Seraphim Space Investment Trust committed $30 million to Hubble Network, a company operating a low Earth orbit satellite constellation that connects directly to off-the-shelf Bluetooth Low Energy (BLE) chips. This architecture enables global connectivity and asset monitoring without requiring cellular towers, ground gateways, or specialized satellite modems. For builders, direct-to-satellite Bluetooth offers an ultra-low-power, cost-effective telemetry solution for tracking and managing distributed field hardware across remote regions.
Qualcomm unveiled two new Dragonwing processors aimed at bringing on-device AI, vision, and connectivity to product categories that have historically struggled with cost, power, and size constraints. The Q-2390 targets consumer and commercial gear like retail kiosks, smart appliances, home robots, and fitness equipment, integrating application compute, on-device AI, camera and display support, and LTE connectivity onto a single chip.
Atlas is an omni world model and multimodal autoregressive diffusion transformer designed to generate, reconstruct, and simulate interactive 3D environments from text, images, and video. The model natively handles spatial and camera context to synthesize novel views, reconstruct scenes into 3D Gaussian splats, and model dynamic scene interactions over time. Atlas unlocks scalable "Real-to-Sim" workflows by creating realistic synthetic sensor streams (RGB-D) and interactive physical environments from simple video captures, significantly reducing the cost and complexity of training navigation and manipulation policies.
Hydra-0 is a generalist world model that translates physical robot commands into pixel motion trajectories termed "action flow". Operating as a hybrid simulator, it pairs physics engines for robot kinematics with a learned generative video model to predict complex scene reactions like deformable materials and fluid interactions. This shared visual abstraction eliminates the need for custom coordinate remapping across different embodiments, making cross-platform policy training and sim-to-real evaluation significantly more efficient.
This open-source repository provides a simulation-first ROS 2 autonomy stack for an indoor person-following drone, utilizing Gazebo simulation and an ArduPilot Software-in-the-Loop (SITL) digital twin before physical deployment. The architecture integrates vision-based perception models for person detection with flight-control pipelines to handle autonomous tracking and indoor navigation. This project offers a clear reference implementation for designing, simulating, and validating vision-in-the-loop flight control workflows before testing on physical airframe hardware.
At Hot Chips 2026, Nvidia detailed the requirements a RISC-V CPU must meet to become a full host processor for its CUDA and NVLink Fusion platforms, alongside its existing x86 and Arm support. For CUDA, Nvidia points to RVA23 profile compliance and the RISC-V Boot and Runtime Services spec to guarantee software binary compatibility across different RISC-V chips, plus hardware-level PCIe I/O coherence and peer-to-peer GPU communication so data can move directly between host and device memory without unnecessary cache flushes or extra copies.
Gravis Robotics secured $200 million in Series A funding from SoftBank to scale its hardware and software autonomy kits for heavy construction equipment.
Reservoir, an early-stage agricultural robotics incubator, announced a three-year, $10 million R&D partnership with John Deere to fast-track the field development and commercialization of rugged AI for specialty crop farming.
This repository bridges the LeRobot framework with ROS 2 by leveraging the ultra-fast Zenoh communication protocols.
Nav2, the team behind one of the most widely used robot navigation stacks, released a major update for ROS 2 Lyrical with new navigation tools, performance upgrades, smoother path planning, and better overall mobility for autonomous systems.
Sponsored
69% cheaper for initial access in the black hat economy, that is. No wonder verified ransomware victims are up 45% YoY.
is built on 3.9 petabytes of primary-source data collected directly from the spaces where this activity happens. Readers will learn:
* How the threat landscape is shifting from human-led campaigns to AI-led, machine-speed exploitation * Why 19% of the 21,667 vulnerabilities [6]disclosed in H1 2026 already had public or functional exploit code * The five groups behind 44% of all attacks
Aesto reported that unauthorized access to part of its AWS infrastructure exposed data tied to 9,540,683 people. The intrusion ran from about December 2 to December 18, 2025. Records may include medical, insurance, financial, and government ID data. Aesto confirmed affected files in May, notified clients in June, and offered 24 months of Experian IdentityWorks.
PaperCut Software announced two new vulnerabilities that have been patched in its PaperCut NG and MF print management software. The vulnerabilities involve an authentication bypass vulnerability which can be chained with a separately disclosed vulnerability to achieve RCE. Threat intelligence firm Defused reports that the authentication bypass vulnerability is being exploited by attackers for data theft.
Datadog Security Labs uncovered a password spraying campaign targeting AWS root accounts. Datadog stated that it has not identified a successful login yet, making the attacker's motive unclear. AWS root account logins require an account email, so it is possible that the attackers have access to a dataset or exposed email addresses that they are using in their campaign.
