================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Sunday, October 11, 2026 - 8:06 AM EDT ================================================================ CISA's remediation deadline for the five flaws Flax Typhoon exploits expires today, while researchers count hundreds of internet-facing GPU servers an attacker can knock down through NVIDIA's monitoring software. Quiet day: only 42 security items in the last 48 hours. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] CISA's remediation deadline for the five flaws Flax Typhoon exploits lands on federal civilian agencies today, while Belarusian Cyber Partisans confirmed months spent inside Moscow's health network. see: Flax Typhoon Patch Deadline Lands Today; Cyber Partisans Claim Moscow's Health Network * [TREND] Hundreds of internet-facing GPU servers expose NVIDIA's DCGM Exporter to CVE-2026-47483 crashes, even as non-security buyers chased AI capability across 117 cybersecurity acquisitions last quarter. see: Exposed NVIDIA GPU Monitors Crash on Command; AI Buyers Push Security Deals to 117 in a Quarter * [UPDATE (new)] One stolen employee identity carried attackers from ASOS's customer-facing mobile app deep into the retailer's corporate network, the path behind those "HACKED" notifications shoppers saw. see: One ASOS Identity Opened the Network * [UPDATE (new)] U.S. Central Command struck a blockade-running tanker in the Gulf of Oman as European spy agencies warned Russia has intensified attempts to kill the continent's defense chiefs. see: U.S. Strikes a Tanker Off Iran; Russia Hunts Europe's Defense Chiefs * [UPDATE (new)] Senator Ron Wyden is demanding the privacy review for the license plate surveillance the White House runs through its drug-trafficking task force program. see: Wyden Presses the White House on License Plate Reads * [UPDATE (new)] Pennsylvania's skill games went dark as Shapiro and Garrity split over them, while Isaias remnants soaked Pittsburgh ahead of the Steelers' 1 p.m. kickoff against the Colts. see: Pennsylvania's Skill Games Go Dark; Shapiro and Garrity on Taxes and Skill Games; Isaias Soaks Pittsburgh; Steelers Host the Colts at 1 p.m. SECURITY ---------------------------------------------------------------- 1. EXPOSED NVIDIA GPU MONITORS CRASH ON COMMAND Vulnerabilities and Exploits · [patch, ai, exposure] Latest developments: Lava reported that hundreds of internet-exposed GPU servers run NVIDIA's DCGM Exporter open to CVE-2026-47483, an 8.2-rated flaw that lets an unauthenticated attacker crash the monitoring service and disrupt the AI work the machines carry, and SecurityWeek noted the same exposed monitors leak telemetry about the hardware behind them. DCGM Exporter reports the health of NVIDIA graphics processors on servers built for AI and machine learning. NVIDIA published its bulletin and fix on July 28, 2026; operators should install it and take the exporter's port off the public internet. - Help Net Security: https://www.helpnetsecurity.com/2026/10/09/nvidia-dcgm-exporter-vulnerability-cve-2026-47483/ - SecurityWeek: https://www.securityweek.com/in-other-news-ai-used-in-korean-bank-breaches-poem-guided-botnet-empire-admin-gets-40-years/ 2. FLAX TYPHOON PATCH DEADLINE LANDS TODAY Nation-State Activity · [apt, patch, zero-day] Latest developments: The remediation deadline CISA set for the five vulnerabilities the China-linked group Flax Typhoon exploits falls today, October 11, 2026, for federal civilian agencies, among them CVE-2015-3306, a 10.0-rated improper access control flaw in the ProFTPD file transfer server that dates to 2015. CISA added the five flaws to its Known Exploited Vulnerabilities catalog on October 8, 2026 after Flax Typhoon abused them against government, law enforcement, healthcare, and religious targets across Southeast Asia. Anyone still running ProFTPD and the other affected software should patch today or disconnect the systems. - The Hacker News: https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html 3. ONE ASOS IDENTITY OPENED THE NETWORK Data Breaches · [breach, identity, saas] Latest developments: Dark Reading reported on October 9, 2026 that the one employee identity attackers took at ASOS carried them past the customer-facing mobile app and deep into the retailer's corporate network, the path behind the "HACKED" notifications customers received and the data theft out of its Snowflake environment. ASOS, the London online clothing retailer, lost customer names and contact details after attackers tricked an employee into surrendering account access. Companies running customer-facing software as a service should put phishing-resistant authentication on every identity that administers it. - Dark Reading: https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas 4. CYBER PARTISANS CLAIM MOSCOW'S HEALTH NETWORK Nation-State Activity · [hacktivism, breach] Latest developments: The Belarusian Cyber Partisans confirmed on October 9, 2026 that they spent months