TechRadar News

• Apple unveils its Music Hall in Battersea Power Station, London
• Space for live music, but also a place for recording said music
• All performances can be recorded in Spatial Audio

If you love listing to acoustic sets, live recordings or unplugged sessions from your favorite artists, then Apple Music's new announcement might make it your go-to streaming service for this kind of recording.

London's Battersea Power Station, an iconic Art Deco power station once famous for its use in Pink Floyd album artwork (that's since been turned into a rather soulless shopping mall) now plays host to the Apple Music Hall. This, of course, levels up the location's artistic merits, joining the The Cinema in the Power Station, which this writer argues is the best movie theater he's ever been to.

Apple Music Hall is a 600-seater venue, with a 48-speaker surround sound system (that's 12.5 people per speaker, if the venue is at capacity). But its appeal isn't just for people who can hop on the London Underground's Northern Line and navigate the winding halls of the Power Station.

The space also houses a production facility, which can be used for live or post-performance mixing. That means performances at the Apple Music Hall can be recorded and mixed incredibly quickly, letting Apple Music listeners at home enjoy the set with Spatial Audio and video recordings too.

Apple has confirmed that its Music Hall performances will be live-streamed, so you can tune in easily. It didn't specify that this'll only be to Apple Music subscribers, but (given the heavy investment in such a a venue) it'd be odd for the company to let just anyone tune in and listen.

A place to listen to music

(Image credit: Apple)

Music streaming services are starting to realise that intentional listening is more meaningful than algorithmically-picked background noise which you tune out of. Only a few months ago, Spotify opened a Listening Lounge in London, which is a room with a high-end stereo set-up so you can enjoy quality music in an acoustically-tuned environment.

Listening Lounge is a bit different to the Apple Music Hall, because it's not for live music and you can't simply buy tickets to go, but they share a common theme: it's nice to sit down and spend all of your mental capabilities enjoying music. These will be live streams that you don't put on in the background; you can sit down and enjoy the performances as they happen.

The addition of live artists gives the Apple Music Hall a little extra juice — and if the brand manages to book some good artists, the live streams could be outstanding. I don't mean popular artists, but those with a flair for live performance that'll make the recordings transcend their studio equivalents.

Thankfully, London's a city full of artists, with every street hosting theater bars, record store gigs and open mic nights. Apple doesn't need to open the purse strings and look for the big names, or rely on people with loads of TikTok followers, to get a talented line-up.

No artists have been announced for the venue yet, but after its full opening on September 28, perhaps we'll hear some names. And if, like me, you're a local who might consider going to a gig there, signing up for a newsletter on the Apple Music Hall website will keep you in the know.

In March, Google moved its own post-quantum cryptography (PQC) migration deadline forward to 2029, a full six years ahead of NIST's guidance, and two ahead of the NSA's requirement for national security systems. It was a terrific bit of security signaling, but now it is backed up by a new product-by-product roadmap organized around three risk domains, with milestones attached to named services.

For anyone whose job touches digital trust, the most significant of those three domains is Google’s attempt at enhancing foundational capabilities for cryptographic agility: building flexible systems that can adopt new cryptographic standards with minimal engineering effort as those standards evolve.

The message is that organizations should prepare for a future in which standards, certificate formats, and operational requirements continue to evolve, and evolve regularly, requiring cryptographic agility.

Why quantum risk is already a digital trust problem

Adversaries are already harvesting and storing encrypted data today on the assumption that a future quantum computer will decrypt it (harvest now, decrypt later). Anything with a long confidentiality tail, from health records to national archives to intellectual property, is already exposed to a machine that does not yet exist.

Quantum-resistant algorithms, like ML-DSA, solve the cryptographic problem, but they introduce much larger keys and signatures. Deployed through today's public key infrastructure (PKI), they would inflate or possibly break the systems behind secure connections. Legacy systems and high-latency networks would feel it most.

What is a Merkle Tree Certificate (MTC)?

At the time this article is being written, the most significant development in Google's roadmap may be the easiest to miss. Under Domain 2, Integrity and non-repudiation, a single line reads:

“Google Trust Services, Merkle Tree Certificates, 2028”.

Merkle Tree Certificates (MTCs) are a new kind of website domain certificate designed to keep secure connections fast in the coming era of quantum computers. Today a website proves its identity by presenting a certificate that carries several digital signatures, and the quantum-resistant versions of those signatures are so bulky they would slow down every secure connection on the internet.

MTCs solves this by having the certificate authority (CA) record everything it issues in a public, tamper-evident log, organized as a Merkle tree. Rather than carrying heavy signatures, the website presents a short trail of digital fingerprints showing its certificate sits in that log, and the browser checks the trail against a summary of the log it already received through its normal software updates.

Of note, MTCs do not abandon X.509. They are X.509 certificates, carrying a proof where a signature used to sit, issued alongside conventional directly-signed certificates rather than replacing them.

The result is a certificate that stays small, stands up to quantum computers, and is publicly verifiable by default. For the regular everyday person: we get to keep using the internet fast and uninterrupted with quantum resistance underneath.

MTCs make transparency structural

In today's web PKI, transparency is bolted onto issuance as a separate step. The CA signs a certificate, submits it to independent CT logs, and collects SCTs, each of which is a log's signed promise to publish the certificate within a fixed window. A misbehaving or compromised log can vouch for a certificate that never becomes visible to the monitors watching for misissuance.

MTCs change that relationship. The CA certifies by logging, and a certificate is literally a proof that its entry appears in the CA's public issuance log, verified by the browser on every connection. If it is not in the log, it is not a certificate. Under MTC, transparency does not merely survive the post-quantum transition. It comes out stronger.

Who is developing Merkle Tree Certificates

When the vendor with the dominant browser share proposes a new certificate format and a new root store to hold it, it is reasonable to ask whether the rest of the ecosystem is being consulted or simply informed.

However, MTCs are not Google's alone. At the time of writing, the IETF draft's authors span Google, Apple, Cloudflare, and Geomys. Cloudflare has been involved from the outset, CAs including Sectigo have contributed to the underlying research, and Let's Encrypt publicly committed to MTCs in June 2026. The result will be an open standard any CA can implement, controlled by no single vendor.

The organizations that will shape post-quantum web trust are the ones in the working group now. Root programs, CAs, and large implementers who stay outside it will inherit decisions rather than influence them. That choice is available to everyone, and the window is open today.

How organizations should prepare for MTCs

Google’s 2028 date for MTCs deserves a roadmap's usual caveats. Google ties it to standardization work still in progress at the IETF, and dates like these move. The direction, however, resembles something that seems settled.

Chrome's planned Quantum-resistant Root Store will support quantum-resistant certificates only in the MTC format, not as post-quantum signatures bolted into traditional X.509. Compact classical signatures and X.509 served the web extraordinarily well for three decades, but with the dawn of quantum computing, we are due for a redesign.

For everyone else, the practical implication of Google's roadmap is not that you need MTCs. It is that you need to be capable of adopting them (or whatever else emerges) without a multi-year engineering program. Which is precisely the cryptographic agility Google put at the foundation of its own plan.

In concrete terms, organizations should focus on:

• A complete inventory of certificates and cryptographic assets, because you cannot migrate what you cannot see
• Automated certificate lifecycle management, because shorter certificate lifetimes will make manual processes untenable well before quantum computers arrive
• A written post-quantum roadmap from your CA, which every organization should be asking for

The full scope of what MTCs can do is still coming into focus, and they may not be the only answer the industry ultimately adopts. What is already clear is that organizations that invest in cryptographic agility, certificate lifecycle management, and complete visibility today will be best positioned to adapt as post-quantum standards mature.

The future of digital trust will belong to organizations that can evolve as quickly as the cryptography they depend on.

We've featured the best endpoint protection software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Daredevil: Born Again will end with its third season
• Marvel has wielded the ax on its longest-running live-action Disney+ show
• Its showrunner has also left with the final season deep into post production

Daredevil: Born Again will end with its third season after Marvel called time on the Charlie Cox and Vincent D'Onofrio-led TV show.

