Trump plans $2.8bn sale of 2,000-lb bombs to Israel — the largest in recent years

The Trump administration is preparing a $2.8 billion sale of 2,000-pound bombs to Israel, the largest single sale of these munitions in recent years. The Biden administration had paused delivery of the same weapons over documented concerns about mass civilian casualties in Gaza. The planned sale signals a return to unrestricted arms flows. In Gaza City, at least 12 Palestinians were killed and up to 70 were missing after a residential building collapsed, with rescue crews pulling survivors from the rubble while cries for help continued beneath.

Georgian Dream moves to ban all major opposition parties

Georgia’s ruling Georgian Dream party has announced plans to ban all major opposition parties — a move that would eliminate organised political opposition in the country entirely. The announcement follows Georgian Dream’s disputed re-election last year and its subsequent turn away from EU integration. International observers and civil society groups warn the ban would mark a definitive end to democratic pluralism in Georgia.

Hungary’s democratic reset: anti-LGBTQ law to be amended, Sovereignty Protection Office closed, Orbán absent from public life

Hungary has announced it will amend its anti-LGBTQ legislation to comply with EU standards — a reversal after years of confrontation with Brussels. It fits Carnegie Endowment’s first assessment of the post-Orbán government, which finds Péter Magyar governing with energy and democratic seriousness. Concrete early moves: closing the Sovereignty Protection Office (used to intimidate civil society), opening the former PM’s gilded offices to the public, and pushing constitutional reform. Orbán has been absent from public life and faces term limits; Fidesz has no obvious levers of influence as a weak opposition facing a supermajority. The analysis cautions that the hardest work lies ahead — systematic constitutional reform, turning corruption revelations into prosecutions, and sustaining early economic improvement.

The contrast with Turkey is stark: authorities there arrested dozens of LGBTQ+ activists on Tuesday in what the BBC describes as an escalation of the government’s sustained campaign against the community, following last week’s mass raids.

Brazil’s Supreme Court in its deepest crisis since the return of democracy, days before a dead-heat election

Brazil’s Supreme Court has been thrust into what legal experts describe as its gravest constitutional crisis since the 1980s return to democracy, as two rival justices locked horns in a scandal that erupted at the peak of the presidential campaign. Polls show the race between Bolsonaro’s candidate and Lula’s camp in a virtual dead heat. The crisis risks delegitimising rulings that could determine the outcome. Further north, a new global democracy report finds the United States at its lowest level of democratic performance in the 50 years it has been tracked, citing erosion across multiple governance dimensions.

China inaugurates the Pinglu Canal, its first modern river-to-sea link

China opened the Pinglu Canal on Wednesday — a 134 km channel linking the Xijiang River to the Beibu Gulf in Guangxi province. The canal cuts shipping distances from China’s southwestern interior to Southeast Asian ports by 560 km and is projected to reduce logistics costs by 18–30%, at an estimated construction cost of $10.8bn. It gives vast inland provinces such as Yunnan and Guizhou a new sea route, as China–Southeast Asia trade surges 18% year-on-year.

Half of Russia’s largest diesel producers cut output as the strike campaign compounds

Three of Russia’s six largest diesel producers have halted or sharply reduced output following Ukrainian strikes, Reuters reports. Recent confirmed damage: the Syzran refinery (8.9M ton/year capacity) had its primary oil processing unit and tank farm struck overnight; the Slavyansk-on-Kuban refinery had three tanks destroyed in a September 13 strike; and Metafrax Chemicals in Perm Krai suspended operations after a September 11 strike. Ukraine also struck the Atlant Aero drone production facility in Taganrog, a Nebo-M radar near Millerovo, and drone sites in Oryol Oblast. The sustained campaign against Russian fuel infrastructure is now showing measurable aggregate supply effects.

Strikes continue within hours of Trump’s claimed “energy truce”; Peskov conditions Russian participation on lifting sanctions

A Russian drone seriously injured a man at a Kyiv petrol station and Ukraine launched long-range strikes deep into Russia — both within hours of Trump announcing the two sides had agreed to halt attacks on energy infrastructure. Peskov called the ceasefire a “good idea” but conditioned Russian participation on the West lifting energy sanctions, effectively rejecting it. The sequence raises the basic question of what an informal, unverified “truce” announcement means when neither side has signed anything.

