infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

The FBI and six partner governments seized the scanning tools and stolen-email portal that Beijing's Integrity Technology Group ran for the Flax Typhoon campaign against critical infrastructure.


Emerging Trends and Key Updates

Security

1. FBI Seizes Flax Typhoon's MicroScan and FishHub

Nation-State Activity · [apt, takedown, espionage]

Latest developments: The FBI seized seven domains on October 8, 2026 that the Chinese state-sponsored group Flax Typhoon used to operate two tools, the vulnerability scanner MicroScan and FishHub, a portal that handed third parties access to stolen email, and CISA, joined by agencies in six other countries, published advisory AA26-281A naming Beijing-based Integrity Technology Group as the company enabling the campaign and listing victims across Southeast Asia: government organizations, law enforcement agencies, healthcare systems, and religious institutions.

read more

Integrity Technology Group, which both the United States and the United Kingdom have sanctioned, pairs large-scale botnets and automated scanning with hands-on exploitation to steal data worldwide, including from United States critical infrastructure. Defenders should pull the indicators out of AA26-281A, hunt for traffic from the listed infrastructure, and close the internet-facing flaws MicroScan looks for.

Sources: BleepingComputer · The Record · The Hacker News · CISA Advisories · ↑ top

2. Shai-Hulud Rides a Compromised npm SDK

Ransomware and Cybercrime · [supply chain, npm, credential theft]

Latest developments: Socket reported on October 8, 2026 that version 0.5.144 of the npm package tensorlake, the TypeScript development kit for Tensorlake sandboxes and cloud services, carries obfuscated malware from the ChainDrop and Shai-Hulud supply chain campaign that harvests credentials, exfiltrates secrets, sets up persistence, and runs code the operator supplies; CloudSEK and Checkmarx separately named a campaign MALFEX, where one author published 12 npm packages since August 2023 and eight of them delivered the Overlord remote access trojan and information stealers across 40,767 downloads; researchers counted 16 malicious Firefox extensions posing as Rabby and OKX wallet portals that intercept recovery phrases and private keys during wallet imports; and the FakeGit campaign reactivated this month with more than 17,610 counterfeit GitHub repositories that push the SmartLoader loader and then the StealC information stealer.

read more

Developers who installed tensorlake 0.5.144 or any of the MALFEX packages should treat every credential on the build host as stolen, rotate tokens, and audit repositories for new persistence. Check the owner and commit history of any unfamiliar GitHub account before running its code or binaries.

Sources: The Hacker News · The Hacker News · The Hacker News · BleepingComputer · ↑ top

3. SonicWall, Splunk, and TP-Link Router Flaws

Vulnerabilities and Exploits · [patch, zero-day, policy]

Latest developments: Cisco published advisories on October 8, 2026 for a dozen critical vulnerabilities, five of them in the NX-OS data center network operating system, where an attacker can run arbitrary code with root privileges on Nexus switches; SecurityWeek reported the same day that Splunk patched critical and high-severity flaws carrying attackers to authentication bypass, arbitrary code execution, and privilege escalation, and that SEC Consult published technical details of the internet-service-provider router vulnerabilities a multistate lawsuit against TP-Link cites; SonicWall shipped hotfixes for four flaws in its Secure Mobile Access 1000 appliances, among them a 10.0-rated pre-authentication server-side request forgery that routes an attacker's requests through the gateway into internal functions, and says it has no evidence anyone exploits the four.

read more

The SMA1000 gateways hand remote workers access to corporate networks and applications, which puts a pre-authentication flaw at the network edge, and the Nexus switches sit in the middle of data center traffic. Administrators should install the Cisco NX-OS, SonicWall, and Splunk updates now and treat exposed TP-Link ISP routers as untrusted equipment.

Sources: BleepingComputer · SecurityWeek · The Hacker News · SecurityWeek · ↑ top

4. UAT-11985 and UAC-0099 Hit Taiwan and Ukraine

Nation-State Activity · [apt, phishing, espionage]

Latest developments: Cisco Talos disclosed on October 8, 2026 a spear-phishing operation it tracks as UAT-11985 that impersonates academic and policy institutions, dresses AI-assisted lures in the themes of real public events, and runs real-time adversary-in-the-middle phishing against the Google accounts of people tied to Taiwan research organizations; ESET published the same day almost two years of changes to MATCHBOIL, the downloader the Russia-aligned group UAC-0099 uses to plant a spying backdoor on Windows machines, with every victim in its telemetry inside Ukraine: transportation companies in July and August 2025, a manufacturer in December 2025, and an energy company in June 2026; and TrendAI, which calls the same cluster Earth Sirrush, tied UAC-0099 to a previously undocumented .NET information stealer and remote access trojan named ASHVEIN that hides its commands inside HTML and reaches Ukrainian government personnel.

read more

Both crews chase accounts and footholds rather than money, and both lean on material the target already trusts, from conference invitations to a graphical installer that looks routine. Research institutions and Ukrainian industrial operators should enforce phishing-resistant authentication, since adversary-in-the-middle proxies defeat one-time codes.

