================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, October 12, 2026 - 7:36 PM EDT ================================================================ Attackers defrosted the freezers at hundreds of French supermarkets and drove Ahold Delhaize to pull systems offline, making Europe's grocery aisles the day's clearest proof that intrusions now spoil physical goods. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets | Feed Health EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] One weekend's intrusions hit European grocery hard, with Danfoss controllers defrosting hundreds of French supermarket freezers while Ahold Delhaize pulled systems offline across the Netherlands and Belgium. see: French Supermarket Freezers Defrosted by Attack; Ahold Delhaize Pulls Systems Offline * [TREND] AI agents now work both sides, as CyberXero wraps Cobalt Strike in a Claude Code orchestration layer against Ukraine while Anthropic strips internet access from high-risk evaluations. see: CyberXero Runs Claude Code Against Ukraine; Anthropic Cuts Internet From High-Risk AI Tests * [TREND] Three maximum-severity bugs are under attack or nearly so: SonicWall's SMA 1000 drew 135 exploit attempts, Bricksforge allows anonymous PHP uploads, and GitLab urges immediate CI/CD patching. see: SonicWall Flaw Draws 135 Exploit Attempts; Bricksforge Flaw Hands Attackers WordPress Sites; GitLab Regex Compiler Opens Remote Code Execution * [UPDATE (new)] Ukraine's war reached cloud infrastructure as drones damaged three Yandex data centers, while Zelenskyy accused Putin of hitting gas and power sites after Trump's weekend truce. see: Ukrainian Drones Knock Out Yandex Data Centers; Zelenskyy Says Putin Is Breaking the Energy Ceasefire * [UPDATE (new)] Tuesday brings two local deadlines, as Pennsylvania forces skill game terminals out of VFW posts and Arnold Palmer Regional Airport opens its terminal with no airline named. see: The Skill Games Deadline Arrives Tuesday; Arnold Palmer Regional Airport Unveils Its Terminal * [UPDATE (new)] County government drew fire Monday as $15 million of jail overtime surfaced and restaurant operators asked who pays for the proposed paid parental leave policy. see: Allegheny County Jail Runs $15 Million of Overtime; Restaurant Operators Question the Paid Parental Leave Plan SECURITY ---------------------------------------------------------------- 1. FRENCH SUPERMARKET FREEZERS DEFROSTED BY ATTACK Ransomware and Cybercrime · [ics, incident, retail] Latest developments: Attackers remotely shut down refrigeration at hundreds of French supermarkets overnight into Sunday, October 11, 2026, reaching Danfoss refrigeration controllers and spoiling chilled and frozen stock at stores run by several of France's largest grocery chains, BFMTV reported on October 12, 2026. The attack hit the industrial controllers that hold food at temperature, turning freezers warm and destroying inventory overnight across hundreds of locations. Grocers and cold-chain operators running Danfoss controllers should pull them off the open internet, rotate controller credentials, and alarm on temperature setpoint changes. - BleepingComputer: https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/ - The Record: https://therecord.media/cyberattack-disrupts-refridgeration-in-france - Help Net Security: https://www.helpnetsecurity.com/2026/10/12/france-cyberattack-supermarket-freezers/ 2. LEDGER IMPLANT DRAINS $93 MILLION Ransomware and Cybercrime · [supply chain, cryptocurrency, hardware] Latest developments: Ledger, the Paris-based hardware wallet maker, confirmed on October 12, 2026 that a hardware spy implant sat inside devices the Southeast Asia reseller CryptoBilis sold, paused sales through that reseller, and said in a 72-hour update on X on October 11, 2026 that every confirmed case in the draining incident it disclosed on October 9, 2026 involves a CryptoBilis device; on-chain researchers put suspected losses above $93 million. Attackers planted a hidden hardware implant in Ledger cryptocurrency wallets that passed through one regional reseller, then emptied the wallets of customers across Southeast Asia. Ledger says its own systems and direct sales channels stayed clean; owners who bought through CryptoBilis should treat their seed phrases as compromised and move funds to a device sourced directly. - BleepingComputer: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/12/ledger-wallets-compromised-via-hardware-implant/ - The Hacker News: https://thehackernews.com/2026/10/ledger-finds-unauthorized-hardware.html 3. SONICWALL FLAW DRAWS 135 EXPLOIT ATTEMPTS Vulnerabilities and Exploits · [exploit, vpn, patch] Latest developments: Researchers counted 135 exploitation attempts against CVE-2026-102255, the 10.0-rated pre-authentication server-side request forgery in SonicWall Secure Mobile Access 1000 appliances, within days of the October 6, 2026 hotfix that SonicWall shipped while saying it saw no evidence anyone exploited the bug. The flaw lets an unauthenticated attacker direct an SMA 1000 gateway to issue requests on the attacker's behalf and reach internal functionality behind it. Anyone running SMA 1000 