In Washington, the House set a date for a final vote on sweeping Russia sanctions including tariffs on buyers of Russian energy. Separately, US envoy Coale met Lukashenko in Minsk and reportedly promised to unfreeze Belarusian assets — ISW warns this could directly benefit Russia given its de facto annexation of Belarus and their shared defence industrial base. Belarus meanwhile launched military exercises near its borders with Poland and Lithuania, framed as drills to “protect sovereignty and territorial integrity”.

Russian drone strikes a passenger bus in Nikopol, killing five; train attacks escalate near the Polish border

A Russian drone struck a passenger bus in the Nikopol district of Dnipropetrovsk Oblast on September 16, killing five and injuring at least seven. Russia has intensified drone strikes against passenger trains and rail infrastructure in Volyn Oblast — a locomotive near the Polish border was struck overnight, and former CIA director David Petraeus was reportedly aboard one of the targeted trains during the same period.

Russian intelligence is recruiting violence-obsessed UK teenagers as disposable agents

Russian agents are infiltrating “Com networks” — online communities where predominantly teenage members compete for status through extreme acts of vandalism, violence, and worse — and offering money, guns, and bomb-making instructions in exchange for sabotage operations. At least two incidents in Britain have already been linked to these recruitment efforts. The tactic is part of a broader European hybrid campaign that has included the failed Leipzig airport drone attack (August 2026, one device with a faulty detonator), cable sabotage, and other grey-zone operations. Using teenagers from pre-existing extremist communities provides plausible deniability while generating real operational effect at low cost.

Russia now sends warships to protect its shadow fleet — the EU’s next moves

An ISS Europa policy analysis documents a significant escalation: Russia has begun relisting shadow fleet vessels under its own flag mid-voyage rather than maintaining deniability, and in January 2026 dispatched a submarine and naval vessels to protect the Bella 1/Marinera as US naval assets pursued it across the Atlantic. The analysis proposes three new EU tools beyond the existing maritime services ban and sanctions: using low-emission zone regulations to deny access to the ageing polluting vessels; interrogating and arresting captains as intelligence sources and to raise recruitment costs; and extending sanctions to cover LNG trading and Russian weapons smuggling routes using the same vessels.

Russia is transferring supersonic cruise missile technology to Iran — and straining the shared US interceptor pool

Leaked correspondence reported by the Financial Times and analyzed in War on the Rocks’ Ukraine Compass reveals Russia’s C430L program is transferring direct-flow air-jet engines for supersonic cruise missiles to Iran, facilitated by Rosoboronexport and NPO Mashinostroyeniya. The arrangement is reciprocal: Iran supplies Shahed drones and reverse-engineered X-55-based missiles to Russia. A Ukrainian military analyst argues the transfers serve a dual strategic purpose — bolstering Iran’s offensive capabilities while deliberately straining the shared pool of US interceptor missiles (Patriot, NASAMS) that simultaneously defend Ukraine and Middle East allies.

Three former Pentagon officials: Trump has already structurally damaged NATO deterrence; Finland joins France’s nuclear umbrella

Writing in Foreign Affairs, three former senior Pentagon officials (including two former Undersecretaries of Defense for Policy) enumerate concrete acts since January 2025: permanently removing ~1,000 troops from Romania; canceling the Dark Eagle hypersonic deployment to Europe that would have held Russian targets at risk; and canceling the Second Armored Brigade Combat Team deployment. They argue the damage extends to the “nuclear release chain” — command arrangements governing US nuclear employment since the 1950s, which depends on SACEUR being an American four-star officer — and urge Congress to lock this in statute.

Europe is already building alternatives: Finland has decided to join France’s nuclear deterrence framework, the latest sign that European states are constructing security architecture that does not depend solely on the American guarantee.

Houthi drone shot down near Mecca; Saudi Arabia declares pilgrims’ security a “red line”

Saudi air defences intercepted and destroyed a Houthi drone south of Mecca on Tuesday before it entered prohibited airspace over Islam’s holiest city. Saudi Arabia called the protection of pilgrims a “red line” while the Houthis denied targeting Mecca. Israel has reportedly been sharing Houthi intelligence with Saudi Arabia. The weekend blitz that seized the oil corridor is the most prominent assertion yet of Houthi leader Abdulmalik Al-Houthi, commanding a 350,000-strong force with proven long-range missile and drone capability. Fighting across Yemen has displaced 100,000 people, prompting a UN humanitarian warning, as the Houthis threaten a second day of strikes on Saudi cities and Qatar sounds the alarm over Bab al-Mandab.