Sources: Cisco Talos · The Hacker News · Help Net Security · The Record · ↑ top

5. AI Finds 400 Java Flaws as Malware Fights Back

AI Security · [ai, patch, vulnerability research]

Latest developments: IBM and Red Hat said on October 8, 2026 that Lightwell, their program for patching open-source code companies already run in production, found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries; GitHub, working with Microsoft Applied Sciences, added a ModernBERT classifier to push protection that reads surrounding code to catch passwords and credentials no format rule recognizes; Cisco Talos documented the techniques malware authors now write in to obstruct automated AI analysis, including instructions aimed at the analyzing model; and Anthropic shipped Claude Haiku 5.5, which finds vulnerabilities and writes exploits better than Haiku 4.5 and ignores hidden commands more reliably, under safeguards tighter than its predecessor's.

read more

Machine-driven bug hunting keeps moving from vendor products into the shared open-source libraries beneath them, which leaves the exposure with every company that has not applied the resulting fixes. Teams running the affected Java libraries should pull the patched versions now and plan for AI-aware malware that treats the analysis pipeline as a target.

Sources: Help Net Security · Help Net Security · Cisco Talos · Help Net Security · ↑ top

6. Empire Market Sentence and MonsterCloud's $11 Million Markup

Ransomware and Cybercrime · [ransomware, law enforcement, fraud]

Latest developments: A federal court sentenced a co-creator of Empire Market, one of the largest dark web marketplaces before its 2020 shutdown, to 40 years in prison on October 8, 2026 for facilitating $430 million in illegal transactions between 2018 and 2020; prosecutors also put figures on the MonsterCloud case, charging Zohar Pinhasi, a 50-year-old United States and Israeli national from Hollywood, Florida who also used the names Zack Silver and Zack Green, with two counts of wire fraud and one conspiracy count for billing ransomware victims more than $19 million while quietly paying more than $8 million to the gangs that encrypted their data.

read more

Pinhasi's firm sold remediation as proprietary recovery technology and pocketed the roughly $11 million spread between the ransoms it paid and the invoices it sent. Organizations hiring recovery vendors should demand written disclosure of any payment to an attacker and verify the decryption method before signing.

Sources: BleepingComputer · SecurityWeek · Help Net Security · The Record · ↑ top

7. Hafnium Reward and a NudeLeaksTeens Seizure

Ransomware and Cybercrime · [law enforcement, espionage, takedown]

Latest developments: The State Department will pay up to $10 million for information identifying or locating Zhang Yu, the Chinese national United States prosecutors charged over the 2021 Microsoft Exchange Server intrusions known as Hafnium alongside Xu Zewei, whom Italy extradited to the United States in April 2026; the United States Attorney's Office for the Eastern District of Virginia announced on Wednesday, October 7, 2026 that the FBI Washington Field Office and French law enforcement seized two websites belonging to NudeLeaksTeens, which sold hacked and stolen sexually explicit images and videos of 17,000 young women and girls, and arrested the suspected administrator in northern France.

read more

Hafnium breached thousands of computers worldwide through Exchange Server flaws and carried off large volumes of documents, and Zhang Yu remains outside United States custody. The NudeLeaksTeens case pairs a domain seizure with an arrest, the pattern that keeps stolen-image markets from simply rebuilding under a new name.

Sources: SecurityWeek · The Hacker News · The Record · Help Net Security · ↑ top

8. ARTEX AI Pentesting Tool Hits South Korean Finance

AI Security · [ai, breach, financial]

Latest developments: CrowdStrike Intelligence disclosed on October 8, 2026 that a threat actor used an artificial intelligence penetration testing tool named ARTEX against South Korean financial organizations from late September into early October 2026 and exfiltrated data, putting a name to the tooling behind the intrusions South Korean officials said earlier this week may have run on AI agents and that exposed personal data on at least 68,000 people at a minimum of seven institutions; the same day researchers detailed AgentCorruption, a now-patched flaw in Amazon Web Services Bedrock AgentCore that let a single prompt to one chatbot carry an attacker across an organization's entire agent fleet.

read more

ARTEX automates the reconnaissance and exploitation a human tester would run by hand, which shortens the span between a first foothold and data leaving the network. South Korean banks and insurers should hunt for CrowdStrike's indicators and review authentication logs for machine-paced activity, and AWS customers running Bedrock AgentCore should confirm they picked up the fix.

Sources: The Hacker News · Dark Reading · ↑ top

9. Oracle Health and Southern Company Widen Their Breach Counts

Data Breaches · [breach, healthcare, critical infrastructure]

Latest developments: SecurityWeek reported on October 8, 2026 that the Oracle Health breach tally now reaches nearly 20 million people, far above the counts in earlier regulatory filings and patient notifications, and Southern Company began notifying roughly 400,000 account holders at its Georgia Power and Alabama Power utilities that hackers reached their utility account information.

read more

Oracle Health runs electronic health record systems for hospitals and clinics across the United States, which makes the revised figure one of the largest health data losses of the year. Patients and ratepayers in Georgia and Alabama should expect notification letters, watch statements for identity fraud, and freeze credit.

