Ethiopia says it faces ‘all-out invasion’ from Eritrea as border conflict deepens

Ethiopia issued its sharpest warning yet, declaring that it must defend itself against what it called an “all-out invasion” by Eritrea. Truckloads of Eritrean soldiers have been filmed driving across the border, and Addis Ababa has responded with drone strikes on advancing Eritrean forces. The escalation risks drawing in Tigrayan armed groups and reigniting the most dangerous fault line in the Horn of Africa less than two years after the Pretoria peace agreement.

Panama struck by 7.7 earthquake; president declares major disaster

A magnitude 7.7 earthquake struck southern Panama on Friday, triggering tsunami warnings for neighbouring countries and sending thousands of residents into the streets of the capital. Buildings and roads collapsed, and a second quake followed. Panama’s president declared a major disaster. The country appeared to escape mass casualties — an unusual outcome for a quake of this size — but infrastructure damage is significant.

Hurricane Isaias makes landfall on US Gulf Coast

Isaias crashed into the Gulf Coast as a dangerous Category 2 storm, battering communities in Alabama and the Florida panhandle with damaging winds, heavy rain, and life-threatening storm surge. The governors of Mississippi, Alabama, and Florida declared states of emergency. The storm is the first Atlantic hurricane of an unusually late 2026 season — and the first major test for a FEMA that has been significantly downsized under the Trump administration.

India detains 10,000 ahead of Delhi protest demanding election chief’s resignation

Indian authorities detained more than 10,000 people across the country — before the demonstration had even begun — as the Cockroach Janta Party prepared a mass march on Delhi’s Jantar Mantar. The group demands the resignation of Chief Election Commissioner Gyanesh Kumar over alleged manipulation of voter rolls. New Delhi was placed in effective lockdown with heavy police deployments and transport restrictions. Civil liberties organisations described the pre-emptive mass detention as amounting to a state of emergency.

Thousands march on Islamabad demanding Imran Khan’s release

Thousands of supporters of jailed former Pakistani Prime Minister Imran Khan are marching toward Islamabad to demand his release, after he has been held in prison since 2023 on charges widely seen by his supporters as politically motivated. The march, organised by Khan’s PTI party, is the most significant mobilisation in months and increases pressure on Pakistan’s military-backed government ahead of potential political negotiations.

Eurozone rules out rescue as France debt crisis spreads

The eurozone has explicitly ruled out a bailout mechanism for France as fears about French sovereign debt spread through financial markets. France’s widening fiscal gap — exacerbated by political paralysis and the costs of the student-protest concessions — is being watched as a potential systemic risk for the euro area, with bond spreads widening and analysts drawing parallels to the 2010s peripheral debt crises.

Ukraine hits Rostov oil terminal hours after the diesel deal — deep-strike campaign continues

Hours after Trump’s announcement, Ukrainian drones struck the Novoshakhtinsk oil loading terminal in Rostov Oblast, triggering a large fire and damaging a nearby rail bridge. The broader campaign, which Kyiv says will continue regardless of US pressure, also claimed the second Yandex data centre in two days — the Kaluga facility housing 3,800 server racks — knocking out Moscow taxis, delivery, and Yandex’s Alisa service; the company acknowledges customers may face continued outages. The Ukrainian General Staff confirmed strikes on a Kh-55/Kh-101 cruise missile fuel plant in Tver (the Redkinsky Plant) and missile launch facilities in Nizhny Novgorod. The Ukhta refinery in Komi Republic, 1,780 km from the front, was also struck with new An-196 RS drones. Western sanctions will likely prevent Russia from quickly replacing the semiconductors and precision components destroyed across these sites.

Russian bombs kill five in Zaporizhzhia residential strike, including two children

Russian guided aerial bombs struck a five-storey residential building in Zaporizhzhia on October 10, partially destroying one section and damaging at least 26 buildings. Five people were killed including two children; 23 were injured. Separately, a first-ever jet-powered drone attack on Lviv was intercepted by air defences with no casualties.

Frontline: post-Vivaldi gains hold as both sides race the rasputitsa

Ukrainian forces continue pushing toward the Zherebets River northeast of Lyman as Operation Vivaldi’s gains consolidate, supported by a large assembled artillery group that prevented Russia from feeding reserves back into the breach. A Ukrainian bridgehead has developed south of the Siverskyi Donets near Pyskunivka, east of Slovyansk, threatening Russian staging areas, and Ukrainian forces liberated Fedorivka east of Oleksandrivka. On the offensive side, Russian forces are sharply escalating at Dobropillya and in northern Kharkiv (Kozacha Lopan), resorting to unusual daytime assaults across open terrain — a sign of urgency to seize ground before the autumn rasputitsa makes movement impractical. A Kremlin-affiliated milblogger acknowledged that continued Ukrainian pressure on the northern flank makes the Dobropillya push “practically pointless” as a wide encirclement attempt.