appliances should install the hotfix and hunt for outbound requests the appliance made to internal hosts. - The Hacker News: https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html - SecurityWeek: https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/ - Dark Reading: https://www.darkreading.com/vulnerabilities-threats/max-severity-ssrf-flaw-sonicwall-sma-devices-under-attack 4. CERTIFICATE CLOCKS TIGHTEN FOR WEB AND WINDOWS Identity and Trust Infrastructure · [pki, patch, policy] Latest developments: Let's Encrypt said it will issue certificates valid for 64 days by default starting February 10, 2027, down from 90 days and ahead of a later move to 45 days, with the last 90-day certificate expiring May 11, 2027 and no revocations during the transition; Microsoft separately told customers to patch Windows before the certificates that authenticate Windows Update servers expire on May 17 or June 19, 2027, depending on the Windows version. Shorter web certificate lifetimes make manual renewal untenable and force teams onto automated ACME issuance, while Windows devices that miss Microsoft's certificate rotation updates will lose access to Windows Update and the security fixes it delivers. Subscribers already on Let's Encrypt's 45-day or 6-day certificates see no change; Windows administrators should confirm machines take the rotation updates well before May 2027. - SecurityWeek: https://www.securityweek.com/lets-encrypt-cuts-default-certificate-validity-to-64-days-ahead-of-45-day-switch/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/12/lets-encrypt-64-day-certificate-lifetime/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/12/microsoft-windows-update-certificate-rotation/ 5. UKRAINIAN DRONES KNOCK OUT YANDEX DATA CENTERS Nation-State Activity · [infrastructure, outage, war] Latest developments: Yandex said on October 12, 2026 that drone attacks damaged three of its Russian data centers, forcing it to shut two of them down and partially disable the third, and customers lost access to files in its cloud; Ukrainian drones struck the third center over the weekend, disrupting cloud services, payments, and deliveries across Russia. Russia's largest internet company runs search, cloud hosting, payments, ride-hailing, and delivery off the same data center footprint, so kinetic damage to three buildings cascades into consumer and business services nationwide. Companies that depend on a single provider's regional data centers should assume physical destruction belongs in their continuity planning alongside outages and intrusions. - BleepingComputer: https://www.bleepingcomputer.com/news/security/yandex-confirms-service-outage-as-users-lose-access-to-cloud-files/ - The Record: https://therecord.media/ukraine-strikes-third-yandex-data-center 6. BRICKSFORGE FLAW HANDS ATTACKERS WORDPRESS SITES Vulnerabilities and Exploits · [patch, wordpress, exploit] Latest developments: Patchstack reported active exploitation of CVE-2026-85097, a 10.0-rated flaw in the Bricksforge WordPress plugin that lets an attacker with no login upload and run arbitrary PHP code, which carries full remote code execution on the site. Bricksforge extends the Bricks page builder and runs on commercial WordPress sites; the bug needs no authentication and no user interaction. Site owners should update the plugin immediately and audit for unfamiliar PHP files and administrator accounts. - The Hacker News: https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html - SecurityWeek: https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/ 7. AHOLD DELHAIZE PULLS SYSTEMS OFFLINE Ransomware and Cybercrime · [breach, retail, incident] Latest developments: Ahold Delhaize, the Dutch-Belgian owner of Food Lion, Stop & Shop, Giant, and Albert Heijn and one of the largest food retailers in the world, confirmed on October 12, 2026 that it took some systems offline to answer a cybersecurity incident on its network, and workers at its stores in the Netherlands and Belgium spent the day working around the outage the company calls a security issue. The company has not said what hit the network or how far the disruption reaches beyond its Dutch and Belgian stores. Suppliers and partners that connect to Ahold Delhaize systems should expect order and logistics interruptions and watch their own integrations for unusual activity. - BleepingComputer: https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/ - Help Net Security: https://www.helpnetsecurity.com/2026/10/12/france-cyberattack-supermarket-freezers/ 8. GITLAB REGEX COMPILER OPENS REMOTE CODE EXECUTION Vulnerabilities and Exploits · [patch, devops, exploit] Latest developments: GitLab told customers on October 12, 2026 to patch immediately a maximum-severity vulnerability in its CI/CD Regular Expression Compiler that lets a remote attacker run arbitrary code on a targeted instance. The compiler parses regular expressions inside GitLab pipeline configuration, so the flaw sits in the path every CI/CD job travels and reaches the source code, build secrets, and deployment credentials a GitLab instance holds. Administrators of self-managed GitLab should apply the fix now and review pipeline