================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, October 8, 2026 - 7:07 AM EDT ================================================================ Oracle Health raised its breach count to nearly 20 million people, far above its earlier filings, while the Shai-Hulud credential worm turned up inside a compromised npm package. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] IBM and Red Hat's Lightwell closed more than 400 unknown Java flaws the same week Cisco Talos found malware seeding prompt-injection text to derail AI analysis. see: AI Finds 400 Java Flaws as Malware Fights Back * [TREND] Attackers keep riding trusted channels, with the Shai-Hulud worm inside the tensorlake npm SDK and UAT-11985 and UAC-0099 dressing lures in real events against Taiwan and Ukraine. see: Shai-Hulud Rides a Compromised npm SDK; UAT-11985 and UAC-0099 Hit Taiwan and Ukraine * [TREND] Geopolitical risk is repricing markets as Brent tops $105 after a tanker attack, Treasury yields hold multidecade highs, and Israel shuts the British consulate in Jerusalem. see: Oil Jumps Past $105 on a Tanker Attack and a Hormuz Slowdown; Yields Sit at Multidecade Highs and the Debt Bill Comes Due; Israel Orders the British Consulate in Jerusalem Closed * [UPDATE (new)] Oracle Health's breach tally climbed to nearly 20 million people as Southern Company started notifying victims, while an Empire Market co-creator drew 40 years in prison. see: Oracle Health and Southern Company Widen Their Breach Counts; Empire Market Sentence and MonsterCloud's $11 Million Markup * [UPDATE (new)] Researchers at Pwn2Own Ireland collected $232,500 on day two, burned 45 zero-days, and compromised the Samsung Galaxy S26 three more times. see: Pwn2Own Ireland Breaks the Galaxy S26 * [UPDATE (new)] Locally, Isaias became the season's first hurricane with rain pointed at Sunday, Shapiro and Garrity held their only debate, and troopers raided a dozen Butler County vape shops. see: Isaias Becomes a Hurricane and Points Rain at Sunday; Shapiro and Garrity Hold Pennsylvania's Only Governor Debate; Troopers Raid a Dozen Butler County Vape Shops SECURITY ---------------------------------------------------------------- 1. SHAI-HULUD RIDES A COMPROMISED NPM SDK Ransomware and Cybercrime · [supply chain, npm, credential theft] Latest developments: Socket reported on October 8, 2026 that version 0.5.144 of the npm package tensorlake, the TypeScript development kit for Tensorlake sandboxes and cloud services, carries obfuscated malware from the ChainDrop and Shai-Hulud supply chain campaign that harvests credentials, exfiltrates secrets, sets up persistence, and runs code the operator supplies; CloudSEK and Checkmarx separately named a campaign MALFEX, where one author published 12 npm packages since August 2023 and eight of them delivered the Overlord remote access trojan and information stealers across 40,767 downloads, while researchers found 16 malicious Firefox extensions posing as Rabby and OKX wallet portals that intercept recovery phrases and private keys during wallet imports. Developers who installed tensorlake 0.5.144 or any of the MALFEX packages should treat every credential on the build host as stolen, rotate tokens, and audit repositories for new persistence. Unit 42 traced the same pattern deeper, showing crews using Web3 infrastructure and open-source packages to reach enterprise cloud environments. - The Hacker News: https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html - The Hacker News: https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html - The Hacker News: https://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.html - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks/ 2. AI FINDS 400 JAVA FLAWS AS MALWARE FIGHTS BACK AI Security · [ai, patch, vulnerability research] Latest developments: IBM and Red Hat said on October 8, 2026 that Lightwell, their program for patching open-source code companies already run in production, found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries; GitHub, working with Microsoft Applied Sciences, added a ModernBERT classifier to push protection that reads surrounding code to catch passwords and credentials no format rule recognizes; Cisco Talos documented the techniques malware authors now write in to obstruct automated AI analysis, including instructions aimed at the analyzing model; and Hadrian raised $40 million for its agentic offensive security platform. Machine-driven bug hunting keeps moving from vendor products into the shared open-source libraries beneath them, which leaves the exposure with every company that has not applied the resulting fixes. Teams running the affected Java libraries should