inside the network of the Moscow Department of Health in 2023, agreeing with Russian researchers who had traced the intrusion to them. The Cyber Partisans, a Belarusian hacktivist group that attacks Belarusian and Russian state systems, now own a breach of a Russian state healthcare network that went unclaimed for three years. The admission shows how long an undetected foothold in public health infrastructure can last. - The Record: https://therecord.media/belarusian-cyber-partisans-claim-2023-russia-healthcare-hack 5. WYDEN PRESSES THE WHITE HOUSE ON LICENSE PLATE READS Policy and Regulation · [policy, surveillance, privacy] Latest developments: Senator Ron Wyden demanded the privacy review report covering the license plate surveillance program the White House runs through the High Intensity Drug Trafficking Areas program, 404 Media reported on October 9, 2026, after its own investigation surfaced the collection. HIDTA task forces pool federal, state, and local drug enforcement, and the program reads and stores license plates through them. Wyden's request asks what privacy review the White House completed before the program began logging drivers. - 404 Media: https://www.404media.co/following-404-media-investigation-senator-demands-info-about-white-houses-license-plate-surveillance-program/ 6. AI BUYERS PUSH SECURITY DEALS TO 117 IN A QUARTER Security Industry and Markets · [industry, ai] Latest developments: Dark Reading counted 117 strategic cybersecurity acquisitions announced in the latest quarter and reported on October 9, 2026 that many of the buyers come from outside the security industry, chasing AI capability. Consolidation at this rate moves the vendors and products enterprises already run into new ownership, often under acquirers with no security track record. Security leaders should identify which of their suppliers sit in play and press each one on support and roadmap commitments after a sale. - Dark Reading: https://www.darkreading.com/cybersecurity-analytics/ai-scramble-cybersecurity-ma-boom BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Strikes a Tanker Off Iran Latest developments: United States Central Command said Sunday, October 11, that American forces hit a commercial tanker in the Gulf of Oman after the ship tried to break through the naval blockade of Iranian ports, the command's first such attack in a month. Washington has blockaded Iran's ports during the United States-Israel war on Iran, and the strike puts military force behind the cordon on the tanker lanes running out of the Strait of Hormuz, where Iranian attacks on shipping have already lifted crude and freight rates. Owners, insurers, and charterers now price the risk that a cargo lifted anywhere near Iran draws fire. - FT Home: https://www.ft.com/content/f9b9f937-97b0-4a03-90f6-05d7c7344ab9?syn-25a6b1a6=1 * Russia Hunts Europe's Defense Chiefs Latest developments: European spy agencies warned Sunday, October 11, that Russia has intensified attempts to kill European defense chiefs, and companies across the continent have raised personal security for their top executives in response. The Financial Times reported that the Kremlin has ordered an expansion of sabotage and hybrid operations inside Europe, with defense officials among the targets. Firms tied to Europe's rearmament now carry executive protection and physical security as a standing cost of doing business. - FT Home: https://www.ft.com/content/5da2dd05-9583-4a75-b018-2c5024383ec4?syn-25a6b1a6=1 * New Delhi Locks Down Against the Voter-Rolls Movement Latest developments: Police sealed the heart of New Delhi on Sunday, October 11, to thwart a voter-rights march, and a court ordered the release of Abhijeet Dipke, the Cockroach Janta Party leader whom officers escorted off a flight in the capital a day earlier. The youth-led Cockroach Janta Party has turned anger over India's voter lists into a national protest movement that carries the grievances of young Indians who cannot find work, and its leaders have called for more demonstrations. The confrontation strains the politics of the world's fastest-growing major economy while the Reserve Bank of India spends reserves to hold the rupee off record lows. - WSJ World News: https://www.wsj.com/world/india/india-locks-down-heart-of-capital-to-thwart-voter-rights-protest-c7aad7a4?mod=rss_worldnews - FT Home: https://www.ft.com/content/9b30ee59-b542-48b8-85f6-d60dce897342?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/407fa757-cc77-49c0-871a-5140dd3a9a80?syn-25a6b1a6=1 - FT Markets: https://www.ft.com/content/b373cf00-9a94-4dc7-bdda-bc7006da1148?