Russian helicopter spends 42 seconds in Polish airspace; NATO jets scrambled in Poland and Romania

A Russian Mi-8 military helicopter entered Polish airspace north of Braniewo — the border zone adjacent to Kaliningrad — for 42 seconds on September 23, penetrating roughly 300 meters and forcing Poland to scramble fighter jets. Warsaw confirmed the incident and protested to Moscow. It is the first manned Russian aircraft violation since an Su-24 reconnaissance plane crossed over the Gulf of Gdańsk in February 2025, and follows an escalating series of Russian drone incursions into Poland since September 2025. ISW assesses this as part of Russia’s “Phase Zero” campaign — using airspace probes to test NATO readiness and set psychological conditions for potential future aggression. Polish FM Sikorski told Al Jazeera that Russia “doesn’t have the forces to invade NATO,” though Warsaw has also been preparing civilian evacuation plans.

Altman and Amodei ask the UN for global AI rules; Trump administration resists

Sam Altman warned the UN Security Council on Wednesday that artificial intelligence could pose a danger to humanity unless governments intervene now — “before they turn into catastrophes.” It is the first time a private technology company has addressed the Security Council on AI risk. Altman called for binding international rules as systems rapidly become more capable and autonomous, and acknowledged that tech companies “don’t have all the answers” on AI policy. The CEOs of OpenAI and Anthropic both addressed the General Assembly calling for international coordination. The Trump administration has declined to establish new regulatory guardrails — a visible split between industry calls for governance frameworks and US policy direction. Norges statsminister Støre og Finlands president Stubb lanserte parallelt et eget nordisk initiativ for internasjonal KI-kontroll.

Trump hosts Xi on state visit; US-China trade truce extended two months

Xi Jinping arrived at Joint Base Andrews to a rare personal welcome from Trump — a red carpet and B-1 bomber flyover underscoring the summit’s symbolic weight, and a break with protocol for a US president. It is the first Chinese state visit to Washington in ten years and the pair’s third in-person meeting in under a year. The Treasury Secretary announced a two-month extension of the “Busan agreement” pausing trade-war hostilities. AI governance, cybersecurity, Taiwan and Iran are on the agenda, though analysts caution against expecting major deliverables, calling it primarily a relationship-stabilization exercise. Økonomer advarer om at begge sider «kjøper seg tid» uten å løse de strukturelle motsetningene, og Kinas statspropaganda brukte Trumps varme velkomst aktivt. E24 spør om møtet kan gi Norge en tollpause.

Iran’s Pezeshkian defies Trump at UNGA, signals willingness to talk

Iranian President Masoud Pezeshkian told the UN General Assembly that Iran would never “bend the knee,” calling the US the true bully and terrorist in the Middle East — a day after Trump threatened to “annihilate” Iran from the same podium. The US delegation walked out when Pezeshkian held up images of children killed in US strikes. Yet he also signalled readiness for dialogue “without the language of force,” leaving diplomatic space open despite the defiance. Iran’s offer this week to reopen Hormuz adds context to whether any deal is imminent.

Azerbaijan pardons French citizen after EU lifts sanctions on Usmanov and Fridman

France’s Martin Ryan was pardoned by Azerbaijan months after being jailed on espionage charges — following the EU’s quiet removal of oligarchs Alisher Usmanov and Mikhail Fridman from its Russia sanctions list. A second French national remains imprisoned. The timing strongly suggests a transactional arrangement: a European hostage released in exchange for sanctions relief from Brussels. Usmanov – Russlands rikeste mann og omtalt som «en av Putins favorittoligarker» – fikk medalje av Putin for «enorme bidrag» til Russland i 2018, og fjerningen vekker sterk bekymring blant sanksjonseksperter.

China now holds diverted F-35 stealth parts sent through Hong Kong

Bloomberg reports that China has taken actual possession of sensitive F-35 components that were diverted to Hong Kong — an update to the Australian investigation into parts that went missing in transit to the US. The missing items are reportedly the radar-absorbing canopy glass and weapons bay doors, both carrying the aircraft’s critical stealth coating. The confirmed transfer of advanced stealth technology is a major intelligence and supply-chain security breach. A r/norge thread flagged that Norwegian media appear to have ignored the story entirely, despite Norway operating the F-35 as its primary fighter.

