basketball as schools chased new revenue after the end of amateurism rules. - WPXI: https://www.wpxi.com/news/local/gecko-robotics-lands-first-ever-jersey-patch-deal-with-duquesnes-mens-basketball-team/5IKZNM5ZWZBFDNBQB6DBYNJISY/ * Joseph Orlando Clothiers Turns 45 Downtown Latest developments: WPXI profiled Joseph Orlando Clothiers on Wednesday, October 7, as the men's clothier marked 45 years in downtown Pittsburgh. Joseph Orlando Sr. opened the store on Liberty Avenue in 1981, and his son Joe Orlando now owns it and moved it to Fourth Avenue several years ago. The milestone makes it one of the longest-running family-owned retailers left in the central business district. - WPXI: https://www.wpxi.com/news/local/after-45-years-downtown-joseph-orlando-clothiers-is-family-business-thats-tailored-last/SFE3IKDAZVB6XERNSAIVKDVRMY/ * Springdale Seniors Fight the Skill Games Ban Latest developments: Pennsylvania legislators asked the state Supreme Court on Wednesday, October 7, to push the skill games removal deadline to February 2027 so they can finish a bill regulating the machines, a day after senior citizens in Springdale turned out to press state senators to spare the terminals they call their main entertainment. Pennsylvania's ban forces businesses to physically haul out skill game terminals, and the revenue loss has already put VFW posts and social clubs across the region on notice that they may not keep their doors open. Springdale's protest follows a Green Tree rally by operators on October 3. - TribLive: https://triblive.com/local/valley-news-dispatch/springdale-residents-turn-out-to-protest-looming-skill-games-ban/ - KDKA: https://www.cbsnews.com/pittsburgh/news/skill-games-pennsylvania-deadline-supreme-court-2027/ * Butler Works Lands $75 Million From the Energy Department Latest developments: The United States Department of Energy awarded Cleveland-Cliffs' Butler Works $75 million, and Energy Secretary Chris Wright toured the Butler County mill Tuesday, October 6, talking through steel tariffs and the industry's future with KDKA. The money expands Butler Works' output of electrical steel, the material that goes into transformers and the nation's power grid, and it marks the Trump administration's latest cash infusion into American steelmaking. Butler Works is one of the largest industrial employers north of Pittsburgh. - KDKA: https://www.cbsnews.com/pittsburgh/video/cleveland-cliffs-butler-works-awarded-75-million-from-department-of-energy/ - WPXI: https://www.wpxi.com/news/local/butler-steel-mill-gets-millions-dollars-boost-production-material-used-electrical-grids/VXL4PWXYXFHOFH2AHPIW5MCCFU/ - KDKA: https://www.cbsnews.com/pittsburgh/news/energy-secretary-chris-wright-tariffs-steel-industry/ * Arnold Palmer Regional Airport Hunts a Carrier Latest developments: TribLive's editorial board asked Wednesday, October 7, whether Westmoreland County's Arnold Palmer Regional Airport turns into a relic or buys its way to a new airline. The airport, outside Latrobe, has courted Allegiant Air, Breeze Airways, and Frontier Airlines to fly from the gate it built, and the editorial frames the county's choice as paying to land a carrier or watching scheduled service fade. The piece opens on New York City's City Hall subway station, which took its first train in 1904 and now sits abandoned. - TribLive: https://triblive.com/opinion/editorial-will-arnold-palmer-regional-airport-become-a-relic-or-can-it-buy-a-new-carrier/ * Ming-Na Wen Writes the Chinatown Inn Into a Cookbook Latest developments: Pittsburgh City Paper reported Wednesday, October 7, on the first cookbook from the actress Ming-Na Wen, "Have You Eaten Yet? Family Recipes from a Restaurant Daughter." Wen, who played Mulan and appears in the Star Wars series, grew up in the apartment above the Chinatown Inn, her family's restaurant in downtown Pittsburgh, and the book turns those family recipes into an adult's account of a restaurant childhood. - Pittsburgh City Paper: https://www.pghcitypaper.com/food-drink/mulan-and-star-wars-actress-ming-na-wens-first-cookbook-time-warps-back-to-her-pittsburgh-childhood-above-chinatown-inn/ * Lost Lizard Reopens the Video Store on Butler Street Latest developments: NEXTpittsburgh reported Wednesday, October 7, that Vincent Santis has turned his personal VHS collection into Lost Lizard, a movie rental shop on Butler Street. Santis stocks the store from a tape hoard he built himself and sells browsing as the product, betting Pittsburgh renters want shelves to wander rather than a streaming menu. - NEXTpittsburgh: https://nextpittsburgh.com/features/lost-lizard-restores-the-art-of-browsing-for-movie-rentals-to-pittsburgh/ Around town: * Allegheny County's Satellite Election Offices Open Latest developments: The first Allegheny County satellite election offices opened Wednesday, October 7, with less than a month to the November 3 election, and KDKA's