Sources: SecurityWeek · SecurityWeek · ↑ top

10. ASOS Traces Its Breach to Stolen Credentials

Data Breaches · [breach, social engineering, retail]

Latest developments: ASOS began sending updates to affected customers on October 8, 2026, said the attackers tricked an employee into surrendering account access before pushing the rogue notification, and confirmed, after an investigation it ran with outside experts, that they reached some personal information, including names and contact details, plus certain non-personal account information.

read more

ASOS, the London-based online clothing retailer, disclosed the incident on October 6, 2026 after attackers pushed unauthorized notifications reading HACKED to customers through its mobile app and claimed they took customer data out of the company's Snowflake environment. Customers should change their ASOS password, reuse it nowhere else, and treat messages citing their order history as phishing.

Sources: BleepingComputer · The Record · ↑ top

Business and Politics

Amex Fined $350 Million for Money-Laundering Failures

Latest developments: A United States regulator fined American Express $350 million Thursday, October 8, finding systemic control failures that left $13 billion of suspicious transactions unreported.

read more

American Express, the New York card issuer and bank holding company, failed to flag suspected money laundering across its payments business, and the regulator traced the lapses to systemic weaknesses rather than isolated errors. The penalty sets a fresh benchmark for anti-money-laundering enforcement against a large United States card network.

Sources: FT Home · ↑ top

Trump Backs the Interchange Bill Banks Fear Most

Latest developments: The Wall Street Journal reported Thursday, October 8, that President Trump has thrown his weight behind the credit-card legislation banks fear most, giving the bill a powerful ally.

read more

The bill would rewrite the system that routes billions of dollars in card swipe fees from merchants to banks, money lenders use to fund rewards programs. Presidential support shifts the odds on legislation that card issuers and the networks have fought for years.

Sources: WSJ Markets · ↑ top

OpenAI's Revenue Runs $20 Billion Below What Investors Heard

Latest developments: The Financial Times reported Thursday, October 8, that OpenAI recently told investors its annualized revenue approached $50 billion in September, far below the $70 billion figure widely reported, and doubts about artificial intelligence profits pushed the Nasdaq composite lower for a second day while the Nvidia-backed cloud company Firmus scrapped what would have been Australia's largest initial public offering in almost 30 years, citing market conditions.

read more

Wall Street has lined up record debt packages for Oracle, Broadcom, and SpaceX to buy artificial intelligence chips, and lenders underwrote that credit against revenue trajectories at OpenAI and its peers. A $20 billion gap between the reported and actual run rate strikes at the collateral behind tens of billions of dollars of new borrowing.

Sources: FT Home · WSJ Markets · WSJ US Business · ↑ top

Washington Bars Microsoft From Sponsoring Green Cards

Latest developments: Vice President JD Vance said Thursday, October 8, that the Trump administration suspends Microsoft and several other technology companies from the program that lets H-1B visa holders apply for permanent residency, accusing Microsoft of fraud.

read more

The suspension closes the main route by which large United States technology employers turn temporary skilled-visa workers into permanent staff, and it names individual corporations as the target. The action extends a White House campaign against what it calls abuse of the immigration system.

Sources: WSJ Politics · FT Home · ↑ top

Oil Jumps Past $105 on a Tanker Attack and a Hormuz Slowdown

Latest developments: Crude pared its gains Thursday afternoon, October 8, and still settled higher, after President Trump posted on Truth Social that the United States "will not be attacking Iran" before the November 3 midterm elections and cited productive discussions with Tehran; earlier in the session Brent gained more than 4% as a strike near Qatar pushed tanker attacks deeper into the Persian Gulf, Houthi missiles aimed at Riyadh's airport forced the cancellation of more than 100 flights, and Hurricane Isaias shut in Gulf of Mexico output, while natural gas futures settled 1.1% lower at $3.168 per million British thermal units on an above-estimate weekly storage build and United States stocks ended mixed with the Nasdaq composite leading the decline.

read more

Houthi strikes on Saudi airports killed three people in the latest escalation between Saudi Arabia and the Iran-backed militants in Yemen, and transits through the Strait of Hormuz, which recovered to nearly 90% of prewar levels in September, have since fallen sharply. European gas climbed back above 80 euros a megawatt-hour on doubts about liquefied natural gas supply security, and Harbour Energy and other Gulf of Mexico operators cut output and evacuated offshore crews as Isaias strengthened toward the United States Gulf Coast.