Federal judge orders Trump to restore White House access for CNN, Politico and MS Now

A US district judge ordered the Trump administration to temporarily reinstate press credentials for CNN, MS Now and Politico, finding the ban “likely unconstitutional” and a probable First Amendment violation. Journalists from the three outlets had been denied access over the weekend, and the outlets sued. The ruling came the day after an initial hearing at which DOJ lawyers defended the ban as a national security matter.

DOJ warns domestic AI critics they may face criminal liability as foreign agents

The Trump administration is characterizing domestic opposition to AI data center construction as Chinese-directed propaganda. The DOJ warned that “public demonstrations designed to further the propaganda or other goals of the foreign power may result in significant civil or criminal sanctions.” The key evidence rests on Neville Roy Singham’s network of left-wing nonprofits — but the administration’s lead witness, Kevin O’Leary, admitted in June having “no evidence” of Chinese funding and now faces defamation lawsuits. The move to label protest as foreign influence comes as Gallup polling shows 71% of Americans oppose AI data centers in their area.

Israel hit by weeks-long water crisis triggered by its own destruction of Gaza treatment plants

An exceptional algae bloom has crippled five of Israel’s desalination plants, causing a water shortage expected to last weeks. Scientists say the bloom was triggered by the destruction of Gaza’s wastewater treatment facilities in Israeli strikes, which sent sewage and pollutants into Israeli coastal waters — the cross-border environmental consequences of the conflict turning back on Israel itself.

Ukraine’s naval drones disable 300 shadow fleet vessels; Russia kills civilian ship captain in Black Sea

Ukraine’s Unmanned Systems Forces announced that Operation MoLoCHKa has rendered 300 Russian shadow fleet vessels unable to move under their own power across the Black Sea and Sea of Azov since July 6 — 134 in Azov, 166 in the Black Sea. The same night, Russia struck an Antigua-and-Barbuda-flagged civilian cargo ship in the Black Sea, causing a fire and killing the ship’s captain.

Ukraine advances in Dnipropetrovsk Oblast; Operation Vivaldi deepens near Lyman

Ukrainian forces liberated Shevchenko, southeast of Oleksandrivka, and have advanced roughly eight kilometers toward Burlatske since early August, with additional gains north of Vilne Pole and into Pavlivka on the Yanchur River’s eastern bank. Further south, Ukraine pushed beyond the Mokri Yaly River to the outskirts of Horikhove and Perebudova, complicating Russian positions along the Vovcha–Mokri Yaly confluence. In the Lyman direction, Operation Vivaldi continues with counterattacks reportedly pushing southeast toward Yampil and across the Siversky Donets. Russian encirclement claims around Dobropillya and northern Kharkiv remain debunked — now even by Russian milbloggers, who concede the situation amounts to fire control rather than physical envelopment.

Ukraine transfers two captured North Korean soldiers to South Korea

Zelensky announced that Ukraine has handed over two captured North Korean soldiers to South Korea — the first such transfer, formally and publicly documenting North Korea’s troop deployment in Russia. It gives Seoul direct human intelligence and raises international pressure on Pyongyang.

Norges Bank avgjør renten i dag – uvanlig splittet marked

Norges Banks rentemøte torsdag kl. 10 er dagens store pengepolitiske begivenhet. Økonomer og markeder er uvanlig delt: noen venter uendret rente, andre en heving til 4,5 prosent. Kjernen i uenigheten er prisvekst kontra boligmarkedets sårbarhet – inflasjonen er fortsatt problematisk, men sommertallene kom noe lavere enn ventet. Sveriges riksbank holdt sin rente uendret på 1,75 prosent onsdag, mens norsk styringsrente allerede er over det dobbelte. En rentepause kan svekke kronen ytterligere.

Bytedance bruker norsk datasenter til å omgå Nvidia-eksportforbud

Financial Times avslører at TikToks kinesiske eier Bytedance leier 2 304 Nvidia B200-brikker ved Nscales datasenter i Glomfjord i Nordland – gjennom et singaporsk datterselskap kalt Spring (SG) PTE Ltd. Leasing i utlandet er et smutthull som lar Bytedance omgå amerikanske eksportrestriksjoner som forbyr direkte salg til Kina. Bytedance stod for 73 prosent av Nscales 33 millioner dollar i inntekter, men er ikke nevnt i selskapets børsprospekt for en planlagt NYSE-notering til 35 milliarder dollar. Nscale er kontrollert av Aker-systemet. Arrangementet skaffet Nscale et lån på 105 millioner dollar fra Macquarie Bank.

