Amazon is expanding its Supply Chain Services so independent online stores can offer Prime shipping directly at checkout, without shoppers needing to log into a separate Amazon account or use a 'Buy with Prime' widget. Merchants pay Amazon to store and ship their inventory but keep their own payment processing and store policies, and there's no extra charge to offer Prime as a shipping option. Amazon will verify a customer's Prime membership after the order is placed.
cnet.com
· 2026-09-25
A federal appeals court has ruled against Anthropic in its dispute with the Pentagon, upholding the government's designation of the AI company as a supply chain risk. The D.C. Circuit Court of Appeals decided 2-1 in favor of the Defense Department, rejecting Anthropic's legal challenge to the label.
fastcompany.com
· 2026-09-25
A federal appeals court in Washington DC declined to overturn one of two Pentagon designations that flagged Anthropic as a national-security supply-chain risk, letting that label stand indefinitely. The ruling leaves in place restrictions ordering removal of Anthropic's Claude models from military and other federal systems, while a separate designation was already struck down by a San Francisco judge earlier this year. Anthropic says it is weighing further appeals, including to a larger DC Circuit panel or the Supreme Court.
wired.com
· 2026-09-25
A federal appeals court in Washington ruled 2-1 to uphold the Defense Department's designation of Anthropic as a national security supply chain risk, blocking the Pentagon and its contractors from using Claude AI models. The ruling addresses one of two separate designations the DOD used to justify the ban; a San Francisco court had already struck down the other designation last month. Anthropic said it disagrees with the decision and is considering further legal options.
cnbc.com
· 2026-09-25
An Entrepreneur op-ed argues that electricity, not chip supply, is becoming the binding constraint on AI growth, citing IEA projections that global data-center power use could nearly double from 485 to 950 terawatt-hours by 2030, with AI-specific demand tripling. It notes that by 2027 a single advanced server rack could draw as much peak power as 65 households, and that grid constraints could delay roughly 20% of planned data-center projects.
entrepreneur.com
· 2026-09-24
Aikido Security published research showing that GitLab's per-user incoming email address, meant to let users create project issues via email, contains a non-expiring token that functions as an authentication and authorization credential. Because GitLab treats any message sent to that address as coming from its owner, exposure of the address alone can let an attacker create issues, submit merge requests, or send patch files across an organization's public and private projects without needing account credentials.
darkreading.com
· 2026-09-23
Startup Modal Motors, founded by Michael Van Steenburg, is developing electric motors that avoid rare-earth magnets altogether, aiming to manufacture in the U.S. rather than rely on Chinese supply chains. The company is preparing two products—a small drone motor and a flat 'Hybrid Enigma Drive' motor—ahead of its appearance in Startup Battlefield 200 at TechCrunch Disrupt next month.
techcrunch.com
· 2026-09-23
A commentary argues that the United States should prioritize building products manufactured domestically, citing repeated disruptions from the pandemic, tariffs, and geopolitical conflicts that have exposed vulnerabilities in global supply chains. The piece points to newer, economical and more sustainable American-made building materials as a viable alternative to imported goods.
fastcompany.com
· 2026-09-23
PepsiCo is investing in precision agriculture technology, including drones and data analytics, on farms like a multigenerational operation in Alberta to improve soil health and crop yields. The company relies on roughly 45 billion potatoes annually for Lay's, Ruffles and other snack brands, making stable harvests essential to its supply chain.
fastcompany.com
· 2026-09-22
Security researchers at SafeDep discovered that a malicious npm package called mathmain, disguised as a copy of the popular mathjs library, contains a hidden remote access implant. The malicious code stays encrypted and dormant until a specific equation is solved using the library's lusolve() solver function, which acts as a decryption key to unlock and execute the payload.
safedep.io
· 2026-09-21
A Google Threat Intelligence Group analyst named Larsen ran a covert operation to observe the hacker collective TeamPCP, gaining access to a server where the group stored stolen credentials from numerous victim companies. Google used this visibility to rapidly notify cloud providers like AWS and Microsoft to revoke compromised access tokens before the hackers could exploit them for extortion, rather than trying to contact each victim individually.
arstechnica.com
· 2026-09-20
Checkmarx researchers uncovered a malicious npm package called 'indexed-btree,' which mimics the legitimate 'sorted-btree' library and has racked up 2 million weekly downloads. Rather than embedding malicious code in install scripts—now restricted by npm's June 2026 security measures—the attackers hid a malware loader inside the package's commonly used BTree.prototype.set() method, which activates only when called with a specific key. Once triggered, the malware gathers system data such as hostname, CPU, memory, and uptime, and sends it to attackers who reportedly control a wallet holding 109 ETH, though its link to this campaign is unconfirmed.
bleepingcomputer.com
· 2026-09-20
GoKawiil