Sources: FT World · WSJ World News · WSJ Markets · FT Home · WSJ World News · FT World · ↑ top

Yields Sit at Multidecade Highs and the Debt Bill Comes Due

Latest developments: Treasury yields climbed again early Thursday, October 8, then retreated from session highs after a steady auction of longer-dated securities and a Treasury buyback operation, while eurozone yields stayed elevated; the Treasury Department reported the federal deficit for the fiscal year ended September 30 came in just under $2 trillion, the average United States 30-year mortgage rate rose for a seventh consecutive week to its highest level since 2023, the WSJ Dollar Index ended down 0.06% at 97.34, minutes of the European Central Bank's September meeting showed a cooler governing council appetite for further increases even as it judged the inflation picture worse, Federal Reserve minutes released Wednesday showed officials tilting inflation risks to the upside while feeling no urgency to raise rates in October, asset managers told the Financial Times they have started bottom fishing in French and other European government bonds on the view that fears of a eurozone-crisis repeat run overdone, and the Economist devoted its lead leader and briefing to a looming government-debt crisis.

read more

The Financial Times calculates that war-driven inflation and higher borrowing costs have cut Chancellor John Healey's fiscal headroom in half, a hole of nearly 12 billion pounds, and the Wall Street Journal reports investors now price outright French default as a tail risk in French government bonds; the Economist's briefing argues the danger concentrates in countries whose interest rates outrun economic growth. Germany's government cut against the gloom the same day, lifting its gross domestic product forecast to the country's fastest growth since 2022 on exports and debt-funded spending.

Sources: WSJ Markets · WSJ Politics · WSJ Markets · FT World · FT World · FT World · ↑ top

Israel Orders the British Consulate in Jerusalem Closed

Latest developments: Israel ordered the United Kingdom's consulate in Jerusalem shut Thursday, October 8, over Britain's decision to halt trade from Israeli settlements, and the two governments then agreed to carry on the post as a "UK Mission" to contain the diplomatic feud.

read more

The British consulate in Jerusalem has handled the United Kingdom's dealings with the Palestinians, and the closure order marks the sharpest turn yet in a quarrel over London's settlement trade ban. The dispute lands with an Israeli election looming.

Sources: WSJ World News · FT World · ↑ top

Pittsburgh

Weather

Tonight: Clear, low 45F.

Friday: Sunny, high 72F.

Friday Night: Partly Cloudy, low 49F.

Business

Duquesne Light Imports 80 Line Workers Before the Rain

Latest developments: WTAE reported Thursday, October 8, that Duquesne Light has brought in 80 line workers from outside the region to cover for striking crews as the IBEW Local 29 walkout reaches its eighth day, and the utility says it will call in additional contracted services if the remnants of Hurricane Isaias knock down wires Sunday, October 11.

read more

IBEW Local 29 members walked off the job October 1 in Duquesne Light Co.'s first strike in half a century, and talks earlier this week produced guarded hope of a settlement. Forecasters expect heavy tropical rain over Western Pennsylvania on Sunday, which raises the odds of outages while replacement crews work the lines.

Sources: WTAE · ↑ top

Skill Games Petition Asks for a Reprieve Until February 10

Latest developments: WPXI reported Thursday, October 8, that a group of state lawmakers and industry groups has petitioned the Supreme Court of Pennsylvania to push the deadline for businesses to remove skill games back to February 10.

read more

The court ordered the terminals out of taverns, convenience stores, VFW posts, and senior clubs, and the General Assembly adjourned October 7 without passing the bill that would regulate and tax the machines. Police have warned owners that unplugging a terminal does not satisfy the law once the deadline arrives.

Sources: WPXI · ↑ top

Wayfair Opens Its First Pennsylvania Store on McKnight Road

Latest developments: KDKA reported Thursday, October 8, that Wayfair will open a store at the North Hills Village shopping center along McKnight Road, the company's first Pennsylvania location.

read more

Wayfair sells furniture and home goods online and has lately pushed into physical retail. The McKnight Road store puts that experiment in one of the busiest retail corridors north of Pittsburgh.

Sources: KDKA · ↑ top

Pennsylvania Tourism Reaches an $87.2 Billion Impact

Latest developments: WPXI reported Thursday, October 8, on a newly released state report putting the 2025 economic impact of Pennsylvania tourism at $87.2 billion, an increase of $3.3 billion over 2024.

read more

Visitors spent $51.6 billion across the commonwealth last year, up 3.5%. The figures follow Butler County's fifth consecutive annual gain in visitor spending, which reached $793.6 million.

Sources: WPXI · ↑ top

Commonplace Coffee Renames Its Kitchen

Latest developments: WPXI reported Thursday, October 8, that Commonplace Coffee has relaunched its food program under the name Commonplace Kitchen.

read more

Commonplace Coffee roasts its own beans and runs cafes around the Pittsburgh region. The rebrand gives the food side of those shops a separate identity from the coffee business.

Sources: WPXI · ↑ top

Radio Las Palmas Broadcasts From Beechview

Latest developments: NEXTpittsburgh introduced the DJs of Radio Las Palmas on Thursday, October 8, three years into the station's run.

read more

Radio Las Palmas, Pittsburgh's only full-time Spanish-language radio station, broadcasts around the clock from studios above Las Palmas Market in the heart of the Beechview business district, mixing news, sports, and commentary in Spanish with salsa, merengue, dembow, bachata, cumbia, reggaeton, and Mexican regional music. The station premiered on air in October 2023.

