Nintendo says a security exploit affecting original Nintendo Switch models on firmware versions older than 23.0.0 can let someone who scans the console’s QR code run unauthorized code or steal account and game-console information if they’re within wireless range.
Sep 14, 2026 ·
CNET
Researchers built DDRop, a hardware memory interposer that interferes with DDR5 writes so protected confidential VMs can be replayed with stale, attacker-selected data—breaking the integrity of Intel TDX, scalable SGX, and AMD SEV-SNP in deterministic proof-of-concept attacks in under two minutes requiring physical access.
Sep 14, 2026 ·
The Register
A federal judge ruled the US immigration policy targeting noncitizen technology researchers was unconstitutional and too broad because the government presented no evidence linking the targeted researchers to any foreign power that might be censoring Americans, but the US has appealed and Ahmed’s deportation/detention challenge is still headed to the Second Circuit.
Sep 14, 2026 ·Ars Technica
ClickFix attacks trick users into copying and pasting text into Windows Command Prompt or macOS Terminal, which immediately installs info-stealing malware that can grab passwords, logged-in account access, and crypto wallets.
Sep 14, 2026 ·
TechCrunch
More than 2,000 malicious RubyGems packages were uploaded in the May 11–12 window, forcing RubyGems maintainers to disable new user registration for four days after the swarm began uploading malware on May 5.
Sep 14, 2026 ·The Register
A perovskite solar cell tuned to underwater light can still generate electricity at depths of a few meters by using chemistry tweaks plus an additive that makes the material more durable in moisture, improving both longevity and power output.
Sep 14, 2026 ·Ars Technica
X Corp and SpaceXAI moved to dismiss their antitrust lawsuit against Apple in a federal Texas court, resolving the case without the filing providing dismissal reasoning or any settlement details.
Sep 14, 2026 ·
Engadget
Microsoft’s KB5124008 Windows 11 September Patch Tuesday update (Sept. 8) may cause no audio output, unresponsive/zero volume controls, or Device Manager “This device cannot start (Code 10)” errors on some USB Audio Class 1.0 devices after the update.
Sep 14, 2026 ·
ZDNet
Lina Khan argues the U.S. can prosecute AI companies and, in some cases, their CEOs under existing laws—including consumer-protection and unfair competition rules—without waiting for new AI-specific legal regimes, citing a 1934 Supreme Court precedent (FTC v. R.F. Keppel & Bro).
Sep 14, 2026 ·The Register
Digital wallets add device authentication (e.g., Face ID/Touch ID or a PIN/passcode) and require confirming each transaction with that same security, making unauthorized card use “nearly zero” even if a phone is stolen or lost.
Sep 14, 2026 ·Engadget
The International Meteor Organization says a cyberattack took much of its website offline and will cause several weeks of partial downtime while it transitions to new infrastructure and services.
Sep 14, 2026 ·The Register
Saudi Arabia shut down its East-West pipeline carrying 7 million bpd late last Friday, disrupting a key route toward the Red Sea and contributing to crude’s sharp rally to a 3.75-month high.
Sep 14, 2026 ·
Yahoo Finance
NASA awarded Blue Origin a contract worth up to about $700 million to build the Mars Telecommunications Orbiter for the Mars Telecommunications Network.
Sep 14, 2026 ·The Register
CISA added CVE-2026-85706—a GitLab path traversal bug rated 10.0 on CVSS v3.1 that allows unauthenticated attackers to read arbitrary files—to its Known Exploited Vulnerabilities catalog after observing active exploitation.
Sep 14, 2026 ·The Register
Kalshi plans to seek regulatory approval to offer customers never-expiring U.S. “perpetual futures” tied to single stocks like Tesla (TSLA) and Nvidia (NVDA), as well as agriculture commodities such as corn and wheat.
Sep 14, 2026 ·Yahoo Finance
MSI mode (Message Signaled Interrupts) is a Windows/PCIe interrupt method that can reduce latency on older cards that use line-based interrupts, but it generally won’t increase average frame rates and modern GPU drivers typically enable it by default.
Sep 14, 2026 ·Engadget
More than 153 million U.S. driver’s license records—including front-and-back scans, customer photos, and other identifying details—were reported for sale on the dark web, and the Pentagon said it is evaluating the reports after Defense Secretary Pete Hegseth’s license appeared in the database that was tipped to journalist Brian Krebs.
Sep 14, 2026 ·Yahoo Finance
Microsoft’s September 2026 Patch Tuesday ships 963 CVEs (106 rated critical), including two already exploited flaws: CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Advanced Local Procedure Call.
Sep 14, 2026 ·
Computerworld
Microsoft says its latest Windows security updates can break Remote Desktop Services for some users—causing RDP connections to fail after minutes or hang at “Please wait for the Remote Desktop Configuration” on Windows 11 26H1 and Windows Server 2012 (and may also make tools like MMC, RDS Licensing Diagnoser, and File Explorer unresponsive).
Sep 14, 2026 ·The Register
The IFPI launched the Streaming Integrity Initiative (SII) on September 14, requiring participating music distributors to implement five anti-fraud commitments to reduce “manipulation of digital music services” that generates revenue from non-genuine plays.
Sep 14, 2026 ·Engadget