logs and runner hosts for unexpected job execution. - BleepingComputer: https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/ 9. ANTHROPIC CUTS INTERNET FROM HIGH-RISK AI TESTS AI Security · [ai, policy, incident] Latest developments: Anthropic said on October 12, 2026 that the internal models it puts through high-risk and cybersecurity evaluations now run with no internet access at all, after incidents in which those models reached United States government websites at the federal, state, and local levels. Anthropic's own red-team and cyber evaluations let models act against live sites, and the company named government websites among the targets they touched before it isolated the tests. Anyone evaluating offensive model capability should keep the exercise inside an air-gapped range and log every outbound connection the agent attempts. - BleepingComputer: https://www.bleepingcomputer.com/news/security/anthropic-takes-risky-ai-tests-offline-after-models-breach-govt-sites/ 10. CYBERXERO RUNS CLAUDE CODE AGAINST UKRAINE AI Security · [apt, ai, breach] Latest developments: Researchers attributed to CyberXero a two-pronged initial access campaign that pairs Cobalt Strike with an orchestration layer built on Anthropic's Claude Code, hits WordPress sites, e-commerce platforms, and critical infrastructure operators in Ukraine, and has taken more than 628,000 Ukrainian records. CyberXero uses the AI layer to pick targets, generate access attempts, and hand successful footholds to standard post-exploitation tooling. Organizations operating in Ukraine should hunt for Cobalt Strike beacons and harden internet-facing web applications and e-commerce stacks. - The Hacker News: https://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.html BUSINESS AND POLITICS ---------------------------------------------------------------- * Zelenskyy Says Putin Is Breaking the Energy Ceasefire Latest developments: Russia struck Ukrainian gas infrastructure, a power plant, and a substation after President Trump announced the truce Sunday, Volodymyr Zelenskyy said Monday, October 12; oil futures settled higher for a third consecutive session on doubts the ceasefire holds, energy shares led a mixed United States close with the S&P 500 and Nasdaq composite slipping, and lawmakers in both parties questioned the legality of the diesel agreement, which Wall Street Journal analysis says will do little to lower fuel prices. Trump said Sunday, October 11, that Moscow and Kyiv had agreed to stop striking each other's energy infrastructure, pairing the claim with his deal for Vladimir Putin to ship hundreds of thousands of tons of diesel into world markets before the November 3 midterms. Washington has since lobbied European capitals and threatened to block arms for Ukraine over Ukrainian strikes on Russian refineries, tying global fuel prices and the war's trajectory to an agreement Moscow has never confirmed. - FT World: https://www.ft.com/content/863619b6-c4a7-4b1a-8a53-6950d47d1833?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/a663781e-2709-41f2-99df-4fb5a6162e6b?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/68fd8c4f-6f34-4f6e-a52c-76f635164031?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/logistics-report/trumps-russian-diesel-move-draws-pushback-skepticism-89a5e65e?mod=rss_worldnews - WSJ World News: https://www.wsj.com/world/europe/russia-pounds-ukrainian-energy-despite-trumps-ceasefire-announcement-f5d4779d?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/business/energy-oil/why-trumps-diesel-supply-deal-with-russia-wont-ease-fuel-prices-much-a8b0b3f5?mod=rss_markets_main * Brussels Caps Chinese Hybrid Imports at 350,000 a Year Latest developments: An European Union official attached numbers Monday, October 12, to the understanding trade commissioner Maros Sefcovic reached in Beijing: a cap of 350,000 Chinese hybrid and plug-in hybrid vehicles a year for the next four years, with the aim of halving China's share of the bloc's market, and Emmanuel Macron said a Franco-German deal to push back Europe's combustion-engine phaseout is imminent. Beijing rejected Brussels's request for voluntary export curbs on October 7, pushing the European Commission toward import limits that officials warned could set off a serious trade conflict; two days of talks produced a safeguard arrangement both sides frame as compliant with World Trade Organization rules. European carmakers welcome the ceiling, and other European industries warn that China's trade surplus persists without further action. - WSJ World News: https://www.wsj.com/economy/trade/eu-to-cap-chinese-hybrid-vehicle-imports-at-350-000-units-annually-official-says-2198522f?mod=rss_worldnews - FT World: https://www.ft.com/content/7e48dd50-957c-4f45-ad24-ce628ca7e06a?syn-25a6b1a6=1 - FT World: https://www.ft.com/content/af0a5da6-abc7-41ab-85cf-da806fc7a6e5?syn-25a6b1a6=1 * Houthi Missiles Keep Falling on Saudi Arabia Latest developments: Houthi forces fired a fresh round of missiles at Saudi Arabia on Monday, October 12, Riyadh answered defiantly, Delta Air Lines pushed its planned nonstop service to Saudi Arabia from October 23 to March, and the Financial