Sources: NEXTpittsburgh · ↑ top

Troopers Raid a Dozen Butler County Vape Shops

Latest developments: The Pennsylvania State Police, joined by Butler, Jackson Township, Adams Township, and Cranberry Township police, raided a dozen vape shops across Butler County on Wednesday, October 7, with WPXI's Channel 11 on the scene in Butler.

read more

The sweep hit retailers across the county at once. Pennsylvania's new registry law, Act 57, makes most vape products illegal to sell in the state starting Monday, October 19, forcing shop owners across Western Pennsylvania to clear their shelves.

Sources: WPXI · ↑ top

The Center for OCD and Anxiety Markets Through Podcasts and TikTok

Latest developments: Pittsburgh City Paper reported Thursday, October 8, that the Center for OCD and Anxiety, which runs four locations in the Pittsburgh region, uses podcasting, art, community events, and TikTok to explain the conditions it treats.

read more

The practice has built its outreach around correcting public misconceptions about obsessive-compulsive disorder and anxiety, reaching patients through social media and audio rather than referral alone.

Sources: Pittsburgh City Paper · ↑ top

Around Town

O'Connor and Innamorato Press ALCOSAN on Contracting

Latest developments: PublicSource reported Thursday, October 8, that Pittsburgh Mayor Corey O'Connor and Allegheny County Executive Sara Innamorato both called for better minority contracting at the Allegheny County Sanitary Authority after PublicSource reported the diversity numbers in a $1 billion sewer tunnel contract, and neither official named a specific remedy.

read more

ALCOSAN began construction this week on its $4.5 billion Clean Water tunnel project under the rivers, the largest public works program in the region. The tunnel contracts carry decades of work, which makes who wins the subcontracts a long-running question for city and county leaders.

Sources: PublicSource · ↑ top

Allegheny County Council Sets a Final Vote on Paid Parental Leave

Latest developments: The Post-Gazette reported Thursday, October 8, that Allegheny County Council has teed up a final vote on the contested paid parental leave policy for county employees.

read more

The policy would give county workers paid time off after a birth or adoption, and it has divided council through committee review. The vote arrives as County Executive Sara Innamorato's $1.25 billion operating budget for 2027 moves through the same body with no property tax increase and no layoffs.

Sources: Pittsburgh Post-Gazette · ↑ top

Vance Calls for a Visa Fraud Investigation of Pitt

Latest developments: Vice President JD Vance said Thursday, October 8, that the University of Pittsburgh and other colleges need investigating for student visa fraud, KDKA reported.

read more

Vance spoke the same day the Trump administration suspended Microsoft and other technology companies from the program that lets H-1B visa holders apply for green cards. Pitt draws international students to its Oakland campus through exchange programs the administration now questions.

Sources: KDKA · ↑ top

Garfield Puzzles Over the New Broad Street

Latest developments: KDKA's Jessica Riley reported Thursday, October 8, that residents of Pittsburgh's Garfield neighborhood have answered the sudden shift of Broad Street to one-way traffic with confusion and frustration.

read more

Broad Street carries heavy traffic through Garfield, and the new pattern arrived with little warning for the people who drive and park on it. Neighbors told KDKA they cannot tell how the street now works.

Sources: KDKA · ↑ top

Fort Pitt Park Draws a $500,000 Grant

Latest developments: WPXI reported Thursday, October 8, that the city of Pittsburgh won $550,000 for recreation and conservation work.

read more

The award sends $500,000 to the rehabilitation of Fort Pitt Park and $50,000 to a study that would further develop the Three Rivers Heritage Trail, the riverfront path network that threads through the city.

Sources: WPXI · ↑ top

Isaias Becomes a Hurricane and Points Rain at Sunday

Latest developments: Isaias strengthened into the Atlantic season's first hurricane late Wednesday night, October 7, forecasters expect it to intensify further before it reaches the Florida, Alabama, and Mississippi coasts, and WTAE's Thursday afternoon update, October 8, has Western Pennsylvania bracing for the storm's remnants with the heaviest rain on Sunday, October 11.

read more

Western Pennsylvania stays dry and sunny through Saturday, October 10, with Thursday's highs about five degrees above average, and WTAE keeps Sunday tagged an Impact Day as the storm's tropical rain arrives over Pittsburgh.

Sources: WTAE · Pittsburgh Post-Gazette · WTAE · WTAE · KDKA · ↑ top

Shapiro and Garrity Hold Pennsylvania's Only Governor Debate

Latest developments: Governor Josh Shapiro and Republican challenger Stacy Garrity met Wednesday, October 7, in the race's only scheduled debate, answering on voter identification, gas prices, taxes, Medicaid, data centers, and President Donald Trump in the state's first gubernatorial debate since 2018, and KDKA's Jon Delano walked an analyst through the data center exchange Thursday, October 8.

read more

The debate followed months of attack ads and stump speeches and gave voters their single side-by-side look at the two candidates before the November 3 election, which a Post-Gazette poll last week put 25 points in Shapiro's favor.