pull the patched versions now and plan for AI-aware malware that treats the analysis pipeline as a target. - Help Net Security: https://www.helpnetsecurity.com/2026/10/08/lightwell-java-library-vulnerabilities/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/08/github-push-protection-modernbert/ - Cisco Talos: https://blog.talosintelligence.com/ignore-all-instructions-and-read-this-blog-the-state-of-ai-analysis-evasion-in-malware/ - SecurityWeek: https://www.securityweek.com/hadrian-raises-40-million-to-expand-autonomous-offensive-security-platform/ 3. EMPIRE MARKET SENTENCE AND MONSTERCLOUD'S $11 MILLION MARKUP Ransomware and Cybercrime · [ransomware, law enforcement, fraud] Latest developments: A federal court sentenced a co-creator of Empire Market, one of the largest dark web marketplaces before its 2020 shutdown, to 40 years in prison on October 8, 2026 for facilitating $430 million in illegal transactions between 2018 and 2020; prosecutors also put figures on the MonsterCloud case, charging Zohar Pinhasi, a 50-year-old United States and Israeli national from Hollywood, Florida who also used the names Zack Silver and Zack Green, with two counts of wire fraud and one conspiracy count for billing ransomware victims more than $19 million while quietly paying more than $8 million to the gangs that encrypted their data. Pinhasi's firm sold remediation as proprietary recovery technology and pocketed the roughly $11 million spread between the ransoms it paid and the invoices it sent. Organizations hiring recovery vendors should demand written disclosure of any payment to an attacker and verify the decryption method before signing. - BleepingComputer: https://www.bleepingcomputer.com/news/security/owner-of-empire-cybercrime-market-gets-40-years-in-prison/ - SecurityWeek: https://www.securityweek.com/fake-decryption-tools-masked-11m-markup-in-ransomware-recovery-scheme/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/08/monstercloud-owner-ransomware-fraud-charges/ 4. ORACLE HEALTH AND SOUTHERN COMPANY WIDEN THEIR BREACH COUNTS Data Breaches · [breach, healthcare, critical infrastructure] Latest developments: SecurityWeek reported on October 8, 2026 that the Oracle Health breach tally now reaches nearly 20 million people, far above the counts in earlier regulatory filings and patient notifications, and Southern Company began notifying roughly 400,000 account holders at its Georgia Power and Alabama Power utilities that hackers reached their utility account information. Oracle Health runs electronic health record systems for hospitals and clinics across the United States, which makes the revised figure one of the largest health data losses of the year. Patients and ratepayers in Georgia and Alabama should expect notification letters, watch statements for identity fraud, and freeze credit. - SecurityWeek: https://www.securityweek.com/oracle-health-data-breach-tally-climbs-to-nearly-20-million/ - SecurityWeek: https://www.securityweek.com/georgia-power-alabama-power-data-breach-hits-400000-accounts/ 5. UAT-11985 AND UAC-0099 HIT TAIWAN AND UKRAINE Nation-State Activity · [apt, phishing, espionage] Latest developments: Cisco Talos disclosed on October 8, 2026 a spear-phishing operation it tracks as UAT-11985 that impersonates academic and policy institutions, dresses AI-assisted lures in the themes of real public events, and runs real-time adversary-in-the-middle phishing against the Google accounts of people tied to Taiwan research organizations; ESET published the same day almost two years of changes to MATCHBOIL, the downloader the Russia-aligned group UAC-0099 uses to plant a spying backdoor on Windows machines, with every victim in its telemetry inside Ukraine: transportation companies in July and August 2025, a manufacturer in December 2025, and an energy company in June 2026. Both crews chase accounts and footholds rather than money, and both lean on material the target already trusts, from conference invitations to a graphical installer that looks routine. Research institutions and Ukrainian industrial operators should enforce phishing-resistant authentication, since adversary-in-the-middle proxies defeat one-time codes. - Cisco Talos: https://blog.talosintelligence.com/uat-11985/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/08/matchboil-malware-uac-0099/ 6. PWN2OWN IRELAND BREAKS THE GALAXY S26 Vulnerabilities and Exploits · [zero-day, mobile, patch] Latest developments: Researchers at Pwn2Own Ireland 2026 collected $232,500 on the contest's second day, October 7, 2026, exploited 45 unique zero-day vulnerabilities, and compromised the Samsung Galaxy S26 three more times. Pwn2Own pays cash for working exploits against