Rumors first emerged in the US morning yesterday (September 21) when X/Twitter user HablemonsdecineX claimed it had been canceled. Almost instantly, numerous industry insiders with spotty track records quickly jumped on the bandwagon to insist they'd heard similar things.

TechRadar approached Marvel and Disney for comment on its supposed axing, but didn't receive an immediate response. However, a few hours after Hablemonsdecine's original post, The Hollywood Reporter (THR) published its own piece indicating Daredevil: Born Again season 3 would be the show's last hurrah.

A Disney spokesperson has since told me that THR's article is accurate, so Born Again season 3, which will air on Disney+ sometime in March 2027, will be its final outing.

Why was Daredevil: Born Again canceled after three seasons?

I’ve now lived through two Daredevil Season 3 cancellations. You can’t hurt me anymoreSeptember 21, 2026

Outside of Marvel headquarters, nobody knows for sure — but there's one major reason why it's likely been consigned to the scrap heap.

Indeed, the show's second season suffered a significant drop in viewership compared to its debut outing on Disney+. Per audience measurement experts Luminate, Born Again season 2 accumulated 4.5 million views across its first five weeks in March. Compare that to the 8.4 million that season 1 accrued across the same time period in early 2025 on one of the world's best streaming services, and the Marvel Phase 6 program's audience share fell by a seemingly unrecoverable 47% in the space of 12 months.

I wrote about this last year but Charlie and Vincent only ever signed on for 3 seasons. It’s sad to see it end again but I’m very grateful we got 3 additional seasons. There’s always a possibility that they do come back for more. The ball is in Marvel’s court to make a new deal https://t.co/f83pEFHn6RSeptember 21, 2026

For all intents and purposes, Born Again season 2's dramatic drop in viewers didn't appear to spook Marvel executives. That's because its third — and now final — season was not only greenlit prior to its forebear's release, but also entered full production mere days before season 2 premiered on Disney+.

Furthermore, it seems that the decision to throw the Marvel Cinematic Universe (MCU) TV show in the trash was only just made. According to Deadline, its cast and crew were informed of its cancellation on the same day that said news broke. It's unclear if Marvel's top brass spent months deliberating over the show's future before culling it, or if it was more of a spur-of-the-moment decision.

One thing that might have fast-tracked its demise is the departure of showrunner Dario Scardapane.

Per THR, Scardapane, who was brought on to rescue Daredevil: Born Again following reports that Marvel wanted to rework the entire show in late 2023, is said to have parted ways with the comic giant. Scardapane's exit comes with the show's third season deep into its post-production phase, too, thereby leaving the Born Again team without its creative figurehead. There's no word on who, if anyone, will fill the void and get the series' final installment over the line.

Why Daredevil: Born Again's cancellation couldn't have come at a worse timeComment from r/marvelstudios

With Born Again's time coming to an end, Marvel now has a two-fold problem on its hands.

For one, season 3 was seemingly set to herald a new dawn for the street-level corner of the MCU. Indeed, with the likes of Luke Cage and Iron Fist set to join the eponymous vigilante, Wilson Fisk, and Jessica Jones in making the leap from the Netflix Marvel-Verse to the MCU, fans had hoped that more gritty and grounded MCU stories would branch off of Born Again's forthcoming season.

Admittedly, that could still happen. However, if Marvel no longer has confidence in its longest-running live-action series, what hope do we have of seeing a Jessica Jones TV revival or — whisper it quietly — a Heroes for Hire project?

Comment from r/MarvelStudiosSpoilers

The other major issue Marvel has to contend with is actively promoting Daredevil: Born Again season 3.

New York Comic-Con (NYCC) has been used to market and/or announce many of the comic titan's forthcoming Disney+ offerings. And, with NYCC 2026 due to take place between October 8 and 11, it's highly likely that Marvel will hold its usual panel to reveal more details about its 2027 TV line-up.

With Born Again season 3 confirmed to be the show's last entry, will Marvel show and/or tell us anything significant about it? Or will it shift its focus to its animated programs, such as X-Men 97 season 3 and Your Friendly Neighborhood Spider-Man season 2, and subsequently ignore the giant Daredevil-shaped elephant in the room? I guess we'll find out in a few weeks' time.

For now, catch up on everything else we know so far about Daredevil: Born Again season 3.

The Asus ROG Xbox Ally X20 feels like the PC gaming handheld of 2026. An enhanced version of the original Xbox-branded Ally X, this is shaping up to be one of the best-looking, ergonomically fantastic, and brilliantly performing handheld games consoles — and I went hands-on with it at Gamescom last month and liked it. A lot.

Coming to it as someone who hasn’t truly jumped in with both feet to PC gaming handhelds — basically none of them play nice with my hands due to being bulky and heavy — even a short time with the newest, flashiest version of Asus’ Xbox handhelds has left a permanent mark. One that might make me a PC handheld convert.

Much will be made of its price tag and purchase options — either $1,299 / £1,299 on its own, or $2,299.99 / £2,299.99 as a bundle with the new ROG XREAL R1 glasses — but after experiencing all its enhancements and features, and seeing how games run on it, it really could be a hit.

Looks and feels the part

(Image credit: Future)

Even though I know that this is a similar handheld to its predecessor, this thing is a joy to hold and use from a design perspective.

The overarching form is the same as the original Ally X, but the new translucent finish is a thing of beauty. It gives it an almost see-under-the-hood kind of vibe, and does a great job of making it stand out from its largely black-and-white competitors.

The gold accents are even more fantastic in real life and up close than in pictures, too, with the rings around each thumbstick and the shine of the four small buttons on the front, as well as the ‘ROG 20th Anniversary’ plate, and the stripe down the back really popping out of the otherwise black aesthetic.

(Image credit: Future)

That translucent back also has an incredibly grippy feel — you won’t need to add an external case here. As someone who always has to worry about that with gamepads and phones, this was extremely welcome; the rubberised, tactile wings of the controller really are conducive to maintaining a solid grip.

The inputs remain great too, with rounded face buttons, lovely triggers and bumpers that are all a joy to interact with, as well as excellent Tunnel Magnetoresistance (TMR) thumbsticks that offer a tangible upgrade over the analogue sticks of its predecessor. Though, I’d have liked to have seen some microswitch button tech in the X20 as a similar upgrade as well.

The star of the show, though, is, of course, that slightly bigger, but much better, screen. Offering an increase of 0.4 inches, but a huge leap up to OLED in panel tech, the new screen is vibrant and has colors that really pop and contrast. The boost to color gamut and HDR it offers makes for a genuine visual treat, and you know you’ll be covered in all situations with a brightness of up to 1400 nits to tap into.

But has the guts to match

(Image credit: Future)

The performance remains excellent as it was on the X20; games might never have looked better on a handheld screen.

The OLED panel is a joy to use, with fantastic colors and contrast, and the extra bump in the VRR to FreeSync Premium Pro is also welcome and a great feature. As a result, Forza Horizon 5 looks comfortably better, by a strong margin, compared to the handheld I am most used to, my PlayStation Portal, in sheer image quality and vibrancy, while getting comfortably north of 60 frames per second.

Using the TMR thumbsticks was great too: every move feels much more responsive, smooth, and instant compared to my Portal or a Steam Deck, and the extra durability the sticks offer over analog ones is superb too.

The Asus ROG Ally X20 is a fantastic bit of kit, and offers a compelling route into handheld PC gaming — perhaps one of the most complete offerings — even for me, as someone who has yet to jump in and can’t ever find the right device for the job.

So far it might be the PC gaming handheld I’ll consider buying most if I commit to going mobile. It’s not a transformation of the PC handheld experience that the ROG Xbox Ally X offers, but it’s an excellent refinement.