Jessica Riley reported that voters can apply for, complete, and hand back a mail ballot in a single visit. The county Elections Division runs the offices as an early-voting substitute, since Pennsylvania law offers no in-person early voting apart from on-demand mail ballots. Mail ballot requests in Allegheny County jumped after the United States Supreme Court blocked the Trump administration's attempt to have the Postal Service vet mailed ballots. - KDKA: https://www.cbsnews.com/pittsburgh/news/allegheny-county-satellite-election-offices-2026-midterms/ - KDKA: https://www.cbsnews.com/pittsburgh/video/satellite-voting-offices-open-in-allegheny-county-ahead-of-midterm-elections/ * AHN Joins a Global Pancreatic Cancer Detection Study Latest developments: WTAE reported Wednesday, October 7, that researchers at the Allegheny Health Network Cancer Center contributed thousands of tests to an international pancreatic cancer program, and that the results point toward catching the disease earlier. Pancreatic cancer kills most patients because doctors find it late, and the study tests blood-based screening that would flag the disease before symptoms appear. Allegheny Health Network, the hospital system Highmark Health owns, runs the cancer center on Pittsburgh's North Side. - WTAE: https://www.wtae.com/article/ahn-cancer-center-global-study-pancreatic-cancer/74028613 * Isaias Points Sunday Rain at Western Pennsylvania Latest developments: Tropical Storm Isaias formed in the southwestern Gulf of Mexico on Wednesday morning, October 7, and forecasters expect it to strengthen rapidly into a dangerous hurricane before landfall on the northern Gulf Coast later this week, sending its rain toward Pittsburgh by Sunday, October 11. Western Pennsylvania stays dry and sunny through Saturday, October 10, with mornings in the upper 30s and low 40s and afternoons near the low 70s. WTAE has tagged Sunday an Impact Day, and KDKA attributes the weekend rain to the storm's remnants. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/10/07/isaias-storm-path-hurricane/stories/202610070032 - WTAE: https://www.wtae.com/article/tropical-storm-isaias-gulf-coast-dangerous-hurricane/74063031 - WTAE: https://www.wtae.com/article/dry-through-saturday-impact-day-sunday/74062853 - KDKA: https://www.cbsnews.com/pittsburgh/news/the-sunshine-in-pittsburgh-continues-through-the-week-but-some-rain-looms-this-weekend/ - WPXI: https://www.wpxi.com/weather/another-chilly-morning-with-much-warmer-afternoon-low-70s/IPJYNLNH4RHJHDIQAJGGOPD3AA/ * Davanzo and Rogers Meet Again in the 58th District Latest developments: TribLive laid out the November 3 rematch Wednesday, October 7, in Pennsylvania's 58th state House District, where the Republican incumbent Davanzo seeks a fourth term against the Democrat Rogers, who lost to him in 2024. The district runs from the Mon Valley into western Westmoreland County. The race is one of several Western Pennsylvania rematches on the ballot as the General Assembly breaks to campaign. - TribLive: https://triblive.com/local/westmoreland/davanzo-rogers-square-off-again-in-58th-house-district/ * Abers Creek Road Closes in Monroeville Latest developments: WPXI reported Wednesday, October 7, that a stretch of Abers Creek Road near Cavitt Road in Monroeville closes at 9 a.m. Thursday, October 8, for repairs to Abers Creek Bridge No. 3. The closure adds to a crowded Allegheny County construction calendar that already includes the Parkway East bathtub work downtown and ramp reconstruction at Lebanon Church and Curry Hollow roads. - WPXI: https://www.wpxi.com/news/local/portion-road-monroeville-will-close-bridge-repair/EGCD2MOQKRAAVJQ56BOEZZ6C4I/ * Innamorato's 2027 Budget Holds Taxes Flat Latest developments: Allegheny County Executive Sara Innamorato presented the numbers to County Council on Tuesday, October 6: a $1.25 billion operating budget inside a roughly $3 billion plan for 2027, with no property tax increase and no layoffs. Innamorato wrote the plan around millions of dollars in cuts forced by federal policy changes that hit county programs. County Council now reviews the proposal, and a separate bill creating county-wide paid parental leave sits in committee ahead of a final vote expected later this month. - WPXI: https://www.wpxi.com/news/local/allegheny-county-executive-presents-2027-operating-budget-proposal-no-tax-increase-included/AL73EFVVSRGLVFJ7KCDUZ5HT4I/ - WTAE: https://www.wtae.com/article/allegheny-county-budget-2027-no-tax-increase/74059234 - KDKA: https://www.cbsnews.com/pittsburgh/video/allegheny-county-council-committee-to-review-paid-parental-leave-proposal-before-final-vote/ * Pennsylvania Collects at Least $516 Million From Meta Latest developments: Spotlight PA reported Wednesday, October 7, that Pennsylvania will receive at least $516 million from a settlement with Meta, and that the windfall sets up a political fight in Harrisburg