current phones, routers, printers, and smart-home gear, and the vendors receive full technical details to patch. Every flaw demonstrated this week lands in a fix queue, so expect a wave of Samsung and consumer device updates in the coming weeks. - BleepingComputer: https://www.bleepingcomputer.com/news/security/samsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Oil Jumps Past $105 on a Tanker Attack and a Hormuz Slowdown Latest developments: Brent gained more than 4% Thursday morning, October 8, trading above $105 a barrel after a fresh tanker attack and a sharp drop in Strait of Hormuz transits, while oil majors shut in Gulf of Mexico production ahead of Hurricane Isaias. Traffic through the Strait of Hormuz had climbed back to nearly 90% of prewar levels in September and has since fallen sharply, and Houthi strikes on Saudi airports killed three people in the latest escalation between Saudi Arabia and the Iran-backed militants in Yemen. European gas climbed back above 80 euros a megawatt-hour on doubts about liquefied natural gas supply security, Harbour Energy and other Gulf of Mexico operators cut output and evacuated offshore crews as Isaias strengthened toward the United States Gulf Coast, and United States stock futures and global equities fell as the oil spike landed alongside a fresh artificial-intelligence selloff. - FT Home: https://www.ft.com/content/ec860f96-5a2b-461a-a897-a957860c3dba?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/middle-east/oil-prices-rise-more-than-2-amid-houthi-attacks-u-s-gulf-shut-ins-51687549?mod=rss_worldnews - FT Home: https://www.ft.com/content/7e39cdb9-977c-4a4c-b35c-6f775a9822db?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/european-gas-prices-climb-on-lng-shipping-risks-df4625ad?mod=rss_markets_main - WSJ World News: https://www.wsj.com/business/harbour-energy-curbs-gulf-of-mexico-production-ahead-of-storm-isaias-48734408?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/livecoverage/stock-market-today-dow-sp-500-nasdaq-10-08-2026?mod=rss_markets_main * Yields Sit at Multidecade Highs and the Debt Bill Comes Due Latest developments: Treasury and eurozone yields rose again Thursday, October 8, holding just under Wednesday's multidecade highs, the dollar strengthened after Federal Reserve minutes showed officials tilting inflation risks to the upside while feeling no urgency to raise rates in October, and the Economist devoted its lead leader and briefing to a looming government-debt crisis. The Financial Times calculates that war-driven inflation and higher borrowing costs have cut Chancellor John Healey's fiscal headroom in half, a hole of nearly 12 billion pounds, and the Wall Street Journal reports investors now price outright French default as a tail risk in French government bonds; the Economist's briefing argues the danger concentrates in countries whose interest rates outrun economic growth. Germany's government cut against the gloom the same day, lifting its gross domestic product forecast to the country's fastest growth since 2022 on exports and debt-funded spending. - WSJ Markets: https://www.wsj.com/finance/investing/u-s-treasury-yields-eurozone-bond-yields-rise-relentlessly-b7d3ba07?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/cfo-journal/fed-minutes-show-no-urgency-for-october-hike-66be7bd8?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/commodities-futures/dollar-stays-elevated-as-treasury-yields-oil-prices-rise-274a97c5?mod=rss_markets_main - The Economist: https://www.economist.com/leaders/2026/10/08/will-bonds-blow-up - The Economist: https://www.economist.com/briefing/2026/10/08/turbulent-bond-markets-threaten-some-countries-more-than-others - FT World: https://www.ft.com/content/2cb13aed-f6bf-4f45-b906-fa1194405a0c?syn-25a6b1a6=1 * Israel Orders the British Consulate in Jerusalem Closed Latest developments: Israel ordered the United Kingdom's consulate in Jerusalem shut Thursday, October 8, over Britain's decision to halt trade from Israeli settlements, and the two governments then agreed to carry on the post as a "UK Mission" to contain the diplomatic feud. The British consulate in Jerusalem has handled the United Kingdom's dealings with the Palestinians, and the closure order marks the sharpest turn yet in a quarrel over London's settlement trade ban. The dispute lands with an Israeli election looming. - WSJ World News: https://www.wsj.com/world/middle-east/israel-orders-u-k-consulate-in-jerusalem-closed-over-west-bank-trade-ban-aec88b46?mod=rss_worldnews - FT World: https://www.ft.com/content/a57290ab-eadd-4e12-b8cc-37befed8d3bb?