Saudi Arabia, Turkey and Pakistan each think they’re the patron of their new defence alliance

The “Mecca Joint Defence Agreement” unites three powers each believing it holds the senior role: Saudi Arabia controls financing (it recently froze a $1.5B Sudan arms deal to pressure Islamabad on economic reforms); Turkey holds defence industrial advantage including Bayraktar drones and a fifth-generation fighter program; Pakistan contributes 660,000 troops plus the nuclear and ballistic missile arsenal that both Riyadh and Ankara covet. No member holds enough leverage to make a hierarchy stick, creating an unstable multi-patron dynamic — timely given Saudi Arabia may need Pakistan’s manpower for potential Yemen ground operations in coming months.

How China’s biggest bank spirited $1 billion out of London for Huawei after the US indictment

An ICIJ and Times investigation drawing on internal ICBC bank records reveals that London branch staff mobilized over a Saturday to transfer approximately $1 billion to Huawei within hours of an emergency demand — days after the US Justice Department indicted Huawei and CFO Meng Wanzhou for sanctions violations and money laundering. An external due diligence firm had rated Huawei “Very high risk”; compliance officers had voted to suspend business. The bank’s money laundering reporting officer Eric Guegan launched an internal investigation, documented that the transfer happened “under pressure from Huawei” and Beijing headquarters, wrote that senior management had waged a “sustained campaign” to retain the business, and then resigned. The episode illustrates how ICBC London functions as an instrument of Chinese state policy rather than a compliant Western bank.

The age of strategic exclusion: when great-power competition becomes deliberate denial

A War on the Rocks analysis by Patrick Gill-Tiney (King’s College London) introduces “strategic exclusion” as a framework for the shift from major powers competing within shared-access arrangements to deliberately denying rivals access through territory, technology, infrastructure and economic relationships. Drawing on pre-WWII Japan–US dynamics and Soviet consolidation of Eastern Europe, he finds that monopolization raises the probability of major-power conflict by 12.3 percentage points above a 4.7% baseline across 1816–2010. The key risk: exclusion becomes self-reinforcing as countermeasures beget further exclusion. The prescription distinguishes resilience (diversifying supply chains without restricting rivals) from exclusion, urging the latter only where there is a demonstrable connection to military capabilities.

AWS cannot restore Bahrain and UAE cloud regions six months after Iranian strikes

Amazon Web Services has announced it is unable to restore service to its Bahrain and UAE data centre facilities, which were destroyed or severely damaged in Iranian strikes, now six months into the conflict. No restoration timeline has been given. The prolonged outage is a significant and underreported consequence of the war for global cloud infrastructure and the companies relying on those regions.

Linux GPU driver for the Apple M4 built in one month using LLM-assisted reverse engineering

Cody Ho built a Mesa/Gallium driver for the Apple M4 Mac Mini in one month, using Codex to reverse-engineer the GPU firmware ABI. The technique: capture full GPU memory state during a known workload, replay it to confirm behavior, then iteratively reduce which pages needed copying until everything could be reconstructed from source. Codex had “good taste about when to poke the hardware vs. capture state.” Result: OpenGL ES 3.0 conformance, Minecraft at 212fps, three.js WebGL demos in Chrome and Firefox. A genuine case study in AI-assisted low-level systems work — the RE approach itself is the novel contribution.

Apple Reference Image: post-quantum photo authenticity without identity exposure

Apple published the technical design of Reference Image, a hardware-rooted photo verification system. An iPhone camera sensor signature (certified at the factory) is bound to a content hash developed inside Private Cloud Compute, timestamped, and signed with a composite post-quantum signature (RSA-3072 + ML-DSA-87) — designed to remain verifiable indefinitely. Apple cannot see image contents; an outside observer cannot correlate which device took two reference images. If a device is later found compromised, its images can be revoked. Meaningfully different from C2PA-style schemes in its hardware binding and privacy guarantees.

GitHub admin access via a PAT buried in container image build history

Strix’s autonomous AI scanner found a 2023 GitHub personal access token not in a container image’s files, but in its build history. The token still had admin write access to Baseten’s product and deployment repositories. Strix discovered it without hints — followed the Harbor registry, pulled an image, found a credential in build metadata, tested it, confirmed admin access — in about 25 minutes. Baseten rotated the token within hours. The lesson: changing the Dockerfile doesn’t erase credentials from already-pushed images, and build history is a persistent attack surface that image content scans miss.