Epstein-saken: Rød-Larsen beklager dypt, Stortinget kaller inn til høring

I NRK-dokumentaren «Diplomatparet» sier Terje Rød-Larsen at han «beklager dypt» forholdet til Jeffrey Epstein og burde ha kuttet forbindelsen tidligere. Han mottok et lån på 130 000 dollar fra Epstein (tilbakebetalt), besøkte øya hans i 2011, og tenketanken IPI mottok rundt 5 millioner kroner. Rød-Larsen og kona Mona Juul er tiltalt for grovt bedrageri. Tidligere statsminister Bondevik sier han googlet Epstein og avslo millionbidrag etter søket. Stortingets kontrollkomité kaller inn til høring neste uke – komitéleder Per-Willy Amundsen sier han «kunne ha innkalt langt flere». Erik Solheim kaller høringen «en absurd overreaksjon».

Norges nye fjerntog lansert i Berlin – mens statsråden erkjenner at «vi har sviktet jernbanen»

Stadler viste frem Norges 17 nye fjerntog på InnoTrans-messen i Berlin onsdag – en kontrakt på 8 milliarder kroner fra 2023. Togene er 220 meter lange, har topphastighet på 200 km/t og introduserer sovekupéer som kan brukes som dagsitteplasser, utvidet kafévogn og familievogn med lekeområde. Nordlandsbanen får bimodale tog (elektrisk og diesel). Første tog til Bergensbanen i 2028, alle 17 i drift innen 2030. Togene ankommer Norge i januar for testing – tilgang til spor pekes ut som den største utfordringen.

Samme dag innrømmet ny samferdselsminister Kamzy Gunaratnam at skiftende regjeringer har forsømt vedlikeholdet: «Vi har sviktet jernbanen.» Lokomotivførernes streik mot Vy er inne i sin andre uke uten fremgang – «det er ingen direkte dialog mellom partene nå», sier forbundsleder Rolf Ringdal. Tvungen mekling hos Riksmekleren er neste skritt. Partene er uenige om selve tallene i lønnskravet: Spekter hevder kravet er tre ganger høyere enn frontfaget, noe forbundet avviser.

Oslo-budsjettet 2027: Eiendomsskatten fjernes

Byrådet (Høyre/Venstre) legger frem Oslo-budsjettet for 2027 og innfrir to sentrale valgløfter: eiendomsskatten på boliger avvikles (478 millioner kroner) og månedskortet gjøres permanent til 495 kroner (220 millioner). Totalbudsjettet er på 106 milliarder kroner. Næringseiendom skattlegges fortsatt. Kritikere påpeker at 1,9 milliarder i innstramminger siden 2024 har satt kommunale tjenester under press, og at skatteletten primært gagner velstående boligeiere – Aps Scharning Lund kaller det bevis på «hvem Høyre styrer for». Opposisjonen lover å gjeninnføre skatten om de vinner kommunevalget.

Støre i FN: Møtte Zelenskyj, Irans president og New Yorks borgermester

Statsminister Jonas Gahr Støre hadde en travel uke i New York: han møtte Zelenskyj og Finlands president Stubb for å diskutere fredsbetingelser og russiske angrep, møtte Irans president Pezeshkian og uttrykte norsk bekymring for Hormuzstredet, og lanserte sammen med Stubb et norsk-finsk initiativ for internasjonal styring av kunstig intelligens. Han møtte også New Yorks borgermester Zohran Mamdani – som fikk en Arsenal-drakt med Ødegaards autograf.

Radicle: critical vulnerability affects all versions — stop using private repos

Radicle disclosed two critical flaws affecting every released version of the decentralized git platform: network traffic is neither encrypted nor authenticated, and the peer authentication handshake is broken, allowing attackers to impersonate allow-listed Node IDs and access private repositories without being on-path. Fixing this requires a complete backwards-incompatible protocol replacement; the team plans to adopt the iroh P2P networking stack, but no release timeline has been given. Users are advised to stop using private repositories over the network until a patched version ships.

BGP hijack + fraudulent TLS certificate = malicious Virtualizor updates

On August 28, attackers hijacked a /24 prefix belonging to Softaculous Ltd, maker of the Virtualizor VM platform, forging an RPKI-valid AS path to exploit longest-prefix-match routing. With traffic rerouted, they intercepted Let’s Encrypt validation requests and obtained a legitimate TLS certificate — then served malicious Virtualizor update packages to a small number of installations under full HTTPS. The attack demonstrates that RPKI route origin validation alone is insufficient: stricter ROA max-prefix-length policies would have limited propagation and likely blocked fraudulent certificate issuance.