Tests of Gemma and Qwen builds found that abliterated variants approved of far more vulnerability candidates. In FreeBSD's sys/rpc, one Heretic build marked 138 of 144 candidates VALID, while the base marked 26 of 40. The Heretic run missed CVE-2026-4747 after spending its scan on false findings. A false heap-overflow claim survived because abliterated builds described the buffer bound, then still confirmed an overflow.
Forescout used an AI model to port an RCE exploit from a WAGO 750-852 PLC to a 750-831 PLC running the same vulnerable Nucleus FTP server (CVE-2021-31886). The AI needed constant human guidance: correcting false leads, supplying disassembly context, and running Ghidra scripts it wrote itself. The final exploit stage took 8 hours 32 minutes and cost $535.74 in API tokens. A follow-up attempt to build a C2 implant bricked the PLC. Once code execution worked, the AI wrote working ICMP and UDP payloads within minutes.
Threat actors are executing voice phishing campaigns by registering external .onmicrosoft[.]com tenants with fake help desk names, initiating Microsoft Teams chats, and escalating to calls to trick victims into launching remote management tools. Following initial access, the attackers deliver distinct payloads that include an obfuscated PowerShell RAT designed to disable AMSI via the amsiInitFailed flag, and a Python-based execution chain that attempts PetitPotam coercion against domain controllers over port 445. To mitigate this threat, organizations must restrict external Teams access by default, block the associated payload hash, and proactively hunt for rapid chat-to-call sequences originating from commercial VPN nodes.
2026.09.02·unit42.paloaltonetworks.com·11 min read·TLDR InfoSec Open-source adversarial testing engine, SDK, and CLI for AI agents. Attack your agent the way real users and attackers will: live endpoints, multi-turn conversations, and tool abuse. Then turn every failure into a firewall rule. Runs locally or against the Humanbound Platform. No login required to start.
open-kritt is an open-source, self-hosted vulnerability research platform that turns focused AI analysis into de-duplicated, ranked findings with configurable validation and enrichment.
MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post-exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use.
CDT polling of 2,000 UK adults found 53% judge encryption-access security risks greater than law-enforcement benefits. 84% fear hidden access would create exploitable vulnerabilities, fraud, data leaks, and cybercrime. The findings follow Apple's tribunal challenge to UK Technical Capability Notices after a demand for encrypted iCloud access.
Sponsored Codex searches routed macOS users to Google Sites lures with attacker-controlled iframes. Fake installers copied Terminal commands that decoded URLs, fetched shell loaders, and launched Mach-O payloads from /tmp/helper. The chain sent event=pasted telemetry, cleared quarantine attributes with xattr -c, and showed delivery overlap with AMOS.
Sponsored
Just-in-time, just-enough access, scoped to the task, and automatically revoked when work ends.
Attackers reportedly began exploiting CVE-2026-82329 days after disclosure, minting admin tokens in vulnerable JFrog Artifactory deployments.
AliExpress scripts generate inaudible WebAudio sawtooth signals, collect frequency data, and query display size, memory, plugins, WebGL, and mouse activity.
Google is transitioning new Google Meet room hardware from ChromeOS to Android, opening the door to more device types and hardware that can potentially support multiple conferencing platforms. Existing ChromeOS-based Meet hardware will continue receiving support, with newer devices covered through September 2030.
2026.09.02·9to5google.com·3 min read·TLDR IT Palo Alto Networks acquired AI-native ITSM and automation startup Console to expand the agentic capabilities of its Cortex platform. Console connects to identity systems, SaaS apps, and security tools, letting AI agents gather context, execute workflows, and document actions - another sign that IT automation and security operations are increasingly converging.
2026.09.02·networkworld.com·2 min read·TLDR IT Anthropic researchers reportedly found a small internal workspace in Claude, called the J-space, whose activity can reveal concepts related to the model's reasoning before they appear in its output. Exposing this telemetry would give security teams a third detection layer for AI agents, while acknowledging that the J-lens used to read it is imperfect and currently unavailable to enterprises.
2026.09.02·mitiga.io·7 min read·TLDR IT Serval argues that AI-native ITSM can make automating a repetitive support task faster than handling the ticket manually, using natural language to generate code-based workflows. The bigger argument is architectural: legacy ITSM vendors can add agents, but still have to contend with years of accumulated workflows, custom tables, and configuration that newer platforms were built without.
2026.09.02·computerworld.com·10 min read·TLDR IT As AI shifts from recommending actions to actually executing them, traditional technology governance based on security, reliability, and architecture is no longer enough. CIOs increasingly need to define what authority automated systems can exercise, under what conditions, and with what accountability.
2026.09.02·cio.com·9 min read·TLDR IT Microsoft has announced a collaboration with Amazon Web Services to simplify private networking between Microsoft Azure and AWS. The solution combines Azure Multicloud Interconnect with AWS Interconnect, enabling customers to provision high-performance connectivity through an integrated, cloud-native experience built on open API specifications.