Sources: Pittsburgh Post-Gazette · Pittsburgh Post-Gazette · WPXI · KDKA · ↑ top

Pittsburgh Water Enters Its Last Push on Lead Lines

Latest developments: WPXI reported Thursday, October 8, that Pittsburgh Water has reached the final push of its program to eliminate residential lead service lines.

read more

The utility has spent a decade pulling lead out of the infrastructure feeding roughly 71,000 residential service connections across the city. The remaining work finishes a replacement effort that began after Pittsburgh's lead-in-water crisis.

Sources: WPXI · ↑ top

Switch Together Buys Solar and Chargers in Bulk

Latest developments: The city of Pittsburgh and Allegheny County announced Thursday, October 8, that the Switch Together program is coming to residents.

read more

The program lets homeowners explore rooftop solar installations, battery storage, and electric vehicle chargers through a group arrangement, giving households a path to compare options and prices together.

Sources: WPXI · ↑ top

California Money Tops Summer Lee's Pennsylvania Haul

Latest developments: TribLive published a NewsWorks Lab analysis of federal campaign records Thursday, October 8, showing United States Representative Summer Lee has raised more money from California than from Pennsylvania for the first time in her three congressional election cycles.

read more

The analysis tracks out-of-state donations flowing to Western Pennsylvania lawmakers ahead of the November 3 election, with Lee, who represents Pennsylvania's 12th District, the clearest case.

Sources: TribLive · ↑ top

Reserve Township Weighs a Fire Tax

Latest developments: The Reserve Township commissioners worked through their budget at an October 7 workshop and gave no public signal on the volunteer fire department's request for a dedicated property tax.

read more

The department has asked the Allegheny County township to levy a new property tax to fund its operations. The commissioners' silence leaves the question open as Reserve finishes writing its budget.

Sources: TribLive · ↑ top

Events

Dragon Boats Race the Allegheny This Weekend

Latest developments: KDKA's Robby Incmikoski previewed the Pittsburgh Dragon Boat Festival on Thursday, October 8, two days before the boats hit the water.

read more

The festival returns to the Allegheny River this weekend with teams paddling decorated dragon boats, a sport carrying centuries of Chinese tradition, and the races raise money in support of local breast cancer survivors.

Sources: KDKA · ↑ top

The City Sets Its Halloween Slate

Latest developments: Pittsburgh officials announced the city's trick-or-treat dates Thursday, October 8, along with a first-ever Halloween house decorating contest for residents, the annual CitiParks Track-and-Treat event at Highland Park, and a Halloween party inside the City-County Building downtown.

read more

CitiParks runs Track-and-Treat on the track at Highland Park in the city's East End, where families collect candy before Halloween proper. The decorating contest invites homeowners to enter their haunted houses, and the City-County Building on Grant Street opens to costumed children.

Sources: WPXI · WPXI · WPXI · WPXI · ↑ top

Mister Rogers Inspires a New Children's Museum Exhibit

Latest developments: KDKA toured "It's a Beautiful Day to Be You" on Thursday, October 8, the Children's Museum of Pittsburgh's new exhibit, and found it landing with grandparents as much as with children.

read more

The exhibit draws on the original "Mister Rogers' Neighborhood," produced in Pittsburgh at WQED, and on two of its spinoffs, and it builds activities that let children practice kindness. The Children's Museum sits on the North Side at Allegheny Square.

Sources: KDKA · ↑ top

Def Leppard and the Goo Goo Dolls Book PPG Paints Arena

Latest developments: WPXI and KDKA reported Thursday, October 8, that Def Leppard and the Goo Goo Dolls will bring their 45-date tour to PPG Paints Arena in Pittsburgh on Tuesday, March 23, 2027.

read more

The co-headlining tour pairs the British hard rock band Def Leppard with the Buffalo rock trio the Goo Goo Dolls. The Pittsburgh stop lands at PPG Paints Arena, the 19,000-seat home of the Penguins on Centre Avenue.

Sources: WPXI · KDKA · ↑ top

The Steelers Style Show Walks Stage AE Friday

Latest developments: WPXI reported Thursday, October 8, that the Steelers Style fundraiser returns to Stage AE, the team's largest annual fundraiser and its 52nd edition, on Friday, October 9.

read more

Steelers players walk the runway at Stage AE on the North Shore to raise money for the team's charitable giving. The show has run for more than half a century.

Sources: WPXI · ↑ top

Holy Cross Serves Its Autumn Food Fair in Mount Lebanon

Latest developments: Organizers of the Holy Cross Philoptochos Autumn Food Fair cooked on KDKA's Pittsburgh Today Live on Thursday, October 8, and handed over a donation to the KDKA Turkey Fund.

read more

The food fair runs Wednesday and Thursday, October 14 and 15, at Holy Cross Greek Orthodox Church in Mount Lebanon, with the parish's Philoptochos society cooking Greek dishes.