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Rain Showers, high 63F. Tonight: Chance Rain Showers, low 58F. Columbus Day: Mostly Cloudy, high 73F. Business: * Pennsylvania's Skill Games Go Dark Latest developments: With the removal deadline in force after the Supreme Court of Pennsylvania refused to extend it, the Post-Gazette laid out the fallout Sunday, October 11, and TribLive's editorial board asked why the General Assembly never fixed the law. The slots-like skill game terminals that sit in Pennsylvania bars, social clubs, VFW posts, and convenience stores must come out, ending a revenue stream small operators and veterans' organizations count on. The General Assembly adjourned to campaign without passing a bill to regulate and tax the machines, and the industry's court options ran out. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/10/11/pennsylvania-skill-games-deadline-1/stories/202610080069 - TribLive: https://triblive.com/opinion/editorial-why-havent-lawmakers-fixed-skill-games-misstep/ * Pennsylvania Water Bills Rank Among the Nation's Highest Latest developments: The Post-Gazette reported Sunday, October 11, on a study placing four of the ten most expensive water companies in the United States inside Pennsylvania. Pennsylvania households pay water rates near the top of the national range, a line item that compounds across the state's industrial and commercial users as well. The ranking lands while Pittsburgh Water finishes replacing residential lead service lines and the Allegheny County Sanitary Authority starts its $4.5 billion Clean Water tunnel project, both of which ratepayers fund. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/state/2026/10/11/expensive-water-companies-pennsylvania/stories/202610080031 * Enjoy Wrestling Closes After Five Years Latest developments: TribLive reported Sunday, October 11, that Enjoy Wrestling, the independent promotion Kurt Hackimer built in Pittsburgh, has shut down after a five-year run. Hackimer founded Enjoy Wrestling on the premise that Pittsburgh wrestling should be, in his phrase, "for everyone," and ran independent shows in the city for five years before folding the operation. - TribLive: https://triblive.com/local/enjoy-wrestling-closes-after-5-years-of-making-pittsburgh-wrestling-for-everyone/ Around town: * Isaias Soaks Pittsburgh Latest developments: The remnants of Isaias reached Western Pennsylvania overnight and dropped steady, moderate rain through Sunday morning, October 11, with scattered showers and wind lingering into an afternoon that both taper. Isaias came ashore on the Florida Panhandle as the Atlantic season's first hurricane, killed at least four people, and cut power to more than 800,000 customers across Florida, Alabama, and Georgia before its moisture tracked northeast. WTAE keeps Sunday tagged an Impact Day for rain and wind across Western Pennsylvania, with the wettest stretch running through midday and a flash flooding threat trailing the storm. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-in-for-a-rainy-day-as-run-off-from-hurricane-isaias-moves-through-the-region/ - WPXI: https://www.wpxi.com/news/local/steady-rain-isaias-continues-sunday-morning-scattered-showers-expected-later/PCR6S5WOJFBGDMVXIKJD6B33HQ/ - WTAE: https://www.wtae.com/article/impact-day-rain-and-wind-for-western-pa-isaias/74100985 - WTAE: https://www.wtae.com/article/tracking-isaias-atlantic-hurricane-season-2026/74072808 * Trump Asks Fetterman to Switch Parties Latest developments: President Trump publicly urged Senator John Fetterman on Saturday, October 10, to leave the Democratic Party and register as a Republican. Fetterman, the former Braddock mayor and Pennsylvania lieutenant governor now in his first Senate term, has split with his party on Israel and immigration, and Trump's invitation lands on Pennsylvania Democrats three weeks before the November 3 election. Fetterman's seat stays off the ballot until 2028. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-nation/2026/10/10/trump-fetterman-republican/stories/202610100053 - WTAE: https://www.wtae.com/article/trump-urges-sen-john-fetterman-to-switch-parties/74100481 * Shapiro and Garrity on Taxes and Skill Games Latest developments: The Post-Gazette published a side-by-side Sunday, October 11, of where Governor Josh Shapiro and Republican challenger Stacy Garrity stand on taxes, state spending, and skill games. Shapiro seeks a second term against Garrity, the state treasurer, in the November 3 election, and a poll last week gave him a 25-point lead. Skill games anchor the fiscal argument: the machines come out of Pennsylvania businesses this month, and whoever wins inherits the choice of whether to legalize, regulate, and tax them. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-state/2026/10/11/where-pa-governor-candidates-garrity-and-shapiro-stand-on-taxes-spending-skill-g/stories/202610110068 Events: * Fort Ligonier Days Finishes Sunday Latest developments: The Fort Ligonier Days parade moved down Main Street in Ligonier on Saturday, October 10, and closed with fireworks; the festival's final events run Sunday, October 11. Fort Ligonier Days is Ligonier's annual Westmoreland County festival marking the 1758 defense of Fort Ligonier, built around a Main Street parade and fireworks. TribLive covered Saturday's parade and reported more events on the schedule for Sunday, October 11. - TribLive: https://triblive.com/local/westmoreland/fort-ligonier-days-parade-and-fireworks-are-featured-saturday-with-more-events-on-tap-sunday/ * Steelers Host the Colts at 1 p.m. Latest developments: KDKA published viewing details Sunday, October 11, for the Steelers' Week 5 game against the Indianapolis Colts: kickoff at 1 p.m. at Acrisure Stadium on Pittsburgh's North Shore, with CBS carrying the broadcast. Pittsburgh plays Indianapolis at 1 p.m. Sunday, October 11, at Acrisure Stadium, the Steelers' first home game after the trip to Cleveland. CBS televises it locally. - KDKA: https://www.cbsnews.com/pittsburgh/news/how-to-watch-todays-pittsburgh-steelers-indianapolis-colts-game-week-5-nfl/ SPORTS ---------------------------------------------------------------- Steelers (2-2) Up Next · Colts @ Steelers · Sun Oct 11, 1:00 PM https://plaintextsports.com/nfl/2026/week5/ind-pit Penguins (3-2-1) Sat Oct 10 · Stars 1 · Penguins 2 · Final (SO) Rickard Rakell scores in shootout to lift Penguins over Stars, 2-1 https://plaintextsports.com/nhl/2026-10-10/dal-pit Up Next · Penguins @ Blackhawks · Tue Oct 13, 8:00 PM https://plaintextsports.com/nhl/2026-10-13/pit-chi Around the Teams: * Jonathan Taylor Tops the Steelers' Checklist Latest developments: The Post-Gazette's scouting report, published Sunday morning, October 11, named stopping Colts running back Jonathan Taylor the Steelers' first priority, and Gerry Dulac posted his Week 5 league predictions the same morning. Pittsburgh's defense, which Cleveland exposed two weeks ago and which plays Sunday without cornerback Jamel Dean and safety DeShon Elliott, draws Taylor and quarterback Daniel Jones at Acrisure Stadium. The Post-Gazette puts run defense at the head of the game plan. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/11/colts-scouting-report-nfl-preview-jonathan-taylor/stories/202610110061 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/11/nfl-week-5-predictions-picks/stories/202610080053 Team USA: * Hayes Finds Progress in the Spain Loss Latest developments: Speaking after Spain's 2-0 win Saturday, October 10, United States coach Emma Hayes said her team's inability to score frustrated her and pointed to signs of progress with next summer's World Cup ahead, while ESPN's analysis credited Spain's finishing for the gap. The second-ranked United States women opened a two-match set against Spain, the reigning World Cup champion, and conceded to Patri Guijarro and Eva Navarro inside the first 14 minutes. Hayes, Trinity Rodman, and their teammates treated the night as a measuring stick for a squad still being assembled for the 2027 World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50151351/uswnt-vs-spain-women-soccer-emma-hayes-trinity-rodman - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50151578/clinical-spain-show-uswnt-takes-world-champions READING ---------------------------------------------------------------- * Ed Zitron -- Premium: The Hater's Guide To Junk Zitron walks through the junk bond market, arguing that the once-sleepy world of below-investment-grade debt has swollen into an era of garbage credit dressed up as high yield. He treats the appetite for that paper as a measure of how much risk investors have talked themselves into carrying. https://www.wheresyoured.at/premium-the-haters-guide-to-junk/ * Stratechery -- An Interview with Katie Harbath About Disrupting Politics at Facebook Ben Thompson interviews Katie Harbath, Facebook's former head of global elections, about her book Disrupting Politics. Harbath traces how campaigns learned to use the platform through the 2010s and how that pressure changed the company from inside. https://stratechery.com/2026/an-interview-with-katie-harbath-about-disrupting-politics-at-facebook/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,794.31 ▲ +1.5% Dow 51,371.13 ▲ +0.4% Nasdaq 27,435.06 ▲ +2.0% WTI crude 90.10 ▼ -1.3% EUR/USD 1.1218 ▼ -0.8% GBP/USD 1.3234 = -0.0% USD/JPY 158.13 ▲ +0.3% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 42 items in the 48-hour window. No recent items: CISA Advisories, Ars Technica Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day), Frank on Fraud. Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. No recent items: Pittsburgh City Paper, NEXTpittsburgh. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 16 items in the 120-hour window. Sports media: 6 of 6 feeds loaded, 30 items in the 96-hour window. No recent items: Footbahlin with Ben Roethlisberger, Ben Roethlisberger / Channel Seven (YouTube). Team USA: 3 of 3 feeds loaded, 26 items in the 72-hour window. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via ESPN Summaries: 3 model call(s) served by claude-opus-5 (385s of model time; $1.82 at API list price). ================================================================ Generated 2026-10-11 08:06 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================