Twitter is not back, and we'll surely never see the likes of it again. In its place, we have X, and now, Tweet.app. You can be forgiven for the confusion. Many who still use X think their posts are tweets, but the still-pay-to-play platform from Bluebird, Inc. is now called Tweet.

It's a tale far too rich to contain in, say, a classic 140-character tweet, but I'll attempt to unpack it here, with insights from Bluebird, Inc. President and General Counsel Stephen Coates.

"I call it the 'Tweenix,' " Coates tells me, after I noted that Tweet.app's new blue logo looks a little like a phoenix. The imagery is apt. It signifies classic Twitter rising from the ashes, but also Bluebird's initial success and then failure to revive 'Twitter', before ultimately launching Tweet.app a few weeks ago.

Two years ago, Bluebird began the skunkworks project to revive Twitter, a brand Elon Musk effectively killed when he bought Twitter in 2022 and then in 2023 rebranded it to X, leaving vestiges of the old 'Twitter' scattered throughout the services, a fact that played a crucial role in Bluebird's ability to revive the brand.

Coates told me that after his company tried to file for a cancellation of the 'Tweet' and 'Twitter' trademarks in December of last year, X quickly filed a federal injunction. In the meantime, Bluebird launched Twitter.now. Months later, the judge ruled that because X still had "formerly Twitter" on the Apple App Store listing, it had brand rights. Coates called the ruling surprising, but Bluebird quickly pivoted and rebranded to Tweet.

The company, he told me, has no plans to go after the iconic Twitter bird logo, even though it's not well protected as a brand by X. Hence, the Tweenix.

Tweet, though, still seems like a risky name. Coates told me, "We're optimistic... It seems highly likely we’ll prevail on 'Tweet'."

Bluebird, Inc. President Stephen J. Coates (Image credit: Bluebird, Inc.)

That remains to be seen. When you sign up for Tweet, you must acknowledge that you know it's not affiliated with X. Search Tweet in the App Store, and the first result is still X. However, Tweet.app operating relatively under the radar might help it avoid further scrutiny from X and Elon Musk.

It has, by Coates' measure, just about 8,000 users. "[That's] pretty good, considering it's paid," Coates told me. The platform is so small that you could conceivably read all the tweets — I'm not sure that's a selling point, but Coates said there are "already community and inside jokes."

The company is using the income from those users to pay its small team of 10 employees and contractors as it builds the platform and tweaks the moderation filters, something Coates considers of critical importance.

Tweet.app, which does resemble old-school Twitter, is currently using AI to scale its moderation, including its still-in-beta Vera tool, which measures content for misinformation and applies a score. Eventually, Tweet.app members will have a dial connected to those ratings to automatically filter out their desired level of misinformation.

That's right, Tweet.app won't be in the business of rooting out all fake news. The creed will be, "Freedom of speech but not freedom of reach," said Coates.

FutureFutureFuture

Where Twitter, under former CEO Dick Costolo, whom Coates worked under, struggled with how to be a town square when there was one guy shouting obscenities in the corner, Tweet.com will let the guy shout, but also let users hide the obscenities they don't want to see in their feeds.

If it works, all of it will be powered by this AI. "I call it AI for good. We're not creating tools that will create AI outputs," said Coates, who has worked as counsel for Meta, Reddit, and TikTok.

None of this, of course, ensures success. Classic social media, including Twitter, was built on viral moments, like the Arab Spring, the killing of Osama Bin Laden, and selfies that broke the internet.

I call it AI for good. We're not creating tools that will create AI outputs

Stephen Coates

Coates acknowledged the power of these "inflection" moments, but reminded me that you can't predict them. Tweet.app is happy to grow slowly. Coates knows that paying members will be more deeply engaged than people who simply hop on the platform for free. "At some point will it be open to everyone? I certainly hope so," he told me.

I asked Coates why we need this or any other new social media. He told me that he sees room for reinvention, with space for social media that gives users control. "We're empowering them to control the algorithm," which is an idea that well-established social media platforms have only recently approached.

As the other upstart micro-blogging social media platform, Bluesky, moves away from the town square concept, Coates sees an opportunity to build an alternative to the only other big open platform: X.

"There's room for more. I think people will come for the nostalgia of Twitter and tweeting and stay for the control and experience. It’s a grand experiment."

• CISA added three Linux kernel flaws (CVE‑2025‑39682, CVE‑2026‑53266, CVE‑2025‑39964) to KEV catalog
• Red Hat confirmed active exploitation; agencies given rare three‑day patch deadline expiring Sept 21, 2026
• Bugs enable DoS, privilege escalation, or data corruption; patches available, limited mitigations for two flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux flaws to its Known Exploited Vulnerabilities (KEV) catalog, signaling abuse in the wild and giving government agencies a deadline to patch or stop using the flawed product entirely.

The three bugs in question are tracked as CVE-2025-39682 (severity score 9.8/10 - critical), CVE-2026-53266 (severity score 8.8/10 - high), and CVE-2025-39964 (severity score 7.8/10 - high). All three have already been patched in the Linux kernel. CVE-2025-39682 was fixed in stable releases 6.1.149, 6.6.103, 6.12.44 and 6.16.4, while CVE-2025-39964 was fixed in 5.10.245, 5.15.194, 6.1.154, 6.6.108, 6.12.49 and 6.16.9. CVE-2026-53266 has been fixed upstream and backported to supported stable/distribution kernel branches, including 5.10.259, 6.1.176 and 6.12.94.

The first issue is an improper check for unusual or exceptional conditions vulnerability in the TLS receive patch which could allow unauthenticated threat actors to launch memory disclosure or denial-of-service (DoS) attacks. The second one (CVE-2026-53266) is an out-of-bounds write vulnerability in the ebtables Source Network Address Translation (SNAT) Address Resolution Protocol (ARP) rewrite patch which allows local attackers to escalate privileges or mount DoS attacks.

The last one (CVE-2025-39964) is a race condition flaw that allows concurrent writes to the same AF_ALG socket, which allows local malicious actors to crash the system or corrupt cryptographic operation results, leading to data integrity issues and possible DoS states.

Attacks in the wild

Red Hat acknowledged that all three are being abused in real-life attacks. “This CVE is high risk and there are known public exploits leveraging this vulnerability. Address this vulnerability with high priority,” it said in all three advisories.

However, there are no details as to who is currently using these exploits, against whom, and to what cause. There are currently no separate reports of cyberattacks referencing any of the abovementioned vulnerabilities.

However, CISA still reacted. All three flaws were added on September 18, 2026, and all three have a small three-day deadline for patching that expires on September 21. Usually, CISA would grant Federal Civilian Executive Branch (FCEB) agencies a three-week deadline to patch up, with just exceptionally dangerous flaws getting a shorter window. That being said, these flaws are likely extremely dangerous.

In theory...

In a hypothetical scenario, a threat actor could target a Linux system using kernel TLS (kTLS) by sending a specially-crafted TLS record that triggers CVE-2025-39682 and causing either a crash, or even arbitrary code execution. Attackers that already have a low privilege foothold on the target endpoint could use CVE_2025-39964 to escalate privileges, while on systems using the affected bridge/netfilter configuration, CVE-2026-53266 could be used for privilege escalation, as well.

According to the Red Hat advisory, there is a chance that CVE-2025-39682 is remotely triggerable, but only when the system is using the affected kTLS receive path. The other two flaws are exclusively local vulnerabilities.

Besides fixes, two out of the three flaws also have possible mitigations. For the improper check one, users should prevent module tls from being loaded. For the out-of-bounds write one, users are advised to disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces. The final vulnerability, currently does not have a working mitigation, and the only way to stay secure is to apply the provided patches.

Linux kernel vulnerabilities are generally considered serious, but the severity still depends on the flaw and how the affected kernel is deployed. Earlier this year, security researchers disclosed four local privilege escalation flaws, called DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121), and DiagSpill (CVE-2026-74469).

Via The Hacker News

For Stuart Fails to Save the Universe viewers who have been waiting for things to feel exactly like The Big Bang Theory... your moment has arrived.