Sources: KDKA · ↑ top

Sewickley's Pumpkin Patch Reaches 25 Years

Latest developments: TribLive reported Thursday, October 8, that the pumpkin patch at Sewickley United Methodist Church is in its 25th year.

read more

Thousands of pumpkins sit on pallets along the church lawn at the corner of Broad and Thorn streets in Sewickley, where the congregation runs the patch each fall.

Sources: TribLive · ↑ top

Greenwood Week Opens at Emerald City Downtown

Latest developments: Greenwood Week begins Thursday, October 8, at 7 p.m. and runs through Saturday, October 10.

read more

The program takes place at Emerald City, 213 Smithfield St., downtown Pittsburgh. Evening admission runs $25 to $75 and the co-working days cost nothing; details and registration sit at greenwoodplan.com.

Sources: Pittsburgh City Paper · ↑ top

Chelsea Handler and Chance the Rapper Headline the Weekend

Latest developments: The Post-Gazette published its guide Thursday, October 8, to the weekend of October 8 through 11, led by Chelsea Handler at Citizens Live at The Wylie and Chance the Rapper performing his mixtape classic.

read more

Citizens Live at The Wylie, the 4,000-capacity hall that opened in the Lower Hill District on October 1, hosts Handler's stand-up date. The guide carries additional listings across the region for the weekend.

Sources: Post-Gazette Arts & Entertainment · ↑ top

Oso Oso Comes Back to Pittsburgh

Latest developments: Pittsburgh City Paper previewed the emo punk band Oso Oso's return to the city Thursday, October 8, with frontman Jade Lilitri telling the paper that an earlier Pittsburgh show marked a turning point in his career.

read more

City Paper describes the band's set as "toe-tapping, rump-shaking" emo punk. The preview carries the show details.

Sources: Pittsburgh City Paper · ↑ top

Sports

Steelers (2-2)

Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM

Penguins (2-2-0)

Wed Oct 7 · Penguins 3 · Capitals 5 · Final

Capitals top Penguins 5-3 in Alex Ovechkin's final home opener in Washington

Up Next · Penguins @ Blue Jackets · Fri Oct 9, 7:00 PM

Around the Teams

The Pirates Hand Justin Newman the Draft

Latest developments: A source told the Post-Gazette on Thursday, October 8, that the Pittsburgh Pirates have promoted Justin Newman to lead the club's draft process.

read more

Newman takes over amateur scouting decisions for a team that finished a winning 2026 season short of the playoffs and now faces arbitration and non-tender calls on catcher Henry Davis and other eligible players. Post-Gazette columnist Noah Hiles has argued the winter rests on whether owner Bob Nutting spends.

Sources: Post-Gazette Pirates · ↑ top

Khan's Spending Spree Has Yet to Pay

Latest developments: The Post-Gazette wrote Thursday, October 8, that general manager Omar Khan's offseason spending has returned nothing yet for the Steelers.

read more

Khan rebuilt the roster around quarterback Aaron Rodgers and added receiver Michael Pittman Jr., who now misses multiple weeks with an injury. Four games in, Pittsburgh has traded cornerback Joey Porter Jr. to the Dallas Cowboys and placed defensive tackle Derrick Harmon on injured reserve.

Sources: Post-Gazette Steelers · ↑ top

SNR Drive Opens the Colts Preview

Latest developments: Matt Williamson and Wes Uhler started their preview of Sunday's game at Indianapolis on Thursday's SNR Drive, October 8, spending half an hour inside Williamson's Week 5 stats packet and bringing in Steelers.com editor Brian Batko, and head coach Mike McCarthy met the media before Thursday's practice.

read more

Pittsburgh plays at the Indianapolis Colts at 1 p.m. Sunday, October 11, on CBS, carrying a thin cornerback group after the Joey Porter Jr. trade to Dallas and the loss of Derrick Harmon to injured reserve, with receiver Michael Pittman Jr. out multiple weeks and safety DeShon Elliott close to a return.

Sources: Pittsburgh Steelers (YouTube) · Pittsburgh Steelers (YouTube) · ↑ top

Pittman Misses Weeks, Elliott Nears a Return

Latest developments: The Post-Gazette reported Thursday, October 8, that Steelers receiver Michael Pittman Jr. will sit out multiple weeks with an injury while safety DeShon Elliott could come back soon, and Ray Fittipaldo ran his Steelers chat the same morning on the Indianapolis matchup and the week's NFL news.

read more

Pittman's absence thins a receiving group that already leans on tight end Pat Freiermuth and running back Jaylen Warren for production, and Pittsburgh plays at the Indianapolis Colts at 1 p.m. Sunday, October 11, on CBS. The team arrives short at cornerback after trading Joey Porter Jr. to the Dallas Cowboys and placing defensive tackle Derrick Harmon on injured reserve.