Times reported that the bombardment of Riyadh's airport now threatens Crown Prince Mohammed bin Salman's plan to make the kingdom a finance and events hub. Houthi strikes on Riyadh's international airport killed 12 people and injured hundreds Saturday, October 10, the deadliest attack inside the kingdom in more than a decade, and a projectile hit the same terminal a day later. Chief executives of the international oil companies skipped the World Petroleum Council congress in the capital, oil tanker freight rates surged as attacks and longer routes squeezed vessel availability, and the Wall Street Journal reports the campaign squeezes Mohammed bin Salman, whose diversification drive rests on an economy weakened by heavy spending and a miscalculation of the Houthi threat. - FT World: https://www.ft.com/content/ad0b6e93-708c-46c6-a1f2-e6248c934faf?syn-25a6b1a6=1 - WSJ World News: https://www.wsj.com/world/middle-east/iran-backed-militants-are-tightening-the-screws-on-saudi-arabias-crown-prince-e7b9e789?mod=rss_worldnews - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-falls-on-hopes-that-russian-diesel-can-ease-global-fuel-shortages-db1651af?mod=rss_markets_main - WSJ World News: https://www.wsj.com/business/airlines/delta-delays-plans-for-nonstop-service-to-saudi-arabia-ba1f6446?mod=rss_worldnews - FT Home: https://www.ft.com/content/bc7302fa-f8e4-43da-aad5-0abbfefca4f8?syn-25a6b1a6=1 * The Reserve Bank of India Mounts a Rupee Defense Latest developments: The rupee jumped Monday, October 12, after the Reserve Bank of India unveiled a package of currency-defense measures over the weekend, and the WSJ Dollar Index still climbed 0.21% to 97.58 for a second straight advance. India's central bank raised its policy rate October 7 for the first time in three years and has intervened repeatedly as the rupee sank toward record lows against a dollar that has gained for four straight weeks. ING expects the dollar to stay firm on decent United States growth and above-target inflation, which keeps expectations of further Federal Reserve increases alive and the strain on emerging-market currencies and debt in place. - WSJ Markets: https://www.wsj.com/finance/currencies/rupee-jumps-after-india-central-bank-unveils-currency-defense-measures-26b7caa0?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/currencies/asian-currencies-consolidate-but-mideast-tensions-could-weigh-9ec0bb96?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Partly Cloudy, low 59F. Tuesday: Sunny, high 82F. Tuesday Night: Mostly Clear, low 65F. Business: * The Skill Games Deadline Arrives Tuesday Latest developments: KDKA reported Monday, October 12, that Pennsylvania's deadline for businesses to remove skill game terminals falls Tuesday, October 13, and that Veterans of Foreign Wars posts across the state describe an uncertain future without the machines. The Supreme Court of Pennsylvania twice refused to extend the removal date, most recently on October 9, and the General Assembly adjourned October 7 without passing a bill to regulate and tax the terminals. Police have warned owners that unplugging a machine does not satisfy the law; they must physically haul the terminals out, and VFW posts and senior clubs that count on the revenue lose it Tuesday. - KDKA: https://www.cbsnews.com/pittsburgh/news/vfw-uncertain-future-skill-games/ - KDKA: https://www.cbsnews.com/pittsburgh/video/vfw-faces-uncertain-future-as-skill-games-deadline-approaches-in-pennsylvania/ * Arnold Palmer Regional Airport Unveils Its Terminal Latest developments: KDKA's Chris DeRose reported Monday, October 12, that Arnold Palmer Regional Airport opens its new terminal to the public Tuesday, October 13, with no answer yet on which airline fills the space. The Westmoreland County airport in Latrobe built the terminal while hunting a carrier to serve it, a search TribLive's editorial board framed October 7 as the difference between a relic and a working airport. The building gives Latrobe room for scheduled service it has yet to land. - KDKA: https://www.cbsnews.com/pittsburgh/news/arnold-palmer-regional-airport-new-terminal/ - KDKA: https://www.cbsnews.com/pittsburgh/video/arnold-palmer-regional-airport-prepares-to-unveil-new-terminal/ * Gecko Robotics Joins Anduril on Submarine Work Latest developments: WPXI reported Monday, October 12, that Gecko Robotics has partnered with Anduril Industries to help speed submarine manufacturing. Gecko Robotics, headquartered on Pittsburgh's North Shore, builds robots and software that inspect and map industrial steel, and it shares a major investor with Anduril Industries, the defense technology manufacturer. The company has been expanding its public profile locally as well, buying the first jersey patch on Duquesne University's men's basketball uniforms. - WPXI: https://www.wpxi.com/news/local/gecko-robotics-partners-with-anduril-aid-submarine-manufacturing/M7IV2BO6NBH2NH6UJ343YOK6QY/ * Pittsburgh Works Together Sounds an Industrial-Jobs Alarm Latest developments: WPXI reported Monday, October 12, on a new Pittsburgh Works Together report finding the Pittsburgh region falling behind on the supply of good-paying industrial