Sure, we've had a whole host of cameos from the original show (though three notable faces have yet to turn up), but zipping from unhinged universe to unhinged universe has been a world away from the science sitcom we know and love.

But what if I said that there's a key reason why this week's episode could be straight out of 2007? And when does Stuart Fails to Save the Universe episode 9 arrive on HBO Max?

What time can I watch Stuart Fails to Save the Universe episode 10 on HBO Max?

For US viewers, Stuart Fails to Save the Universe episode 10 will drop on Thursday, September 24 at 6pm PT/9pm ET.

Internationally, you're looking out for these times:

• US – Thursday, September 24 at 6pm PT / 9pm ET
• Canada – Thursday, September 24 at 6pm PT / 9pm ET
• UK – Friday, September 25 at 2am BST
• India – Friday, September 25 at 6:30am IST
• Singapore – Friday, September 25 at 9am SGT
• Australia – Friday, September 25 at 11am AEST
• New Zealand – Friday, September 25 at 1pm NZST

When do new episodes of Stuart Fails to Save the Universe come out?

(Image credit: HBO Max)

New episodes of Stuart Fails to Save the Universe will make landfall every Thursday in the US and on Fridays everywhere else. Here are the all-important dates you need to know about:

• Episode 1: out now
• Episode 2: out now
• Episode 3: out now
• Episode 4: out now
• Episode 5: out now
• Episode 6: out now
• Episode 7: out now
• Episode 8: out now
• Episode 9: out now
• Episode 10: September 24

• HKUST (Guangzhou) and HK PolyU researchers' InjectEave beams a radio carrier at devices so their own circuits leak analog audio
• The leaked audio has already been decrypted by the device itself, making encryption offer no protection against such an approach
• The 30m headline needed a pricey amplifier pushing output to 10 W, while standard ranges of 1 to 6m were measured by detecting a test tone

Researchers at the Hong Kong University of Science and Technology and the Hong Kong Polytechnic University have shown that everyday headphones, a desk phone, and a handful of smart-home gadgets can broadcast what they are doing simply by using a radio signal.

The technique, called InjectEave, was presented at USENIX Security 2026 in Baltimore, and multiple outlets have since covered the researcher's claim that the attack "can recover headphone audio from up to 30 meters away, including through walls".

The claim may be accurate, but it has limitations, including the need for specialized equipment that is often very noticeable in most settings.

An impressive technical show with plenty of limitations in tow

Conventional electromagnetic eavesdropping waits for a device to leak. That works poorly for audio, because speech sits below 20 kHz while a device's wiring radiates efficiently only at megahertz or gigahertz frequencies.

InjectEave chooses to close the gap by transmitting a carrier signal at the target. According to the paper, nonlinear components such as amplifiers, analog-to-digital converters, switching MOSFETs, and power converters mix the secret signal onto that carrier, and the device's own traces and cables radiate the result back to a receiver.

Because the leak happens in the analog path, after audio has been decoded, the project page states that "InjectEave is immune to digital defenses such as encryption, masking, and randomization." Encryption in any form on a wireless headset is irrelevant, since the attack directly targets the signal driving the speaker, not the radio link.

The team demonstrating this used a USRP B210 software-defined radio, two antennas, a Siglent spectrum analyzer, and a laptop to set up their proof of concept, which could, as they noted, "eavesdrop on the majority of these devices from over 2m away and through walls, with a maximum distance of 30m for recovering intelligible headphone audio".

This isn't the first time the technique has been used, even as the researchers have built on it considerably; the idea originates from "The Thing," a Soviet bug given as a gift to the US ambassador in Moscow in 1945, which was passively powered remotely as a listening device.

InjectEve, however, does not involve planting anything; instead, it leverages existing work on interference-induced leakage and impedance-based backscatter, and distinguishes itself by recovering coarse digital data rather than continuous analog waveforms, allowing users to 'listen in' without added steps.

The same approach applies to wired headphones, which are also prone to leaking microphone audio; researchers concluded that their sound cards were the primary source of the leaks, which were being sent back over very short distances.

The threat is somewhat tempered by the fact that it can capture what users hear but, with wireless headphones, cannot hear what the user is saying. The attacker also has to transmit continuously and use a high-powered (10W) transmitter to reach the full 30-meter range, even though capturing and rendering speech is harder than the tones the test used to prove the approach worked.

The attacker also needs to know the target model and profile a matching unit first, although they managed to get a profile to transfer cleanly across three identical UGreen headsets, suggesting this might be easier than one would assume.

The researchers say they reported the findings to the affected manufacturers but, "as we have not yet received a response," withheld the table's frequencies and stripped injection control logic from their released code. One shouldn't be too hopeful, however, as no software update can fix an analog leak, and it is relatively limited in practical abuse cases.

Looking for a different day?

A new Quordle puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: Quordle hints and answers for Monday, September 21 (game #1701).

Quordle was one of the original Wordle alternatives and is still going strong now more than 1,500 games later. It offers a genuine challenge, though, so read on if you need some Quordle hints today — or scroll down further for the answers.

Enjoy playing word games? You can also check out my NYT Connections today and NYT Strands today pages for hints and answers for those puzzles, while Marc's Wordle today column covers the original viral word game.

SPOILER WARNING: Information about Quordle today is below, so don't read on if you don't want to know the answers.

Quordle today (game #1702) — hint #1 — VowelsHow many different vowels are in Quordle today?

• The number of different vowels in Quordle today is 3*.

* Note that by vowel we mean the five standard vowels (A, E, I, O, U), not Y (which is sometimes counted as a vowel too).

Quordle today (game #1702) — hint #2 — repeated lettersDo any of today's Quordle answers contain repeated letters?

• The number of Quordle answers containing a repeated letter today is 2.

Quordle today (game #1702) — hint #3 — uncommon lettersDo the letters Q, Z, X or J appear in Quordle today?

• No. None of Q, Z, X or J appear among today's Quordle answers.

Quordle today (game #1702) — hint #4 — starting letters (1)Do any of today's Quordle puzzles start with the same letter?

• The number of today's Quordle answers starting with the same letter is 0.

If you just want to know the answers at this stage, simply scroll down. If you're not ready yet then here's one more clue to make things a lot easier:

Quordle today (game #1702) — hint #5 — starting letters (2)What letters do today's Quordle answers start with?

• C

• L

• D

• P

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

Quordle today (game #1702) — the answers

(Image credit: Merriam-Webster)

The answers to today's Quordle, game #1702, are…

• COMFY
• LOBBY
• DRESS
• PANEL

After making a speedy start I ground to a halt trying to get my last word.

Fortunately, it only took me two guesses to find COMFY, but I wasted lots of time thinking I was looking for another double-letter word.

Daily Sequence today (game #1702) — the answers

(Image credit: Merriam-Webster)

The answers to today's Quordle Daily Sequence, game #1702, are…

• SPOOL
• LUPUS
• SHELL
• HAIRY

Quordle answers: The past 20

• Quordle #1701, Monday, 21 September: WAXEN, HIPPO, PETAL, LEASH
• Quordle #1700, Sunday, 20 September: DERBY, LIMBO, GAWKY, REIGN
• Quordle #1699, Saturday, 19 September: SCOPE, HEIST, PULSE, CHAMP
• Quordle #1698, Friday, 18 September: MUCUS, MIRTH, APPLE, TILDE
• Quordle #1697, Thursday, 17 September: CRIER, CHIRP, NEIGH, FREER
• Quordle #1696, Wednesday, 16 September: SPEAR, PRICE, BLUNT, FISHY
• Quordle #1695, Tuesday, 15 September: SHUSH, LITHE, DELTA, BUGLE
• Quordle #1694, Monday, 14 September: ZEBRA, LEGAL, RATIO, TROLL
• Quordle #1693, Sunday, 13 September: LUCID, SPRAY, MANGE, EMAIL
• Quordle #1692, Saturday, 12 September: SUPER, BRUSH, RESET, SOWER
• Quordle #1691, Friday, 11 September: PLUSH, PAINT, RIVAL, AFOUL
• Quordle #1690, Thursday, 10 September: AGENT, EXILE, TITAN, PUREE
• Quordle #1689, Wednesday, 9 September: HAPPY, GONER, SMACK, MOTIF
• Quordle #1688, Tuesday, 8 September: FLUNG, DIARY, HALVE, BERTH
• Quordle #1687, Monday, 7 September: VISIT, CLANK, FEVER, OCEAN
• Quordle #1686, Sunday, 6 September: PILOT, HONOR, BOWEL, TAUNT
• Quordle #1685, Saturday, 5 September: GNASH, GEEKY, WHELP, PUTTY
• Quordle #1684, Friday, 4 September: QUICK, BEEFY, TRUCK, SNAIL
• Quordle #1683, Thursday, 3 September: SIGMA, ESSAY, MERRY, LLAMA
• Quordle #1682, Wednesday, 2 September: INCUR, FELLA, TITAN, FROZE

Looking for a different day?