over who decides how to spend it. The sum arrives as the General Assembly breaks to campaign for the November 3 election and as Allegheny County and the city of Pittsburgh both cut budgets. Spotlight PA is a nonprofit newsroom covering state government; TribLive carried its report. - TribLive: https://triblive.com/news/pennsylvania/pa-is-getting-at-least-516m-from-a-meta-settlement-it-could-spark-a-political-fight/ * Amtrak Sets November 18 for the Second New York Train Latest developments: WTAE reported Tuesday, October 6, that Amtrak's second daily Pittsburgh-to-New York round trip starts November 18, with stops at Harrisburg and Philadelphia. The addition doubles service on the Pennsylvanian line, which has run a single daily train for decades, and officials expect the extra Pittsburgh-to-Harrisburg frequency to lift business along the route. - WTAE: https://www.wtae.com/article/amtrak-pittsburgh-new-york-trains/74059136 Events: * Rivers of Fire Hot Sauce Festival Lands at Velum Latest developments: KDKA's Daisy Jade previewed the festival Wednesday, October 7, two days before it opens. Pittsburgh's Rivers of Fire Hot Sauce Festival runs Friday and Saturday, October 9 and 10, at Velum Fermentation, bringing hot sauce makers and tastings to the brewery. - KDKA: https://www.cbsnews.com/pittsburgh/video/its-getting-hot-in-here-pittsburghs-rivers-of-fire-hot-sauce-festival/ * Allentown Night Market Heads a Full Weekend Latest developments: NEXTpittsburgh published its guide Wednesday, October 7, to October 8 through 11, naming more than a dozen things to do. The list leads with the Allentown Night Market, a fall flower show, and a performance billed as The Last Splash, and runs through fall festivals, outdoor recreation, and arts events across the city. - NEXTpittsburgh Events: https://nextpittsburgh.com/events/12-things-to-do-in-pittsburgh-this-weekend-oct-8-11-2026/ * Dancing With the Stars Returns to PPG Paints Arena Latest developments: WTAE reported Wednesday, October 7, that the Dancing with the Stars live tour plays PPG Paints Arena in 2027, its fifth consecutive year on a Pittsburgh stage. The touring version of the ABC competition brings the show's professional dancers and celebrity contestants to the Uptown arena that hosts the Penguins. - WTAE: https://www.wtae.com/article/dancing-with-the-stars-pittsburgh-2027/74064778 * Chelsea Wolfe Brings The Dark to Homestead Latest developments: Pittsburgh City Paper previewed the show Wednesday, October 7, built around The Dark, Chelsea Wolfe's tenth album. Wolfe, the doom-pop songwriter whose new record works through sleep paralysis and self-doubt, plays the Carnegie of Homestead Music Hall, the 1898 hall at 510 East 10th Avenue in Munhall, during the city's Halloween season. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/chelsea-wolfe-brings-ethereal-new-record-the-dark-to-carnegie-of-homestead/ * Penny Pours Runs at Coven Brewing on Steelers Sundays Latest developments: Pittsburgh City Paper detailed the promotion Wednesday, October 7, ahead of the Steelers' 1 p.m. kickoff at Indianapolis on Sunday, October 11. Coven Brewing pours one-cent drafts from kickoff until the Steelers score their first points of the game, and shows the game for anyone who wants to watch it there. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/predicting-the-steelers-season-with-penny-pours-at-coven-brewing/ SPORTS ---------------------------------------------------------------- Steelers (2-2) Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM https://plaintextsports.com/nfl/2026/week5/ind-pit Penguins (2-1-0) Up Next · Penguins @ Capitals · Wed Oct 7, 7:30 PM https://plaintextsports.com/nhl/2026-10-07/pit-wsh Around the Teams: * The Porter Trade Narrows Graham's Coverage Menu Latest developments: The Post-Gazette's film study, published Wednesday, October 7, shows how sending cornerback Joey Porter Jr. to the Dallas Cowboys shrinks the coverages defensive coordinator Patrick Graham can call. Porter handled press man assignments that let Graham load the middle of the field, and the Steelers now lean on rookie Daylen Everette and newly signed veteran Sean Murphy-Bunting. The team traded Porter for two draft picks on October 1 and plays at the Indianapolis Colts on Sunday, October 11. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/07/joey-porter-trade-patrick-graham-film-study/stories/202610070030 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/07/gerry-dulac-live-chat-nfl-week-5/stories/202610070034 * The Pirates Face Their Non-Tender Calls Latest developments: The Post-Gazette worked through the Pirates' arbitration decisions Wednesday, October 7, weighing whether the club keeps or non-tenders catcher Henry Davis. Davis, the first pick of the 2021 draft, has yet to hold a major league job, and the paper runs the same keep-or-cut math on Oneil Cruz, Jared Triolo, Carmen Mlodzinski, and Paul Skenes as general manager Ben Cherington sets the winter roster. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/10/07/mlb-arbitration-skenes-triolo-davis-cruz-mlodzinski/stories/202610060027 * Bruce Arians Sits Down With Not Just Football Latest developments: Cam Heyward's Not Just Football posted its Wednesday episode, October 7, with Bruce Arians going through his Steelers years, the game-winning drive in Super Bowl XLIII, and his dealings with Antonio Brown, Tom Brady, Andrew Luck, and Larry Fitzgerald. Arians coached the Steelers' receivers and then their offense before leaving in 2012, and he later won a Super Bowl as head coach at Tampa Bay. Heyward and co-host Hayden close the episode on the loss at Cleveland and the Week 5 trip to the Indianapolis Colts. - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=yr7j5Bpg8Oc * Sam McDowell Dies at 84 Latest developments: The Post-Gazette reported Tuesday, October 6, that Sam McDowell, the Central Catholic graduate who pitched for the Pirates, has died at 84. McDowell, a left-hander from Pittsburgh, led the American League in strikeouts five times with the Cleveland Indians before pitching for his hometown Pirates in the early 1970s. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/10/06/sam-mcdowell-die-pitcher-obituary/stories/202610060043 Team USA: * The United States Closes an Unbeaten Window Past Canada Latest developments: The United States men beat Canada 1-0 on Tuesday, October 6, for a second consecutive clean sheet, and coach Mauricio Pochettino told his players afterward to carry the window's intensity back to their clubs. Canada, under Jesse Marsch, played the match physically against a young American side, and right back Alex Freeman answered with an assist and an 8-out-of-10 rating from ESPN while steadying the back line. The result ends a four-match October window that included wins over Chile and Mexico and leaves Pochettino's teenagers ahead of schedule in the cycle toward the 2030 World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50121924/youthful-usmnt-rises-challenge-presented-feisty-physical-canada - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50121769/usmnt-player-ratings-alex-freemans-two-way-play-earns-8-win-canada - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50121804/pochettino-urges-usa-players-bring-international-intensity-back-clubs * Ashley Sanchez Returns to the Women's Camp Latest developments: Ashley Sanchez, this season's leading scorer in the National Women's Soccer League, said she is working to get "up to speed" with the United States women after her first call-up in nearly two years. Sanchez lost her place in the national team picture after the 2023 World Cup and scored her way back in club play. Coach Emma Hayes has brought her into camp as the Americans prepare for their matches against Spain, which Chelsea defender Naomi Girma misses with a calf problem. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50120804/nwsl-goals-leader-sanchez-uswnt READING ---------------------------------------------------------------- * Stratechery -- Apple and LG, The House For Everyone Else, Agent Standards and Amazon Ben Thompson reads Apple's partnership with LG as a smarter, more integrated run at the smart home than he expected, and then argues Amazon needs its own answer on agent standards. https://stratechery.com/2026/apple-and-lg-the-house-for-everyone-else-agent-standards-and-amazon/ * Ed Zitron -- Credit Crunch Zitron turns to the credit financing the artificial intelligence build-out, extending the running analyses of Nvidia, Anthropic, and OpenAI that anchor his newsletter. https://www.wheresyoured.at/credit-crunch/ * Cal Newport -- It’s Time to Investigate the AI Labs Newport calls the recent conduct of the two leading frontier labs brazen, pointing to a series of carefully staged announcements, and argues the moment has come for outside investigation. https://calnewport.com/its-time-to-investigate-the-ai-labs/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,726.72 ▲ +0.3% Dow 51,159.75 ▼ -0.7% Nasdaq 27,200.12 ▲ +1.1% WTI crude 90.65 ▼ -1.7% EUR/USD 1.1278 ▼ -1.0% GBP/USD 1.3232 ▼ -0.2% USD/JPY 157.72 ▼ -0.1% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 58 items in the 24-hour window. No recent items: CISA Advisories, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Graham Cluley, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 13 items in the 120-hour window. Sports media: 6 of 6 feeds loaded, 24 items in the 96-hour window. Team USA: 3 of 3 feeds loaded, 29 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via ESPN Summaries: 3 model call(s) served by claude-opus-5 (396s of model time; $2.16 at API list price). ================================================================ Generated 2026-10-07 13:37 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================