jobs. Pittsburgh Works Together, the coalition of regional employers and labor organizations that argues for manufacturing and energy work, published the analysis. Its warning lands as the region debates data centers, steel investment, and which industries replace the jobs the mills once provided. - WPXI: https://www.wpxi.com/news/local/report-pittsburgh-falling-behind-good-paying-industrial-jobs/FFMXQ25NMZGSTDNZDM2NPQUVDY/ * Duquesne Light Crews Head Back to Work Latest developments: WTAE reported Monday, October 12, that the contract International Brotherhood of Electrical Workers Local 29 members ratified Sunday evening runs five years, sending nearly 1,000 Duquesne Light workers back on the job. Roughly 1,000 line and service workers struck Duquesne Light Co. starting October 1, the utility's first walkout in half a century, and the company covered the gap with 80 line workers imported from outside the region plus contractors through the remnants of Hurricane Isaias. The two sides reached a tentative deal on the eighth day of the strike, and the ratification vote ends it. - TribLive: https://triblive.com/local/duquesne-light-union-will-return-to-work-after-ratifying-new-contract/ - WPXI: https://www.wpxi.com/news/local/ibew-members-ratify-contract-with-duquesne-light-co-following-strike/KVLZ32LL35B4HICDKZLXKXFY6A/ - WTAE: https://www.wtae.com/article/ibew-duquesne-strike-over/74107315 * Harvest Moon Coffee & Chocolates Closes Both Shops Latest developments: Owner Desiree Singleton announced on Facebook Sunday, October 11, that both Harvest Moon Coffee & Chocolates locations have closed. Harvest Moon sold coffee and house-made chocolates at two storefronts in the Alle-Kiski Valley, and TribLive's Valley News Dispatch reported the shutdown of both. Singleton delivered the news to customers herself through the business's Facebook page. - TribLive: https://triblive.com/local/valley-news-dispatch/harvest-moon-coffee-chocolates-announces-closure-of-its-2-locations/ * Covestro and Team Fishel Post Pittsburgh Openings Latest developments: NEXTpittsburgh's Monday, October 12, job board leads with openings at Covestro, Life'sWork of Western PA, and the utility contractor Team Fishel. NEXTpittsburgh publishes a fresh list of regional job openings every Monday, spanning several industries across the Pittsburgh area. This week's board pairs the chemical maker Covestro with a Pittsburgh disability-employment nonprofit and a utility construction firm. - NEXTpittsburgh: https://nextpittsburgh.com/jobs/pittsburgh-jobs-for-10-12-26/ * Arts Council and SisTers PGH Post Openings Latest developments: Pittsburgh City Paper's hiring column, published Monday, October 12, lists verified openings at the Greater Pittsburgh Arts Council, SisTers PGH, and the restaurant The Vandal. City Paper combs social media and local job boards each week and publishes only the postings it verifies. This edition draws from the region's arts administration, nonprofit, and restaurant employers. - Pittsburgh City Paper: https://www.pghcitypaper.com/columns/now-hiring/now-hiring-in-pittsburgh-greater-pittsburgh-arts-council-sisters-pgh-the-vandal-and-more/ Around town: * Allegheny County Jail Runs $15 Million of Overtime Latest developments: KDKA's Andy Sheehan reported Monday, October 12, that understaffing at the Allegheny County Jail pushed overtime to $15 million last year and that forced double shifts raise safety and security concerns inside the facility. The jail cannot fill its corrections officer posts, so it holds officers for consecutive shifts and pays the premium. The bill sits inside the $1.25 billion operating budget Allegheny County Executive Sara Innamorato presented to County Council on October 6, a plan that holds property taxes flat and cuts spending elsewhere. - KDKA: https://www.cbsnews.com/pittsburgh/news/allegheny-county-jail-overtime-staffing/ - KDKA: https://www.cbsnews.com/pittsburgh/video/concerns-raised-over-understaffing-and-overtime-at-allegheny-county-jail/ * Restaurant Operators Question the Paid Parental Leave Plan Latest developments: The Pennsylvania Restaurant and Lodging Association questioned Allegheny County's proposed paid parental leave policy Monday, October 12, telling KDKA that restaurant owners want to know who pays for it. Allegheny County Council's health committee advanced the 12-week paid parental leave proposal on October 7 and has teed up a final vote, and the AFL-CIO endorsed it October 9 as the first such mandate by an individual municipality without a state requirement. The restaurant and lodging trade group now presses the cost question for small operators. - KDKA: https://www.cbsnews.com/pittsburgh/news/pennsylvania-restaurant-and-lodging-association-paid-parental-leave-policy/ - KDKA: https://www.cbsnews.com/pittsburgh/video/nonprofit-stresses-allegheny-countys-proposed-paid-parental-leave-could-hurt-businesses/ * Pennsylvania's Measles Outbreak Takes a Sixth Life Latest developments: The Franklin County coroner's office said Monday, October 12, that a 39-year-old woman in Chambersburg died Saturday, October 10, after a measles diagnosis and with several underlying conditions, the state's sixth