Sources: Post-Gazette Steelers · Post-Gazette Steelers · ↑ top

Spears-Jennings Turns Quiet Work Into Snaps

Latest developments: The Post-Gazette traced Thursday, October 8, how Robert Spears-Jennings's "hard work in the dark" has already paid off in the role he holds on the Steelers' defense.

read more

Pittsburgh leans harder on young defenders after trading cornerback Joey Porter Jr. to the Dallas Cowboys and putting defensive tackle Derrick Harmon on injured reserve, and Spears-Jennings has taken on more as the team prepares for Sunday's 1 p.m. game at the Indianapolis Colts.

Sources: Post-Gazette Steelers · ↑ top

Heyward Takes the Podium

Latest developments: The Steelers posted Cameron Heyward's Wednesday, October 7, news conference on Thursday morning, October 8.

read more

Heyward, the Steelers' defensive captain, has declined to apologize for the team's testy sideline during the Thursday night loss at Cleveland, telling the Post-Gazette the emotion belongs in the game, and he faced reporters as Pittsburgh absorbed the Joey Porter Jr. trade to Dallas.

Sources: Pittsburgh Steelers (YouTube) · Post-Gazette Steelers · ↑ top

Rodgers and McCarthy Take the Podium Before Indianapolis

Latest developments: The Steelers posted quarterback Aaron Rodgers's and head coach Mike McCarthy's Wednesday news conferences, October 7, and Gerry Dulac ran his Week 5 Steelers chat the same day.

read more

Pittsburgh practiced Wednesday ahead of its 1 p.m. Sunday, October 11 game at the Indianapolis Colts on CBS, carrying a short cornerback group after the Joey Porter Jr. trade to Dallas and the loss of defensive tackle Derrick Harmon to injured reserve.

Sources: Pittsburgh Steelers (YouTube) · Pittsburgh Steelers (YouTube) · Post-Gazette Steelers · ↑ top

Team USA

The NWSL Extends Sophia Wilson's Suspension

Latest developments: The National Women's Soccer League added a game Thursday, October 8, to the ban it handed Portland Thorns striker Sophia Wilson for violent conduct, a hair-pulling incident, leaving her out of her club's next two matches.

read more

Wilson, a United States women's national team forward and the Thorns' primary scorer, loses two matches during Portland's run toward the playoffs. The league's disciplinary committee reviewed the incident and lengthened the original penalty.

Sources: ESPN Soccer · ↑ top

Rodman Works on Being Harder to Read

Latest developments: United States forward Trinity Rodman said Thursday, October 8, that the current women's national team camp has helped her play less predictably and keep defenders guessing.

read more

Rodman, who plays for the Washington Spirit, speaks from a camp pointed at two matches against Spain, the reigning World Cup champion, which coach Emma Hayes's players have called a benchmark before next summer's World Cup in Brazil.

Sources: ESPN Soccer · ↑ top

Lineup Questions Follow Pochettino Into the Nations League

Latest developments: ESPN published its takeaways from the international window Thursday, October 8, crediting Mauricio Pochettino's young players for their performances and listing the selection questions the United States men carry into their Concacaf Nations League quarterfinal.

read more

The United States went unbeaten across the window, beating Mexico 3-0 in Glendale, Arizona, on October 3 and Canada 1-0 on October 6. Teenagers Cavan Sullivan and Julian Hall scored against Mexico, leaving Pochettino to sort a crowded pool of in-form players before knockout play.

Sources: ESPN Soccer · ↑ top

Freeman Anchors the Young Americans Past Canada

Latest developments: ESPN's player ratings, published Thursday, October 8, gave defender Alex Freeman an 8 out of 10 for the assist and the defensive work he contributed to the United States men's 1-0 win over Canada on Tuesday, October 6, the team's second straight clean sheet.

read more

Canada pressed with physicality and pressure, the two things most likely to unsettle an inexperienced side, and coach Mauricio Pochettino's next wave of players held the back line together to close an unbeaten international window.

Sources: ESPN Soccer · ESPN Soccer · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,776.55  ▲ +1.2%
Dow        51,275.53  = -0.0%
Nasdaq     27,400.00  ▲ +1.9%
WTI crude      90.23  ▼ -1.8%
EUR/USD       1.1235  ▼ -1.1%
GBP/USD       1.3229  ▼ -0.1%
USD/JPY       158.00  ▲ +0.2%

Feed Health

Security: 24 of 24 feeds loaded, 67 items in the 24-hour window. No recent items: Krebs on Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Graham Cluley, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud.

Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window.

Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window.

Events: 4 of 4 feeds loaded, 18 items in the 120-hour window.

Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window.

Team USA: 3 of 3 feeds loaded, 28 items in the 72-hour window.

Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window.

Markets (Yahoo Finance): 7 of 7 rows

Weather (NWS): 3 forecast periods

Scores (ESPN, plaintextsports): 2 teams via ESPN

Summaries: 3 model call(s) served by claude-opus-5 (540s of model time; $2.61 at API list price).