Claude subscription limits hitting harder than Anthropic’s stated 17% reduction

Multiple r/ClaudeAI threads report that Anthropic’s recently introduced weekly usage limits are far more restrictive in practice than the company’s stated ~17% reduction. Users describe exhausting limits during single ordinary work sessions — one reported the cap triggering during a resume review on Opus 5 Max. At least one employer reports considering dropping Claude for team use entirely. The discrepancy between stated and observed limits remains unexplained by Anthropic. Related: Cachebeat, a Claude Code skill that sends a lightweight heartbeat before the prompt cache TTL expires (~1 hour) — a single cache miss in a long tool-heavy session costs hundreds of thousands of tokens, and on Pro/Max also eats into those limits.

iOS 27 code reveals a two-tier architecture for replacing Siri with Claude or ChatGPT

Researcher pdfu found two AI-swap protocols in iOS 27 / macOS Golden Gate private frameworks. The surface-level Model Delegation Protocol works like the existing ChatGPT extension. The deeper Inference Provider Protocol replaces Apple’s server-side Siri model entirely — the third-party model receives Apple’s native Siri planner prompts and tool definitions, can directly request system actions, and accesses personal data before responding through Siri’s interface. ChatGPT is already live in the macOS 27 RC; Claude is present in the code but not yet activated. The EU Digital Markets Act is the direct driver.

Frontier agents pass engineering tasks but fail open-ended ML research, undermining RSI timelines

A new paper, “Can AI agents conduct open-ended AI research?”, used “shadow evaluations” — giving frontier agents the actual research questions from unpublished NeurIPS 2026 submissions, then having the original authors judge the output. Agents completed all engineering tasks autonomously but made no meaningful progress on the research questions themselves; both resulting papers were rejected. Five recurring failure patterns emerged: weak publication-standards judgment, unimaginative responses to design obstacles, poor recovery from failed research directions, inadequate resource awareness, and drift from original instructions. The gap between engineering execution and research judgment is the paper’s direct argument against near-term recursive self-improvement.

Jay Kruer makes a complementary argument about the LLM Navier-Stokes proof: the theorem statement is already a maximally rigorous specification — decades of community auditing, battle-tested mathlib primitives, a trustworthy verifier. Real engineering rarely has that. Rigorous specification costs 3–5× the labor of implementation, the intersection of domain experts with specification experts is “ludicrously small”, and soundness bugs in proof assistants have already let LLMs launder bogus proofs. Navier-Stokes is the best case, not the representative one.

Trail of Bits: 1Password’s AI patching benchmark is misleading

Trail of Bits dissects 1Password’s “Patch the Planet” AI patching report. Key problems: the 6-target mean carries a ±9 percentage point standard error that goes undisclosed; the sample wasn’t chosen to be representative; agents were given restricted tool access without flagging this in results. The sharpest detail: the freenginx patch that AI was criticized for leaving incomplete — the human maintainer’s replacement fix introduced the same crash. Trail of Bits proposes a methodological standard: representative samples, disclosed model configurations, correctness verified beyond the supplied exploit.

TabPFN-3.5 leads both major tabular benchmarks with thinking and fast variants

Prior Labs released TabPFN-3.5, which now leads TabArena (27 methods, 51 datasets) and BeyondArena (142 datasets) by ~150 Elo over the previous leader — up to 250 Elo ahead on text-rich and high-cardinality data. Three variants ship: Thinking (+44 Elo on TabArena) for high-stakes tasks, Plus for datasets with product descriptions and notes, and Fast (alpha) at 6× inference speed. The model supports up to 1M rows and 200 features, requires no hyperparameter tuning, and users report zero-shot performance beating carefully tuned baselines on real-world business data.

SHADOW-50M: a 19.8 MB ternary LLM with deterministic arithmetic circuits and disk-based memory

SHADOW-50M-Instruct is a 44M-parameter proof-of-concept combining ternary quantization (-1, 0, +1 weights) with “exact circuits” — deterministic sub-graphs triggered by special tokens ([calc], [sort], etc.) that handle arithmetic, date math and unit conversion without probabilistic generation. At 19.8 MB on disk and 41 MB RAM it runs ~1,900 tok/s on CPU. A separate disk-memory layer stores compressed attention states at 288 bytes/token with sub-millisecond retrieval, demonstrated as an MCP memory server for larger models. Standard benchmark scores trail comparable float models, but the architecture targets embedded retrieval and compute tasks.