A new NYT Connections puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: NYT Connections hints and answers for Monday, September 21 (game #1198).

Good morning! Let's play Connections, the NYT's clever word game that challenges you to group answers in various categories. It can be tough, so read on if you need Connections hints.

What should you do once you've finished? Why, play some more word games of course. I've also got daily Strands hints and answers and Quordle hints and answers articles if you need help for those too, while Marc's Wordle today page covers the original viral word game.

SPOILER WARNING: Information about NYT Connections today is below, so don't read on if you don't want to know the answers.

NYT Connections today (game #1199) - today's words

(Image credit: New York Times)

Today's NYT Connections words are…

• THIS
• THAT
• THE
• OTHER
• CAFE
• PATRON
• AGREE
• ACCENT
• TOUCH
• THOSE
• ROSE
• NEUTRAL
• DETAIL
• DISAGREE
• THESE
• FLOURISH

NYT Connections today (game #1199) - hint #1 - group hints

What are some clues for today's NYT Connections groups?

• YELLOW: Determiners
• GREEN: Adornment
• BLUE: A quiz with choices
• PURPLE: Fancy drinks

Need more clues?

We're firmly in spoiler territory now, but read on if you want to know what the four theme answers are for today's NYT Connections puzzles…

NYT Connections today (game #1199) - hint #2 - group answers

What are the answers for today's NYT Connections groups?

• YELLOW: DEMONSTRATIVES
• GREEN: EMBELLISHMENT
• BLUE: OPTIONS ON A MULTIPLE CHOICE SURVEY
• PURPLE: BEVERAGES WITH ACUTE ACCENTS REMOVED

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Connections today (game #1199) - the answers

(Image credit: New York Times)

The answers to today's Connections, game #1199, are…

• YELLOW: DEMONSTRATIVES: THAT, THESE, THIS, THOSE
• GREEN: EMBELLISHMENT: ACCENT, DETAIL, FLOURISH, TOUCH
• BLUE: OPTIONS ON A MULTIPLE CHOICE SURVEY: AGREE, DISAGREE, NEUTRAL, OTHER
• PURPLE: BEVERAGES WITH ACUTE ACCENTS REMOVED: CAFE, PATRON, ROSE, THE

• My rating: Easy
• My score: Perfect

Connections loves to hide a clue to another group on one of the tiles and today it was ACCENT.

This tile featured in the green group for EMBELLISHMENT but may also have tipped some crafty players off to the fact that we were searching for a group featuring accents or, as it happened, BEVERAGES WITH ACUTE ACCENTS REMOVED.

Before linking the fancy drinks I took a bit of a risk with the yellow group, having to choose between THE and THIS. Had I paid attention more at school I may have found this task easier — demonstratively easier, even. Yet somehow I scraped through without a single error.

Yesterday's NYT Connections answers (Monday, September 21, 2026, game #1198)

• YELLOW: EMAIL BUTTONS: COMPOSE, DRAFTS, SENT, SPAM
• GREEN: WAYS TO ATTRACT FISH: CHUM, FLY, SPINNER, WORM
• BLUE: CHESS VERBS: CAPTURE, CASTLE, CHECK, MATE
• PURPLE: STARTS OF COMPOSERS' NAMES: BEET, BRAH, CHOP, VIVA

What is NYT Connections?

NYT Connections is one of several increasingly popular word games made by the New York Times. It challenges you to find groups of four items that share something in common, and each group has a different difficulty level: green is easy, yellow a little harder, blue often quite tough and purple usually very difficult.

On the plus side, you don't technically need to solve the final one, as you'll be able to answer that one by a process of elimination. What's more, you can make up to four mistakes, which gives you a little bit of breathing room.

It's a little more involved than something like Wordle, however, and there are plenty of opportunities for the game to trip you up with tricks. For instance, watch out for homophones and other word games that could disguise the answers.

It's playable for free via the NYT Games site on desktop or mobile.

Looking for a different day?

A new NYT Strands puzzle appears at midnight each day for your time zone – which means that some people are always playing 'today's game' while others are playing 'yesterday's'. If you're looking for Monday's puzzle instead then click here: NYT Strands hints and answers for Monday, September 21 (game #932).

Strands is the NYT's latest word game after the likes of Wordle, Spelling Bee and Connections – and it's great fun. It can be difficult, though, so read on for my Strands hints.

Want more word-based fun? Then check out my NYT Connections today and Quordle today pages for hints and answers for those games, and Marc's Wordle today page for the original viral word game.

SPOILER WARNING: Information about NYT Strands today is below, so don't read on if you don't want to know the answers.

NYT Strands today (game #933) - hint #1 - today's themeWhat is the theme of today's NYT Strands?

• Today's NYT Strands theme is… Day and night shift

NYT Strands today (game #933) - hint #2 - clue words

Play any of these words to unlock the in-game hints system.

• FAIL
• SAVERS
• TWIN
• CHAIN
• VOTES
• SOIL

NYT Strands today (game #933) - hint #3 - spangram lettersHow many letters are in today's spangram?

• Spangram has 11 letters

NYT Strands today (game #933) - hint #4 - spangram positionWhat are two sides of the board that today's spangram touches?

• First side: top, 1st column

• Last side: bottom, 4th column

Right, the answers are below, so DO NOT SCROLL ANY FURTHER IF YOU DON'T WANT TO SEE THEM.

NYT Strands today (game #933) - the answers

(Image credit: New York Times)

The answers to today's Strands, game #933, are…

• SWITCH
• CHANGEOVER
• TRANSITION
• PROGRESSION
• SPANGRAM: FALLEQUINOX

• My rating: Hard
• My score: 1 hint

Even as I was collecting the words I still thought that the theme was about work and the moment when the day shift and the night shift swap over.

It wasn’t until I got the spangram — I had been ignoring the game’s two rare letters until then — that the penny finally dropped and I understood that the words were connected to what AI tells me is “the precise astronomical moment when the center of the Sun crosses Earth's equator, marking the official astronomical start of autumn”.

Every day’s a school day with Strands!

Yesterday's NYT Strands answers (Monday, September 21, game #932)

• NEON
• LYCRA
• GRUNGE
• SCRUNCHIES
• TRACKSUITS
• SPANGRAM: NINETIESTREND

What is NYT Strands?

Strands is the NYT's not-so-new-any-more word game, following Wordle and Connections. It's now a fully fledged member of the NYT's games stable that has been running for a year and which can be played on the NYT Games site on desktop or mobile.

I've got a full guide to how to play NYT Strands, complete with tips for solving it, so check that out if you're struggling to beat it each day.

• Hackers are using blockchains to keep malware instructions available after servers disappear
• AI is making blockchain-based malware infrastructure easier for less experienced hackers
• Blockchain traffic is difficult to block without disrupting legitimate cryptocurrency services worldwide

Hackers are increasingly hiding malware instructions inside public blockchains, creating communication channels that can survive the removal of conventional infrastructure.