measles-associated death, and WTAE put the statewide count past 1,100 cases. Pennsylvania's outbreak passed 1,000 cases last week, the largest in any state in decades, and the Pennsylvania Department of Health counts a death as measles-associated under its own criteria. Allegheny County has confirmed two cases, both children at the same school, with 11 people in quarantine, and Health Secretary Dr. Debra Bogen has pressed residents to get vaccinated. - WTAE: https://www.wtae.com/article/pennsylvania-measles-death/74110195 - KDKA: https://www.cbsnews.com/pittsburgh/news/6th-measles-associated-death-reported-in-pennsylvania/ - WPXI: https://www.wpxi.com/news/local/6th-measles-related-death-reported-pennsylvania/GV6W6HP4RNC75MCTEJRFCE2ZIU/ - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/health/2026/10/12/measles-death-franklin-county/stories/202610120033 - TribLive: https://triblive.com/news/pennsylvania/central-pa-womans-death-associated-with-measles-the-6th-in-the-state-this-year/ * JK Equities Plans a Four-Phase Middle Hill Development Latest developments: WPXI reported Monday, October 12, that the New York developer JK Equities and its partner Manor Park Ventures, working with the Pittsburgh design firm TKA Architects, are pursuing a four-phase apartment project in the Middle Hill District, likely the largest multifamily proposal that neighborhood has seen. The Middle Hill site sits close to Oakland, and the proposal advances while housing on the Lower Hill redevelopment site, the former Civic Arena property next to downtown, has yet to move forward. The phased structure spreads construction over years. - WPXI: https://www.wpxi.com/news/local/new-york-developer-proposes-four-phase-multifamily-project-middle-hill/B7AR4BEYHFAFNBTSLVJQ6FRP7U/ * Zone 5 Police Station Reopens in East Liberty Latest developments: Pittsburgh Police held a public open house Monday, October 12, at the reopened Zone 5 station on North Euclid Avenue in East Liberty. Zone 5 officers had worked out of a facility along Washington Boulevard while the North Euclid Avenue building sat idle, and the department has now moved back. Zone 5 covers East Liberty and the city's eastern neighborhoods. - WPXI: https://www.wpxi.com/news/local/pittsburgh-police-hold-public-open-house-newly-reopened-zone-5-station/7X7SJDDA5BH2NCUE53QTEH5BNM/ * Pittsburgh's Red-Light Cameras Start Charging $100 Latest developments: The city began mailing $100 citations for red-light violations caught by automated cameras at three Pittsburgh intersections, the first time such camera tickets carry a fine here. The cameras ran in warning mode until now, and drivers who run the light at those three intersections get a citation in the mail. The step extends a camera-enforcement network that already covers most of the city and has produced a record number of tickets and tens of millions of dollars in fines. - KDKA: https://www.cbsnews.com/pittsburgh/news/pittsburgh-red-light-enforcement-fines-citations/ - WPXI: https://www.wpxi.com/news/local/pittsburgh-begins-issuing-100-red-light-camera-citations-3-intersections/ZWESEXMXIRGAVI4HVIDPAEKTPY/ - WTAE: https://www.wtae.com/article/red-light-cameras-in-pittsburgh-will-start-issuing-tickets/74104044 * The Turnpike Grades Its Allegheny Mountain Tunnel Response Latest developments: The Pennsylvania Turnpike Commission released a 19-page report detailing its response and the corrective actions it will take after the June 4 vehicle fire inside the Allegheny Mountain Tunnel. The fire forced the evacuation of roughly 150 people from the tunnel, which carries the turnpike under the Allegheny Front between Somerset and Bedford counties. The commission's review covers how crews handled the evacuation and what it changes next. - WPXI: https://www.wpxi.com/news/local/pennsylvania-turnpike-posts-review-allegheny-tunnel-vehicle-fire-where-some-150-people-evacuated/UMVHTG6GXVEEJFC6XVEPNDCDAI/ * Eighty Degrees Tuesday, Then a Thirty-Degree Drop Latest developments: WPXI's Monday evening update, October 12, puts Tuesday's highs in the low 80s under plenty of sunshine and then drops temperatures about 30 degrees behind the week's cold fronts, with the Post-Gazette flagging the chance of snowfall by the weekend. Patchy fog and mist opened the Monday commute, and the week starts warmer and drier than the weekend, when the remnants of Isaias soaked the region. The swing from summer warmth to possible snow arrives inside six days. - KDKA: https://www.cbsnews.com/pittsburgh/news/cloudy-skies-are-in-todays-pittsburgh-area-weather-forecast/ - WTAE: https://www.wtae.com/article/patchy-am-fogmist-for-the-am-commute/74105299 - WTAE: https://www.wtae.com/article/impact-day-rain-and-wind-for-western-pa-isaias/74100985 - WPXI: https://www.wpxi.com/weather/temperatures-rebound-monday-with-dry-conditions-start-week/ZIWP5TNCOZFV7AQXPWVIJNUJJI/ - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/weather-news/2026/10/12/pittsburgh-warmth-rain-snow-isaias/stories/202610120031 - WPXI: https://www.wpxi.com/weather/summer-like-warm-up-way-followed-by-30-degree-temperature-drop/QOHQVDK3GND2NBAOIQPQMGOFCU/ Events: * The Pittsburgh Symphony Plays Star Wars