Tailscale v1.104 ships meaningful performance improvements

Multi-queue packet processing for exit nodes and subnet routers reduces latency by parallelizing the read-to-send pipeline; a smarter buffer allocator reads into a single large buffer rather than per-packet 64 KiB allocations (~5% throughput gain); vectorized writes via Linux writev cut memory duplication; and local netmap caching cuts startup time by up to two orders of magnitude when the control plane is unreachable.

Cloudflare adds HTTP Vary support with intelligent normalization

Cloudflare’s new Vary support in Cache Rules lets operators declare per-header caching strategies: normalize (collapse equivalent values — reordering, lowercasing — so they share cache entries), passthrough (treat exact values as distinct), or bypass (skip caching for high-cardinality headers). This solves Vary’s classic fragmentation problem: a request with Accept-Language: en-US, fr;q=0.8 and one with Accept-Language: fr;q=0.8, en-GB both prefer English but produce separate cache entries without normalization. Available on all pricing tiers.

Futhark: don’t let your type system track aliasing

The Futhark compiler team documents why tracking aliasing through a type system — something Futhark does to guarantee in-place array updates — creates cascading complexity: abstract types obscure aliasing, polymorphism introduces conservative over-approximations, higher-order functions require tracking closure aliasing, and tuple components need sophisticated analysis. Their hard-won advice: unless you have genuine operational constraints that demand compile-time aliasing guarantees, don’t do it. For most languages seeking in-place mutation, APL/Koka/Lean-style reference counting is the right tool.

SecretSpec 0.21 adds Resolver IPC for Nix secret injection

SecretSpec 0.21 introduces two JSON-RPC protocols: a Resolver IPC that lets external tools request individual named secrets from a separate resolver process over a private stdio connection (results can be inline values or leased temporary files that clean up on session close), and an External Provider protocol so executables outside SecretSpec can act as secret providers. Work on a forthcoming Nix integration drove the resolver design — it would let Nix request forge tokens, netrc credentials and build secrets at use time without embedding values in configuration. The release also adds binary secret handling and new key types including WireGuard, age, OpenPGP, SSH and x509 identities.

nix-grpc-store + Niks3: distributed Nix builds over the internet

Numtide’s Jörg Thalheim details replacing the SSH-based remote builder protocol — designed for rack-local latency at TU Delft — with a gRPC-based approach that tolerates WAN conditions. In “farm mode” one builder becomes a scheduler and workers connect to it; finished builds upload to Niks3, a binary cache service backed by S3-compatible storage (Garage, SeaweedFS). The system routes around offline machines and full disks, and removes the per-developer burden of keeping /etc/nix/machines in sync across a fleet.

Nati: instant NixOS theme switching without Home Manager rebuilds

A Zig-written theme manager that sidesteps the ~15-second Home Manager rebuild cycle. Theme definitions and target apps go in your NixOS configuration; on rebuild, the info compiles into a manifest.json. At runtime, nati switches themes by atomically updating symlinks and running app reload scripts — no rebuild, no session restart. GTK theming is supported with automatic dconf synchronization. The project targets users who prefer NixOS-native wrapper-centric dotfiles over Home Manager.

DrvGraph: preview the Nix dependency graph before you build

DrvGraph traverses a package’s derivation graph and shows everything that needs to be built or fetched in a tree representation — before actually running the build. Useful for estimating build cost upfront instead of cancelling nom mid-run. Written in Haskell (the author’s first Haskell project).

impasto 0.3: Hyprland shell adds face unlock and desktop notes

Third release of the Hyprland/Quickshell shell where the entire desktop repaints from the active wallpaper. New in 0.3: facial recognition unlock on the lock screen, a redesigned lock screen, a pastel desktop notes deck, and a sound spectrum visualizer. Ships pre-configured with 40 applications that all follow the wallpaper-derived color palette.

Ten years of tmux: diagnosing 15% CPU from status bar forking

A decade of tmux configuration, with a useful root-cause analysis: a status bar that forked a new shell process six times per second was consuming 15% of a CPU core. The post covers the optimisation approach (avoiding subshell spawning for status data) and documents the resulting 1,495-line zsh setup, including a history runner, slide-out pane workflow, and something.rs:128:9 editor-jump integration.