New figures from Chainalysis claim malicious blockchain activity increased 440%, with daily entries rising from 2.06 to 11.1 after newer AI systems emerged.

The technique gives attackers another way to maintain communication with compromised computers without relying entirely on conventional servers controlled by hosting providers.

Blockchain networks become malware dead drops

Blockchain dead drops use transaction data or smart contracts as lookup points, allowing infected computers to retrieve commands, addresses, or configuration information.

Because blockchain records are distributed across networks, removing a conventional server does not erase information already stored on the ledger.

A North Korean-linked operation associated with UNC5342 uses TRON and Aptos as alternate routes before retrieving encrypted instructions through the BNB Chain.

Its malware can check one network, switch to another when necessary, and retrieve updated addresses without receiving another malware package.

Iranian actors suspected of links to the country's intelligence ministry have embedded encoded routing information inside Bitcoin transactions used for malware retrieval.

Russian-speaking cybercriminals have also commercialized the technique, using Polygon contracts to provide blockchain-backed infrastructure for malware campaigns operated by different customers.

One related operator controls more than 50 BNB Chain resolver contracts while also conducting activity involving fraudulent tokens and clipboard-monitoring malware.

These operations show how blockchain records can function as persistent lookup infrastructure rather than merely serving their conventional financial and transactional purposes.

AI lowers the technical barrier

Chainalysis said the sharp increase in this malicious activity followed the arrival of high-capacity Chinese open models, which placed fewer restrictions on malware development requests.

Before those systems appeared, building reliable blockchain-based malware infrastructure required expertise across malicious software, cryptocurrency networks, and distributed communication systems.

AI tools can reduce that knowledge barrier by helping less experienced operators understand unfamiliar technologies and produce components needed for blockchain communication.

In the second quarter of 2026, state-linked groups accounted for roughly two-thirds of newly observed activity.

Those groups also represent about half of overall observed activity, indicating that blockchain-based malware infrastructure extends beyond conventional cybercriminal operations.

Defenders face difficulties because blocking blockchain traffic could also disrupt legitimate wallets, decentralized applications, exchanges, and decentralized finance services used worldwide.

Attackers can further complicate disruption by operating their own blockchain nodes, reducing dependence on external providers that defenders might otherwise pressure or disable.

Some operators have hidden server addresses inside wallet identifiers without usable private keys, then used zero-value transfers to trigger malware retrieval.

Those transactions leave public records that investigators can examine, potentially providing useful clues even when attackers attempt to conceal their infrastructure.

"While the exploitation of blockchain by state-linked organizations such as North Korea is becoming more sophisticated, on-chain records left by attackers can actually serve as important clues to track them," said Kwon Jun-hyeok, General Manager of Chainalysis Korea.

"Tracking these traces and identifying attackers and related infrastructure through blockchain intelligence will become increasingly important in responding to new cyber threats."

• Huawei’s Ascend 960 roadmap depends on scale, memory, and faster interconnects
• UnifiedBus connects thousands of processors while reducing communication bottlenecks inside AI systems
• The Atlas 960 roadmap reaches 15,488 processors with 34 PB/s bandwidth

Huawei is expanding its Ascend platform with larger systems designed to handle AI models containing up to 10 trillion parameters.

The company is advancing UnifiedBus, an interconnect architecture intended to connect processors, memory, and storage with lower communication overhead.

That approach gives Huawei another way to compensate for hardware limitations that have constrained individual Ascend accelerators against Nvidia's products.

Huawei expands the Ascend 960 system

Huawei's Atlas 960 SuperPoD roadmap calls for systems containing as many as 15,488 Ascend 960 processors, up from its earlier 8,192 processor configuration.

The company says the system can deliver 30 EFLOPS of FP8 computing and 60 EFLOPS using FP4, alongside 4,460 TB of memory capacity.

Its interconnect bandwidth is specified at 34 PB/s, while Huawei expects training performance to reach 15.9 million tokens per second.

Huawei has also accelerated development of the Ascend 960 family, with the 960DT scheduled for Q1 2027 and the 960PR planned for Q3 2027.

The company says both versions will arrive earlier than previously expected, while Huawei says performance improvements have exceeded the original roadmap.

"We're evolving our Ascend chip series on a one-generation-a-year cycle," said David Wang, deputy chairman and rotating chairman of Huawei.

"In 2028 and 2029, we will roll out the Ascend 970 and 980 chips, respectively. Thanks to the Tau (τ) Scaling Law, not only will their compute specifications continue to double, but you can also expect to see huge improvements..."

UnifiedBus connects 4,096 NPUs inside the Atlas 960E

UnifiedBus is Huawei’s interconnect architecture for linking processors, memory, and other components within large AI computing systems.

Huawei applies UnifiedBus in the Atlas 960E, a 960 variant that ties up to 4,096 NPUs and gives them access to shared memory across the SuperPoD.

It combines UnifiedBus with Hi-ONE optical technology, extending high-speed optical connections deeper into the computing system.

The approach uses near-packaged optics, or NPOs, placing optical components closer to processors to improve transmission speeds and reduce energy consumption.

Huawei says this design helps the SuperPoD move data between thousands of processors without relying entirely on conventional optical connections outside the computing system.

The Atlas 960E can use approximately 5,500 Hi-ONE units instead of about 48,000 conventional 800G optical modules.

This configuration can reduce power consumption by more than 550 kilowatts across the processor interconnection system.

The architecture also gives the Atlas 960E 8 EFLOPS of FP8 computing performance while Huawei says it supports models containing up to 10 trillion parameters.

Atlas 960E systems can also connect into SuperClusters containing 512,000 NPUs, with the architecture ultimately supporting million-processor configurations.

The larger systems are important because Huawei cannot rely solely on individual accelerator performance to narrow the gap with Nvidia.

Its strategy combines more processors with faster communication, allowing thousands of chips to operate within a shared computing environment.

UnifiedBus therefore becomes important because thousands of processors must exchange data continuously during demanding AI training and inference workloads.

• Scaleout's onboard AI let a BAE Systems ALMA drone rank, select, and strike an armored engineering vehicle in a January 2026 demo
• Humans set the mission, started the system, and kept a pilot in reserve, but did not ultimately use them during the test
• The test underscores how small AI models can essentially take over not only the target-selection part of the equation, but also perform the actual mission end-to-end without human intervention needed

A small drone flying over a snow-covered Swedish test range in January 2026 found several objects, ranked an armored engineering vehicle as the most valuable, and made a beeline for it before dropping an explosive.

There was no human involvement in the entire process, which included selection, targeting, and then neutralization by the drone, making it a considerably more autonomous approach than what the current battlefield uses.

The flight, part of BAE Systems Bofors' Affordable Loitering Modular Ammunition (ALMA) program with onboard AI supplied by Uppsala-based Scaleout Systems, resurfaced this month as AI safety became a key topic among industry and government stakeholders alike.

A growing threat and capability for modern militaries

Scaleout Systems tested the AI in question with a pilot on standby and a continuous connection throughout the exercise, during which the drone used AI to detect, identify, and geolocate potential threats.

Depending on how you frame it, you can argue that this is both a threat to modern militaries and a boon: an autonomous drone that can select targets without oversight or a backlink is essentially immune to jamming, offering a much higher likelihood of completing its mission than alternatives.

At the same time, it becomes riskier when it is completely cut off from communications, malfunctions, or fails to select the correct target without human oversight.

Interestingly, BAE Systems Bofors' own release on Winter Demo 2026 does not mention the strike at all. It frames the three-day Karlskoga event around roughly 20 startups and technology companies, with Swedish Defense Minister Pål Jonson joining a panel and saying, "We need more actors and entrepreneurs in the defense industry."

The test, despite lacking human interaction in its end-game, still relied on human input to some degree: a user pushed a button to start the exercise, and humans set the parameters overseeing the entire exercise.