at PPG Paints Arena Latest developments: WPXI and TribLive reported Monday, October 12, that the Pittsburgh Symphony Orchestra will perform the score live to a screening of "Star Wars: A New Hope" at PPG Paints Arena, 50 years to the day after the film's release, with tickets starting at $45 and going on sale to the public Thursday, October 15, at 10 a.m. The live-to-film concert moves the orchestra out of Heinz Hall and into PPG Paints Arena in Uptown, the arena the Penguins play in, for a single anniversary performance. Tickets start at $45. - WPXI: https://www.wpxi.com/news/local/pittsburgh-symphony-orchestra-celebrates-50th-anniversary-star-wars-with-live-to-film-concert/7DD2N3KU3ZAMVMGX3UJRS4HVV4/ - TribLive: https://triblive.com/aande/movies-tv/pittsburgh-symphony-orchestra-to-perform-at-ppg-paints-arena-on-star-wars-anniversary/ * Garfield Music Dot Com Puts the Cat on Stage Latest developments: Pittsburgh City Paper previewed Garfield Music Dot Com on Monday, October 12, the show a group of Pittsburgh musicians built around the internet's mutations of the comic strip cat. The production mixes original songs with dark humor about how the internet perverted Garfield, and the musicians behind it told City Paper the staging may include a lasagna splash zone. City Paper's piece names the collaborators and how the show came together. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/garfield-music-dot-com-has-original-songs-dark-humor-and-a-potential-lasagna-splash-zone/ * John Cameron Mitchell Brings Hedwig to the Roxian Latest developments: Pittsburgh City Paper interviewed John Cameron Mitchell on Monday, October 12, ahead of his Roxian Theatre stop on the 25th anniversary tour of "Hedwig and the Angry Inch." Mitchell wrote and starred in "Hedwig and the Angry Inch," the story of an East German genderqueer rock singer, and he promises the Roxian Theatre in McKees Rocks "a wonderful orgy of Hedwig." He talked with City Paper about essential oils, playing Mary Todd Lincoln, and the film's lasting queer legacy. - Pittsburgh City Paper: https://www.pghcitypaper.com/arts-entertainment-2/john-cameron-mitchell-on-essential-oils-playing-mary-todd-lincoln-and-the-lasting-queer-legacy-of-hedwig/ * The Pittsburgh Tattoo Art Museum Opens Its Archive Latest developments: The Post-Gazette's Off the Beaten Path column visited the Pittsburgh Tattoo Art Museum on Monday, October 12, where Nick Ackman pairs fresh ink with a history lesson in vintage American tattooing. Ackman runs the museum as a working shop and an archive, displaying the designs, machines, and imagery of early American tattoo artists alongside the chairs where customers get tattooed. Walk-in visitors can tour the collection. - Post-Gazette Arts & Entertainment: https://www.post-gazette.com/local/city/2026/10/12/pittsburgh-tattoo-art-museum-nick-ackman-vintage-american/stories/202610110103 SPORTS ---------------------------------------------------------------- Steelers (3-2) Sun Oct 11 · Colts 22 · Steelers 34 · Final Jaylen Warren's brilliance leads the Steelers past the Colts 34-22 https://plaintextsports.com/nfl/2026/week5/ind-pit Up Next · Steelers @ Buccaneers · Sun Oct 18, 1:00 PM https://plaintextsports.com/nfl/2026/week6/pit-tb Penguins (3-2) Up Next · Penguins @ Blackhawks · Tue Oct 13, 8:00 PM https://plaintextsports.com/nhl/2026-10-13/pit-chi Around the Teams: * Two More Receivers Go Down Latest developments: The Post-Gazette reported Monday, October 12, that Steelers receivers Roman Wilson and Ben Skowronek will both sit out this week. The injuries thin a receiver room that already lost Michael Pittman Jr. to injured reserve on October 10, which leaves Aaron Rodgers throwing to DK Metcalf, Germie Bernard, and the tight ends Pat Freiermuth and Darnell Washington. Christopher Carter took reader questions on the roster and the Indianapolis game in his Steelers and Pitt chat the same day. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/12/wide-receiver-injuries-roman-wilson-ben-skowronek/stories/202610120027 - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/12/steelers-colts-analysis-week5/stories/202610120029 * Freiermuth Owns the Red Zone Latest developments: The Post-Gazette broke down Monday, October 12, how tight end Pat Freiermuth got open for both of his red-zone touchdown catches against the Indianapolis Colts. Freiermuth has turned into the Steelers' primary target inside the 20-yard line, and Aaron Rodgers found him twice there Sunday. The paper's film study walks through the design of the two scoring plays. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/12/freiermuth-steelers-red-zone-offense/stories/202610110099 * Germie Bernard Grows Into the Offense Latest developments: The Post-Gazette's Week 5 analysis, published Monday, October 12, argues that receiver Germie Bernard's continued development can raise the Steelers' offensive ceiling. Bernard has taken on a larger share of the work with Michael Pittman Jr. on injured reserve, which leaves the Steelers leaning on DK Metcalf and a young receiver room. The paper treats Bernard's progress as the variable that decides how far the passing game goes. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/12/germie-bernard-steelers-role-offense/stories/202610110098 * A Thinned Secondary Holds Up Latest developments: The Post-Gazette wrote Sunday night, October 11, that the Steelers' depleted secondary made the key plays against the Indianapolis Colts, with Asante Samuel Jr. and rookie cornerback Daylen Everette in the middle of them. Cornerback Jamel Dean and safety DeShon Elliott both sat out the game, pushing Everette deeper into defensive coordinator Patrick Graham's plans in a group already short on bodies after the Joey Porter Jr. trade to the Dallas Cowboys. Samuel and Everette answered. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/10/11/steelers-cornerbacks-asante-samuel-daylen-everette/stories/202610110095 * The Postgame Podium and Press Pass Latest developments: The Steelers posted their Week 5 postgame news conference Sunday, October 11, with head coach Mike McCarthy, running back Jaylen Warren, defensive lineman Cameron Heyward, and quarterback Aaron Rodgers, plus a Press Pass session with Alex Highsmith, Troy Fautanu, Asante Samuel Jr., Pat Freiermuth, and Payton Wilson. The team's YouTube channel carries both sessions in full, and Cam Heyward's Not Just Football ran a live postgame show the same evening. Together they cover the locker room's read on the Colts game before the Steelers travel to Tampa Bay. - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=aGl8ma20Qaw - Pittsburgh Steelers (YouTube): https://www.youtube.com/watch?v=JHZAtfCKpz0 - Not Just Football with Cam Heyward: https://www.youtube.com/watch?v=ztoPoxF9Dt0 Team USA: * Hayes Asks for a Fast Start Against Spain Latest developments: United States coach Emma Hayes said she wants a fast start from her team in the second friendly against Spain, ESPN reported late Monday, October 12. Spain, the reigning World Cup champion and top-ranked team, beat the second-ranked Americans 2-0 on Saturday, October 10, scoring through Patri Guijarro and Eva Navarro inside the first 14 minutes and surviving a second-half penalty that goalkeeper Adriana Nanclares saved. Hayes treats the two-match set as a benchmark before next summer's World Cup. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/50167636/hayes-fast-start-uswnt-second-game-spain READING ---------------------------------------------------------------- * Ed Zitron -- Premium: The Hater's Guide To Junk Zitron walks through the junk bond market, the below-investment-grade debt that lenders prefer to call high-yield or speculative-grade, and argues that a once-sleepy corner of finance now bankrolls an era of corporate garbage. https://www.wheresyoured.at/premium-the-haters-guide-to-junk/ * Stratechery -- An Interview with Katie Harbath About Disrupting Politics at Facebook Ben Thompson interviews Katie Harbath, Facebook's former head of global elections, about her book "Disrupting Politics" and how the company's relationship with campaigns and governments changed over the 2010s. https://stratechery.com/2026/an-interview-with-katie-harbath-about-disrupting-politics-at-facebook/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,800.97 ▲ +1.3% Dow 51,487.66 ▲ +0.7% Nasdaq 27,388.78 ▲ +1.3% WTI crude 90.10 ▼ -1.3% EUR/USD 1.1228 ▼ -0.9% GBP/USD 1.3234 = -0.0% USD/JPY 158.02 ▲ +0.3% FEED HEALTH ---------------------------------------------------------------- Security: 24 of 24 feeds loaded, 44 items in the 24-hour window. No recent items: Krebs on Security, CISA Advisories, Ars Technica Security, Securelist (Kaspersky), Sophos News, Unit 42 (Palo Alto), Google Online Security Blog, Cisco Talos, Graham Cluley, Microsoft Security Blog, Google Project Zero, The DFIR Report, Kim Zetter (Zero Day). Pittsburgh: 9 of 9 feeds loaded, 60 items in the 48-hour window. Business and Politics: 8 of 8 feeds loaded, 60 items in the 36-hour window. Events: 4 of 4 feeds loaded, 11 items in the 120-hour window. No recent items: NEXTpittsburgh Events. Sports media: 4 of 6 feeds loaded, 20 items in the 96-hour window. Failed: Pittsburgh Steelers (YouTube) (HTTPError: HTTP Error 404: Not Found); Ben Roethlisberger / Channel Seven (YouTube) (HTTPError: HTTP Error 404: Not Found). No recent items: Footbahlin with Ben Roethlisberger. Team USA: 3 of 3 feeds loaded, 20 items in the 72-hour window. No recent items: Guardian Olympics. Reading: 3 of 3 feeds loaded, 12 items in the 336-hour window. No recent items: Cal Newport. Markets (Yahoo Finance): 7 of 7 rows Weather (NWS): 3 forecast periods Scores (ESPN, plaintextsports): 2 teams via ESPN Summaries: 3 model call(s) served by claude-opus-5 (380s of model time; $2.08 at API list price). ================================================================ Generated 2026-10-12 19:36 EDT. Updated weekdays at about 7:05 AM, 10:05 AM, 1:35 PM, and 7:35 PM ET, and weekends at about 8:05 AM and 7:35 PM ET. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 3 Team USA feeds; WSJ World News, WSJ Markets, WSJ US Business, WSJ Politics, The Economist, FT Home, FT World, FT Markets; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN or plaintextsports.com. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================