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Sunny, high 72F. Tonight: Mostly Clear, low 47F. Friday: Sunny, high 72F. Business: * Troopers Raid a Dozen Butler County Vape Shops Latest developments: The Pennsylvania State Police, joined by Butler, Jackson Township, Adams Township, and Cranberry Township police, raided a dozen vape shops across Butler County on Wednesday, October 7, with WPXI's Channel 11 on the scene in Butler. The sweep hit retailers across the county at once. Pennsylvania's new registry law, Act 57, makes most vape products illegal to sell in the state starting Monday, October 19, forcing shop owners across Western Pennsylvania to clear their shelves. - WPXI: https://www.wpxi.com/news/local/authorities-raid-dozen-vape-shops-throughout-butler-county/PERTU6WZ2JCZHO4M4K4JWY7HMY/ * The Center for OCD and Anxiety Markets Through Podcasts and TikTok Latest developments: Pittsburgh City Paper reported Thursday, October 8, that the Center for OCD and Anxiety, which runs four locations in the Pittsburgh region, uses podcasting, art, community events, and TikTok to explain the conditions it treats. The practice has built its outreach around correcting public misconceptions about obsessive-compulsive disorder and anxiety, reaching patients through social media and audio rather than referral alone. - Pittsburgh City Paper: https://www.pghcitypaper.com/news-2/the-center-for-ocd-and-anxiety-dispels-mental-health-myths-through-podcasting-art-and-tiktok/ Around town: * Shapiro and Garrity Hold Pennsylvania's Only Governor Debate Latest developments: Governor Josh Shapiro and Republican challenger Stacy Garrity met Wednesday, October 7, in the race's only scheduled debate, answering on voter identification, gas prices, health care, and President Donald Trump. The debate followed months of attack ads and stump speeches and gave voters their single side-by-side look at the two candidates before the November 3 election, which a Post-Gazette poll last week put 25 points in Shapiro's favor. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/10/08/pennsylvania-governor-debate-shapiro-garrity/stories/202610080044 - WPXI: https://www.wpxi.com/news/local/pennsylvania-gubernatorial-candidates-pressed-key-issues-during-debate/IATMAKA4UBDHHO5Q2PZI52OWAY/ * Isaias Becomes a Hurricane and Points Rain at Sunday Latest developments: Isaias strengthened into the Atlantic season's first hurricane late Wednesday night, October 7, and forecasters expect it to intensify further before it reaches the Florida, Alabama, and Mississippi coasts. Western Pennsylvania stays dry and sunny through Saturday, October 10, and WTAE keeps Sunday, October 11, tagged an Impact Day as the storm's tropical rain arrives over Pittsburgh. - WTAE: https://www.wtae.com/article/tracking-isaias-atlantic-hurricane-season-2026/74072808 - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/10/08/hurricane-isaias-2026-path-update/stories/202610080045 - WTAE: https://www.wtae.com/article/impact-day-sunday-tropical-rain-on-the-way/74076504 - KDKA: https://www.cbsnews.com/pittsburgh/news/first-hurricane-of-the-season-forms-in-the-gulf-rain-heading-to-pittsburgh-this-weekend/ * Reserve Township Weighs a Fire Tax Latest developments: The Reserve Township commissioners worked through their budget at an October 7 workshop and gave no public signal on the volunteer fire department's request for a dedicated property tax. The department has asked the Allegheny County township to levy a new property tax to fund its operations. The commissioners' silence leaves the question open as Reserve finishes writing its budget. - TribLive: https://triblive.com/local/reserve-commissioners-dont-show-where-they-stand-on-fire-departments-request-for-a-fire-tax/ Events: * Greenwood Week Opens at Emerald City Downtown Latest developments: Greenwood Week begins Thursday, October 8, at 7 p.m. and runs through Saturday, October 10. The program takes place at Emerald City, 213 Smithfield St., downtown Pittsburgh. Evening admission runs $25 to $75 and the co-working days cost nothing; details and registration sit at greenwoodplan.com. - Pittsburgh City Paper: https://www.pghcitypaper.com/listings/pittsburghs-top-events-thu-oct-8-wed-oct-14/ * Steve Gonsalves Talks Ghosts in Oakmont Latest developments: Steve Gonsalves brings "A Life With Ghosts" to The Oaks Theater on Thursday, October 8, from 7 to 8:45 p.m. The show plays The Oaks Theater, 310 Allegheny River Blvd. in Oakmont, with tickets from $46.90 to $152.98 at theoakstheater.com. - Pittsburgh City Paper: https://www.pghcitypaper.com/listings/pittsburghs-top-events-thu-oct-8-wed-oct-14/ * Chelsea Handler and Chance the Rapper Headline the Weekend Latest developments: The Post-Gazette published its guide Thursday, October 8, to the weekend of October 8 through 11, led by Chelsea Handler at Citizens Live at The Wylie and Chance the Rapper performing his mixtape classic. Citizens Live at The Wylie, the 4,000-capacity hall that opened in the Lower Hill District on October 1, hosts Handler's stand-up date. The guide carries additional listings across the region for the weekend. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/life/recreation/2026/10/08/things-to-do-this-weekend-pittsburgh-12/stories/202610080016 * Oso Oso Comes Back to Pittsburgh Latest developments: Pittsburgh City Paper previewed the emo punk band Oso Oso's return to the city Thursday, October 8, with frontman Jade Lilitri telling the paper that an earlier Pittsburgh show marked a turning point in his career. City Paper describes the band's set as "toe-tapping, rump-shaking" emo punk. The preview carries the show details. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/music/oso-oso-returns-to-pittsburgh-with-toe-tapping-rump-shaking-emo-punk/ SPORTS ---------------------------------------------------------------- Steelers (2-2) Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM https://plaintextsports.com/nfl/2026/week5/ind-pit Penguins (2-2-0) Wed Oct 7 · Penguins 3 · Capitals 5 · Final Capitals top Penguins 5-3 in Alex Ovechkin's final home opener in Washington https://plaintextsports.com/nhl/2026-10-07/pit-wsh Up Next · Penguins @ Blue Jackets · Fri Oct 9, 7:00 PM https://plaintextsports.com/nhl/2026-10-09/pit-cbj Around the Teams: * Rodgers and McCarthy Take the Podium Before Indianapolis Latest developments: The Steelers posted quarterback Aaron Rodgers's and head coach Mike McCarthy's Wednesday news conferences, October 7, and Gerry Dulac ran his Week 5 Steelers chat the same day. Pittsburgh practiced Wednesday ahead of its 1 p.m. Sunday, October 11 game at the Indianapolis Colts on CBS, carrying a short cornerback group after the Joey Porter Jr. trade to Dallas and the loss of defensive tackle Derrick Harmon to injured reserve. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=O8GevsxXiVk - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=DNRWz20KdIo - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/07/gerry-dulac-live-chat-nfl-week-5/stories/202610070034 Team USA: * Freeman Anchors the Young Americans Past Canada Latest developments: ESPN's player ratings, published Thursday, October 8, gave defender Alex Freeman an 8 out of 10 for the assist and the defensive work he contributed to the United States men's 1-0 win over Canada on Tuesday, October 6, the team's second straight clean sheet. Canada pressed with physicality and pressure, the two things most likely to unsettle an inexperienced side, and coach Mauricio Pochettino's next wave of players held the back line together to close an unbeaten international window. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50121769/usmnt-player-ratings-alex-freemans-two-way-play-earns-8-win-canada - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50121924/youthful-usmnt-rises-challenge-presented-feisty-physical-canada READING ---------------------------------------------------------------- * Stratechery -- An Interview with Katie Harbath About Disrupting Politics at Facebook Ben Thompson interviews Katie Harbath, Facebook's former head of global elections, about her book "Disrupting Politics" and how the company's relationship with politics and election integrity shifted through the 2010s. https://stratechery.com/2026/an-interview-with-katie-harbath-about-disrupting-politics-at-facebook/ * Ed Zitron -- Credit Crunch Zitron turns to the credit side of the artificial intelligence buildout, arguing the debt now financing data centers and chips sets up a squeeze; his premium companion work covers Nvidia, Anthropic, and OpenAI. https://www.wheresyoured.at/credit-crunch/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,756.76 ▲ +0.9% Dow 51,214.51 ▼ -0.3% Nasdaq 27,335.65 ▲ +1.6% WTI crude 90.23 ▼ -1.8% EUR/USD 1.1260 ▼ -1.0% GBP/USD 1.3238 = +0.0% USD/JPY 157.90 = +0.0% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 66 items in the 24-hour window. No recent items: CISA Advisories, Ars Technica Security, Securelist (Kaspersky), Sophos News, Google Online Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 16 items in the 120-hour window. Sports media: 6 of 6 feeds loaded, 28 items in the 96-hour window. Team USA: 3 of 3 feeds loaded, 29 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via ESPN Summaries: 3 model call(s) served by claude-opus-5 (422s of model time; $1.96 at API list price). ================================================================ Generated 2026-10-08 07:07 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================