This isn't the first machine to choose its own target, however; Israel's Harpy loitering munition, fielded since the 1990s, can autonomously detect and attack radar emitters whose locations were unknown at launch.

This is awkward timing for regulators, to say the least: on September 5, the 128 states party to the Convention on Certain Conventional Weapons agreed on a non-binding text on lethal autonomous weapons, after the United States and Russia pushed late changes, including to a section on human judgment and control.

As a result, Nicole van Rooijen of Stop Killer Robots told Reuters that three years of work had been "substantially diluted in the last hours." For now, Scaleout has shown that detection, ranking, and targeting can run on a small airframe without a data link, within parameters that people set.

Whether this makes it to a modern battlefield is increasingly likely, even as the Russia-Ukraine conflict becomes more reliant on autonomous machines. The more pressing question is one that will be answered sooner or later: how does such a drone make decisions if it is jammed from its source without any human oversight?

• Researchers report a new upgrade for lithium-ion
• Added graphitic carbon nitride can boost capacity
• It would mean higher power delivery for longer

With so many modern-day devices dependent on rechargeable lithium-ion batteries, scientists are hard at work trying to figure out ways of improving the tech — and a team from the Korea Research Institute of Chemical Technology (KRICT) has just announced a significant breakthrough.

As reported by The Korea Times, the KRICT researchers have succeeded in boosting the power delivery capacity of lithium-ion battery chemistry by adding a small amount of a material called graphitic carbon nitride to the cathode end of the battery.

When a battery is charging, the lithium ions get pushed out of the cathode, through an electrolyte material, to the anode at the other end. When the battery is in use, the ions flow back in the other direction.

One potential way of storing more energy in a battery of the same physical size and weight is to make the cathode thicker, but there's a problem: this also makes it harder for the lithium ions to move and deliver all of the energy held in the battery. The new innovation that was successfully tested here could solve that problem.

Capacity boosting

Microscopic imagery showing the cathode mix (Image credit: Eun et al., Exploration, 2026)

The researchers have reported some impressive numbers from their tests, though the tech is still at an early stage. Adding the graphitic carbon nitride to the cathode resulted in a 166% increase in capacity during high-rate discharge, and an increase in power density of up to 2.85 times.

Those figures don't mean a bigger capacity in mAh terms, but delivering more of a charge under heavy load, and for longer. In lithium-ion batteries, using a lot of energy quickly reduces how much total capacity you'll get from the battery compared to if you used the same amount of energy but more slowly.

In an EV, for example, this would mean that the vehicle could accelerate harder and sustain that high performance for longer without impacting total range as much. It would allow home batteries to better sustain their capacity if you use them with appliances that drain a lot of energy quickly, such as washing machines.

But smaller applications can benefit from it as well — drones can draw a lot of power suddenly to life themselves, or gaming and workstation laptops might suddenly draw a lot of power depending on the workload — they'd all benefit from tech that handles the power flow's effect on capacity better.

The tech could, in turn, result in batteries with thicker cathodes that do give you more mAh capacity in the same space, the researchers say — but that wasn't tested in this study. The next challenge is to try and scale up and expand the technology.

According to KRICT President Shin Seok-min, this alternative approach to lithium-ion batteries could potentially be used across electric vehicles, energy storage systems, and robotics — so it's very broadly applicable, especially for devices and systems that can take batteries that are physically larger.

• AWS deal with Nvidia adds 2 million Blackwell Ultra, Rubin, and Rubin Ultra GPUs, on top of more than 1 million committed in March 2026
• Totals more than 3 million Nvidia GPUs due before 2029, a ~1.9x multiple for each of Amazon's roughly 1.58 million employees
• Nvidia's CFO has said deliveries start this quarter, not in 2027, but neither company says what it counts as a GPU or what the deal costs

Amazon ended 2025 with about 1.58 million full- and part-time employees, most in fulfillment centers and delivery operations, with a much smaller share working in its AWS data center division (estimated at around 246,000).

By mid-2028, Amazon Web Services expects to have taken delivery of roughly twice that many new Nvidia GPUs, based on a recent deal it made with Nvidia.

The latest deal was announced on August 26, the same afternoon Nvidia reported quarterly earnings, and will see AWS plan to deploy two million additional Blackwell Ultra, Rubin, and Rubin Ultra GPUs across its global infrastructure in 2027 and 2028. This is on top of over a million Nvidia GPUs that AWS committed to at Nvidia GTC 2026 in March, and which Nvidia's Ian Buck told Reuters would ship from 2026 through 2027.

A mammoth deal that dwarf's Amazon's entire payroll

Together, this all amounts to over three million GPUs in play between the data center giant and the chip designer, which is also the world's most valuable company at the time of writing. At 3 million GPUs against a workforce of 1.58 million, that's nearly 1.9 Nvidia GPUs per employee.

This is only Amazon's commitment to Nvidia; it also has its own custom Tranium3 GPUs, which the company says are "nearly fully subscribed" or "almost fully booked" as of mid-2026.

At the same time, Amazon is not increasing job roles on its end; it cut around 30,000 corporate roles between October 2025 and January 2026, a restructuring its top HR executive, Beth Galetti, described as "reducing layers, increasing ownership, and removing bureaucracy."

Building on an already solid base

While AWS's current GPU base from Nvidia, consisting mainly of H100 and H200 GPUs, is smaller than Microsoft's 485,000 count, it is hardly a rounding error, with Omdia estimating that Amazon bought 196,000 Hopper GPUs in 2024 alone.

The interesting part is determining what counts as a GPU: Nvidia and Amazon's joint statement about 2 million GPUs across calendar years 2027 and 2028 might mean two very different things depending on how you count GPUs.

At GTC 2025, Nvidia said it would count Rubin-generation GPUs by compute die rather than by package, which is why the Vera Rubin rack was first unveiled as NVL144. It reversed course before CES 2026, and the flagship now ships as Vera Rubin NVL72, counting 72 two-die packages. To make matters a bit more complicated, Rubin Ultra, due in 2027, puts four compute dies in each package.

Whether the companies count each die as a separate GPU or the whole package as a GPU could make the numbers skew heavily in either direction. The deal also includes a national security element: approximately 100,000 GPUs are earmarked for US government AI workloads at Impact Level 6.

Amazon's limitation here is supply, not demand; AWS revenue rose 37% year over year to $42.2 billion in the second quarter, and its contracted backlog reached $496 billion, up from $364 billion three months earlier, as CloudTech News reported.

On Amazon's July earnings call, CEO Andy Jassy said capacity would fall short of demand this year and likely next, adding: "In fact, the demand we already have for 2028 is striking."

In addition to its own custom ASICs, including Tranium3, Amazon is gearing up for a few fiscal years of eye-watering AI infrastructure spend and AI demand combined, and it better be right: Amazon's free cash flow has already turned negative as it looks to fund its bid to be one of, if not the largest hyperscaler in play for the foreseeable future.

Via StorageNewsletter

My two sons are obsessed with 3D-printed toys, so a 3D printer is on their Christmas wish list, which makes this Amazon deal very appealing.

The Bambu Lab P1S is Amazon's number one best-selling 3D printer, and it just dropped to $499.99 (was $549.99). That's a $50 discount and the lowest price we've ever seen for the 3D printer.

• Shop more 3D printer deals at Amazon

The Bambu Lab P1S is a great introduction to 3D printing, with claims that it can be set up in just 15 minutes and offers hassle-free assembly for all skill levels. It supports up to 16 colors, so you can print endless, colorful creations, and it's fast too, with a max speed of 500 mm/s. It also includes a handy remote control and comes in an enclosed-body design with an activated carbon filter for improved performance.

Save on Amazon's best-selling 3D Printer

Lab P1S Combo 3D Printer: was $549 now $499.99
The Bambu Lab P1S is Amazon's number 1 best-selling 3D printer, and it's on sale for $499.99 - a record-low price. The Bambu Lab S1S takes just 15 minutes to set up, offers 16 colors for endless creations, and prints at lightning speed.View Deal

Keep in mind that today's discount on the Bambu Lab S1S is a limited-time offer and a record-low price. That $499.99 price tag is also an incredible deal for a high-quality 3D printer, as other models retail in the $600 to $800 price range.