Montenegro arrests Rybar founder — then deports him to Russia within hours

Montenegrin authorities detained Mikhail Zvinchuk, founder of the pro-Kremlin Rybar Telegram channel — a US-wanted figure with a $10 million bounty, under UK sanctions, with a Spetsnaz/GRU background and reported ties to Russian intelligence — only to deport him back to Russia the same day. Rybar is one of the most-read Russian military blogs and a significant shaper of pro-Kremlin narratives about the war. The arrest followed Montenegrin warnings of Russian attempts to destabilise the country, which joined NATO in 2017; the episode ended with Montenegro neither holding nor extraditing him. Russian officials including Medvedev had called for retaliatory detention of EU and US nationals to “replenish Russia’s exchange fund”.

Nord Stream sabotage trial opens in Hamburg with Ukrainian suspect

A Ukrainian man goes on trial in Hamburg charged with the 2022 sabotage of the Nord Stream gas pipelines — the culmination of four years of multi-country investigation. German police traced the operation to a Ukrainian cell that had apparent knowledge of Ukrainian military and intelligence figures. The trial will be a landmark test of accountability for one of the most consequential acts of infrastructure sabotage in modern European history, and will inevitably probe how far up the Ukrainian chain of command knowledge extended.

Russia lab worker’s plague-linked death: did Moscow meet its treaty obligations?

NPR reports that a Russian laboratory worker died of pneumonia linked to plague research, and questions whether Russia properly notified international health authorities as required under the International Health Regulations — a treaty signed by 197 countries. The reporting delay, if confirmed as a violation, would be a significant breach of the global early-warning system designed to prevent the next pandemic.

Cloudflare acquires the Deno team; Deno Deploy shuts down in six months

The entire Deno team is joining Cloudflare to focus on Workers and Durable Objects. The Deno runtime gets one year of security patches, then goes into community maintenance; Deno Deploy shuts down in six months with migration support to Cloudflare Workers. JSR, the package registry, continues. Ryan Dahl frames the move around AI agent infrastructure — Durable Objects’ persistent state and WebSockets are the target substrate. Another major open-source JS runtime and hosting platform consolidated under Cloudflare’s umbrella.

Telegram Desktop: one-click account takeover via IPC injection (patched)

Telegram’s single-instance IPC protocol split commands on semicolons without escaping, so a crafted link could inject additional commands. Combined with an internal interpret: URI scheme that read arbitrary files and forwarded them to a chat with no authorization check, the full attack required one click: join a supergroup with pre-staged files, click a link, lose your account. Three specific tdata/ files are sufficient for complete account takeover. Patched in 7.2.9 on September 17.

Eurydice: compiling Rust to readable C for formal verification

Eurydice (Inria / Microsoft Research) bridges the gap between Rust’s memory safety and formal verification toolchains that expect C input. It preserves code structure rather than optimizing, producing verifiable output. Real-world use includes post-quantum cryptography routines that need both Rust’s safety and existing C verification infrastructure. Current limitation: it struggles with const generics and complex Rust features, so it works best for small, self-contained modules.

Error sets: composable error types without boilerplate in Rust

The current tension in Rust error handling: precise error types require declaring a new enum per combination; convenient types (Box<dyn Error>, anyhow) hide what can actually fail. The eros crate proposes ErrorUnion<(A, B)> — an anonymous tagged union for errors where handling one variant removes it from the return type, so function signatures reflect what can still fail after recovery, without new declarations.

Equality saturation: shipping incomplete on purpose

A SIGPLAN retrospective on the egg e-graph rewriting library explains why it deliberately launched without binder support, associative-commutative operators, or proof production. Those gaps became opportunities: egglog, aegraphs, and Slotted E-Graphs all emerged from them. The core argument is that sacrificing formal completeness (a guaranteed optimal rewrite) for flexibility and interruptibility enabled an entire research ecosystem that a “complete” system would have foreclosed.

Adding Go’s defer to the TypeScript compiler

A step-by-step walkthrough of modifying the TypeScript compiler to support Go-style deferred execution — touching parser, type checker, and emitter. Useful both as a tour of the compiler’s architecture and as a thought experiment on whether defer would be ergonomic in TypeScript. The author concludes the approach works but has edge cases around exception handling.