2026.09.02·azure.microsoft.com·3 min read·TLDR IT Microsoft's Intune 2608 release adds generally available OS-version assignment filters, giving admins finer control over staged app and policy deployments. It also introduces unattended Remote Help for Windows devices and a redesigned device-management experience.
2026.09.02·petri.com·3 min read·TLDR IT The European Commission designated ChatGPT as a Very Large Online Search Engine under the Digital Services Act, while Reddit and Roblox were classified as Very Large Online Platforms. The companies now have four months to comply with additional obligations around systemic risk assessments, mitigation, transparency, and independent audits.
2026.09.02·digital-strategy.ec.europa.eu·2 min read·TLDR IT Citrix has acquired Numecent, whose Cloudpaging technology packages Windows apps into isolated containers that can be streamed to endpoints without modifying the underlying OS image. Citrix says the approach can simplify app packaging, reduce image sprawl, and make legacy applications easier to manage across physical desktops, DaaS, Windows 365, and Azure Virtual Desktop.
2026.09.02·citrix.com·3 min read·TLDR IT The cloud deployment is intended to help organizations control where sensitive data is processed and stored while addressing security complexity across multi-cloud and AI environments.
2026.09.02·ir.crowdstrike.com·2 min read·TLDR IT Microsoft is centralizing deployment progress, licensing, recommended actions, and setup guidance into a revamped M365 admin dashboard.
2026.09.02·neowin.net·2 min read·TLDR IT Gemini can now detect when another participant needs presentation control and suggest adding them as a co-presenter directly inside Meet.
2026.09.02·workspaceupdates.googleblog.com·1 min read·TLDR IT Google is expanding AI Overviews for some queries, showing a fuller AI answer and the “Ask anything” box by default instead of requiring users to click “Show more”. This pushes traditional organic results further down the page, giving publishers and SEOs less visibility while Google steers more searches toward AI Mode.
The FTC and 22 state attorneys general sued Amazon on Monday, alleging it secretly overcharged advertisers by more than $20 billion through hidden auction surcharges dating back to a 2019 rule change. Amazon had told advertisers its second-price auction system only charged the minimum bid needed to win, but the FTC says Amazon quietly added an undisclosed "soft reserve price" that pushed costs higher. Amazon calls the lawsuit misguided and says its auction system saved advertisers $8 billion between 2021 and 2025, with a trial set to test which version holds up.
Black Friday marketing starts well before the sale for high-consideration products. SparkToro's research found LED skincare shoppers spend months comparing products, reading reviews, and researching results. They use search, AI tools, YouTube, Reddit, and beauty publications. Brands can use this research phase to answer key questions and influence buying decisions early. That way, BFCM campaigns can focus on converting shoppers instead of introducing the product.
ChatGPT and Google are reducing visibility for the listicles and comparison pages that have powered many agency AI visibility programs since 2024. ChatGPT citations for listicles fell 50.5%, from 15.77% to 7.80%, after its August 6 update, while product pages rose to 16.39% of retrieved pages. Brands should audit citation performance by page type and invest more in primary product and pricing pages that provide specifications and real information directly on the vendor's domain. AI visibility now favors useful source material over pages built mainly to match "best," "top," or "vs" queries.
Sponsored
Archive's Archie is an AI agent for creator sourcing in Slack or Teams. Tag @archie with a campaign brief, and it finds creators across platforms. It vets each candidate for brand safety, competitor conflicts, posting consistency, and bot patterns. You get a pre-checked list of creators ready for outreach. Archie is currently invite-only, with a waitlist open for access.
This live masterclass will cover how to expand channels ahead of Black Friday and Cyber Monday to drive sales. Speakers from Ridge, HexClad, AppLovin, and Haus will share strategies for holiday gift campaigns, acquiring new customers, and measuring incrementality. It's happening September 10 from 4-5 PM EST and will include a step-by-step channel expansion playbook.
More than 7,300 US stores closed last year, the most since 2020, while store openings held just as strong, evidence that retail formats are evolving rather than physical stores disappearing. The actual weak point is the merchant model, which has retailers forecasting demand and owning inventory months before they know if it will sell. A growing number of retailers are shifting to a store-in-store setup instead, renting curated space to brands that carry their own inventory risk, the way Harrods lets luxury labels run their own sections and set their own prices. AI shopping agents are pushing the shift further, since faster demand swings raise the cost of the merchant model's forecasting bets.
Marketing problems often stem from internal misalignment rather than weak marketing strategy. Product, Sales, leadership, and Marketing can tell different stories about the customer, problem, differentiation, and value, which creates confusion that campaigns cannot fix. A simple alignment test is to ask five leaders to describe the company in one sentence and compare their answers across five questions about the target customer, problem, differentiation, brand reputation, and buyer beliefs. Marketing becomes more effective when the business first agrees on what it stands for and what buyers need to understand.