• So-called signal sharing between Microsoft and Google uncovered the RedVDS marketplace was behind large-scale cyber fraud
• RedVDS sold access to virtual machines running unlicensed software from which cybercriminals launched scams and directed attacks
• Threat data was shared securely via the Global Signal Exchange (GSE), a non-profit organization

A major cybercrime marketplace has been taken out of action thanks to cooperation between Microsoft and Google via a secure threat data sharing platform.

Known as the Global Signal Exchange, the collaboration led to the take-down of the RedVDS, an online cybercrime mall supplying virtual machines for launching phishing, business email compromise attacks, and more.

The marketplace – which provided quickly-deleted and therefore virtually untraceable VMs – was meticulously monitored by Microsoft’s security team, Digital Crimes Unit, with both Microsoft and Google suspending the operation and action taken to seize domains and servers.

A secondary case featuring the GSE identified a Microsoft-impersonating tech support scam, resulting, highlighting the importance of secure thread data collaboration platforms.

Digital Crimes Unit

Finding massive scams is not easy. Even with its own Digital Crimes Unit, Microsoft has to rely on information sharing with third party organizations. In this case, the RedVDS marketplace was identified ahead of disruptive action taken by Microsoft in January 2026, which applied to courts in the UK and US to have the RedVDS web domains seized.

Data shared via the GSE enabled Google to follow suit, identifying related accounts on its networks and suspending them. Meanwhile, servers were impounded in Germany, and Europol took action against Europe-based RedVDS servers.

It’s an impressive account of cooperative, decisive action against cybercrime, a collaborative response to what has been described as a “$66 million fraud marketplace.”

An incredible 130,000 organizations were targeted by RedVDS-provided virtual machines between September and December 2025, with 191,000 Microsoft email accounts compromised during this period. All of this access to cybercrime was available from just $24 a month for a basic scam-ready virtual machine.

The importance of collaboration

The Global Signal Exchange is a UK-based non-profit, co-founded with Google in 2025 with the aim of providing real-time monitoring of the cybercrime supply chain.

"Fraud does not respect company boundaries, and no single organization ever sees the whole picture," noted Emily Taylor, CEO at Oxford Information Labs and Co-Founder of the Global Signal Exchange.

"That is exactly why we built GSE: to give trusted partners a secure way to share what they know, quickly. These two cases are a good example of GSE doing exactly what it was designed to do."

The Global Signal Exchange’s role in the sharing of information between Google and Microsoft has highlighted the importance in such collaborations. Both organizations have stated they plan to continue sharing information through the GSE, whose other partners include Meta, Amazon, Google, among many others.

We're gearing up for the second wave of major marathons this year: runners will be heading for the start line in Berlin at the end of the week (27 September), with the Chicago marathon following on 11 October and New York rounding out the season on 2 November.

Perhaps you're wondering what kind of footwear is propelling elite athletes to these kinds of times? I've hunted out the shoes worn by a selection of marathon winners, and rounded up the results below.

The Adidas Adios range crops up time and time again. Sabastian Sawe and Yomif Kejelcha both sprinted to stunning sub-2 hour success at the 2026 London marathon while wearing Adidas Adizero Adios Pro Evo 3 shoes (currently sold out in the US, but a restock is coming in the UK on 24 September.) Sawe wore Adidas Adios Pro Evo 2 to take the gold at the Berlin 2025 marathon, as did Benson Kipruto for his 2025 New York win.

Hot on Kipruto's heels in Berlin 2025 was Alexander Mutiso Munyao, wearing the Adidas Adizero Adios Pro 4. Incidentally, women's champ Rosemary Wanjiru was also wearing Adios Pro 4. In Chicago 2025, Hawi Feysa took the gold in the women's race wearing Adidas Adios Pro Evo 1.

Nike's winning line is the Alphafly. Jacob Kiplimo won the 2025 Chicago marathon in Nike Alphafly 3 — also the running shoe of choice of record-breaker Eliud Kipchoge.

It's not all about Adidas and Nike, though. John Korir has won two Boston marathons in a row while wearing prototype versions of the Asics MetaSpeed Sky, and Sharon Lokedi wore Under Armour Veliciti Elite 3 to defend her crown at Boston 2026. Hellen Obiri took the women's crown at the 2025 New York marathon in On LightSpray Cloudboom Strike — particularly notable for their laceless, 'spray-on' style.

If you're a keen runner and find yourself gripped by marathon fever, perhaps these are some models worth considering for your next long-distance race. But a couple of important caveats, before we start: First, if you're already in training for one of the upcoming marathons, you definitely don't want to be switching up your footwear in the run-up to the event. Second, these shoes are aimed at experienced long-distance runners; if you're not at that stage yet, head to our general best running shoe roundup for more beginner- and intermediate-friendly recommendations.

US: Marathon-winning running shoes

Jump down to UK shoes

Adidas Adizero Adios Pro 4 (men's)

Adidas Adizero Adios Pro 4 (women's)

Nike Alphafly 3 (men's)

Nike Alphafly 3 (women's)

Under Armour Velociti Elite 3 (unisex)

Adidas Adizero Adios Pro Evo 1 (unisex)

Asics Metaspeed Sky Tokyo (men's and women's)

Adidas Adios Pro Evo 2 (unisex)

On Lightspray Cloudboom Strike 2 White unisex)

UK: Marathon-winning running shoes

Adidas Adizero Adio Pro Evo 3 (restock soon)

adidas Adizero Adios Pro Evo 2 (unisex)

Nike Alphafly 3 Glam (men's)

Nike Alphafly 3 (women's)

Adidas Adizero Adios Pro 4 (men's)

Adidas Adizero Adios Pro 4 (women's)

adidas Adizero Adios Pro Evo 1 (unisex)

Asics Metaspeed Sky Tokyo (unisex)

UnderArmour Velociti Elite 3

On LightSpray Cloudboom Strike

• BAN says 87% of data center hardware isn't actually accounted for in most figures
• Each 1GW of capacity equals 70,000 tonnes of hardware
• AI hardware needs more frequent replacing

A new Basel Action Network (BAN) report has claimed the ongoing AI boom could create a new stream of e-waste, with retired equipment from AI alone likely contributing 395-617 million tonnes between 2025 and 2050.

To put that into context, BAN says that waste would fill 15-23 million 40ft shipping containers, which, placed end-to-end, would be enough to circle the earth six times over.

Ultimately, Moore's Law is to blame because developers are no longer able to achieve such great improvements in performance year-over-year, so they're having to introduce whole new types of technology.

AI will likely lead to massive amounts of e-waste

For example, AI companies are now having to deploy huge numbers of specialized AI accelerators alongside GPUs, cooling equipment, networking and more.

BAN also highlights that global data center Capex is expected to hit $7 trillion between 2025 and 2030, with $4.3 trillion of this attributed to electronic hardware.

The paper goes on to criticize earlier estimates for only including servers and accelerators, which it says is only around 13% of the picture. The other 87%, which spans networking, power distribution, storage/backup, and cooling, is largely unaccounted for.

And with each additional 1GW of data center capacity estimated to need around 70,000 tonnes of electronics, and 100GW of additional capacity anticipated globally by the end of this decade, the true scale starts to become clearer.

There's also refresh cycles, because BAN predicts that AI accelerators, servers and racks are replaced every 2.5 years, versus the usual five to seven years of a general-purpose server.

While these may be speculative estimations and not actual quantities, one thing's for certain – more data centers means more e-waste.

To minimise some of the impacts, BAN first suggests designing AI data center equipment to last longer in the first place. Recycling and second use is also a big topic, but the report doesn't go into whether AI-specific hardware can then go on to be used in lesser functionalities, such as being shoehorned into regular server facilities.