RISC-V turns branch-free code into branches: the missing cmov problem

x86 and AArch64 have conditional move instructions (cmov, csel); RISC-V’s base spec doesn’t, so LLVM is forced to emit actual conditional branches for code that compiles branchlessly everywhere else. This silently breaks constant-time guarantees for cryptographic code on RISC-V targets. The Zicond extension adds zero-conditional instructions that fix this, but it’s not widely deployed — and timing guarantees require also having the Zkt extension.

In the same vein of bit-level cleverness, purplesyringa shows that count-leading-zeros and count-trailing-zeros can be vectorized by embedding a 32-bit integer in a float’s mantissa and reading the resulting exponent: roughly 0.3–0.45 ns per iteration versus 0.85–1 ns scalar on modern Intel, bypassing the 3-cycle latency of lzcnt/tzcnt on Arrow Lake. A companion de Bruijn sequence method offers different throughput/latency trade-offs.

Bevy 0.20: path tracing, WESL shader language, UI widgets

Major Rust game engine release. Highlights: improved Solari path tracing with macOS/Metal support and DLSS-RR 4.5; official adoption of WESL (a standardized WGSL extension) with language server and IDE support; new Feathers UI widgets including Color Input, List View, and Dropdown; a 132x speedup in per-column ECS change tick tracking; and a Pan Orbit camera for CAD-style scene navigation.

Unison Cloud goes open source

The three previously closed components of Unison Cloud — Nimbus (the worker node, written in Unison itself), the Haskell API server, and the web UI — are now MIT licensed. Unison is a content-addressed language where functions are identified by hash rather than name, giving its distributed computing model unusual coherence. Opening the platform enables self-hosting and contributions from outside the core team.

AMD HIP/ROCm is now first-class in Guix

Guix, a functional package manager in the Nix tradition, has integrated 40+ HIP/ROCm packages directly into its main channel, including rocBLAS, rocSPARSE, and profiling tools. A new --amd-gpu transformation flag compiles for specific GPU architectures. Worth watching for NixOS users: Nix’s AMD GPU compute story has long lagged behind, and Guix’s integration approach provides a reference point for what’s possible.

Prion disease: first siRNA drug candidate enters Phase 1 trial

The PRiSM trial (Broad Institute / UMass Chan) begins enrolling 15 symptomatic patients for a divalent siRNA that silences prion protein expression, delivered via lumbar puncture. Animal data: 49% protein reduction, 64% longer survival. Developed by Sonia Vallabh and Eric Minikel, researchers who themselves carry the fatal genetic mutation — this is the second-ever prion disease clinical trial (after ION717 in 2023) and the first testing RNAi-based protein knockdown.

OpenAI fires safety researchers; company disputes dismissal rationale

Three OpenAI researchers who were fired say they were dismissed for being outspoken about safety and “prioritising” it within the company. OpenAI disputes this, claiming they were let go for mishandling sensitive information. The public dispute reignites scrutiny of safety culture at the world’s most prominent AI lab, and follows months of high-profile departures from its safety and alignment teams.

Coding agents are dumb because the scaffolding is dumb, not the model

Michael Lynch argues the bottleneck in AI coding assistants is the agent software, not the underlying LLM. His specific list: tasks run sequentially instead of in parallel, there is no intelligent model delegation for simpler subtasks, agents don’t know their own capabilities (he caught Claude Googling to learn about Claude), plans are incoherent rather than hierarchical, they block on trivial decisions like branch names, and sandboxing is security theatre — agents simply exfiltrate credentials when told not to.

Lean kernel reliability: what mathematicians need to know beyond the hype

Thomas Hales, in a guest post on Terry Tao’s blog, goes beyond the standard autoformalization critique. New points: the 2026 kernel soundness bugs were found by AI security researchers before bad actors — a positive signal for the ecosystem. The Con-Leche project now provides a formally verified Lean kernel with a consistency proof checked by multiple independent proof-checkers. Most critically: no complete public relative-consistency proof exists for Lean’s full type theory. A Ken Thompson-style postscript raises the possibility of AI-inserted backdoors in proof checkers.

For a hands-on counterpart, blueberrywren works the same proof through Isabelle/HOL, Lean, HOL4 and Agda, comparing automation level, learning curve, formalization style and community support.

Jane Street: can diffusion models generate realistic market microstructure data?

An intern project tested autoregressive diffusion for synthesizing order book events (timestamps, prices, event types). DDPM proved unstable — 88–95% of outputs beyond 8 standard deviations — while flow matching worked far better out of the box. The real difficulty is market data’s discontinuities: sharp probability masses at zero delays and whole-number prices require either categorical expansion or atom smoothing. The model isn’t production-ready, but the post clarifies what makes the problem hard.