NIA Chargesheet Reveals Al-Falah Doctors Tested Bombs on Campus and in Aravalis

India's National Investigation Agency has filed a chargesheet detailing how members of the Al-Falah terror module allegedly progressed from fertilizer-based explosives to improvised explosive devices. Doctors linked to the module reportedly conducted test explosions and firearms trials at isolated locations, including within a university campus and in the Aravalli hills. Funds channelled through a university-based doctor were allegedly used to procure weapons and materials. Rented premises were used to secretly store chemicals, equipment, and explosives away from public areas. Authorities seized a significant cache of ammonium nitrate before a planned attack on the Red Fort could be carried out.

Seven Security Vulnerabilities That Appear More Often in AI-Generated Code

A developer building a static analysis tool called ai-vuln-scan identified seven recurring vulnerability patterns that appear disproportionately in code produced by AI coding assistants like GitHub Copilot and Claude Code. The patterns include hardcoded secrets, unparameterized SQL queries, shell command injection via string interpolation, and overly permissive default configurations. Weak cryptographic primitives, inconsistent authorization across similar routes, and verbose error responses that expose internal details round out the list. The author argues these flaws stem not from AI incompetence but from the fact that AI tools optimize for plausible, runnable examples rather than production-hardened code. To address this systematically, the developer published an open-source tool and a versioned AI Vulnerability Pattern Catalog intended to help teams catch these predictable gaps in review.

Security Review Flags Governance Vulnerabilities in ether.fi Stake Protocol

A security audit of ether.fi Stake, a liquid staking protocol with approximately $4.53 billion in total value locked, identified seven governance-related vulnerabilities as of September 11, 2026. The most critical findings include highly concentrated voting power, where just 12% of token holders control over half of all voting weight, and a ProxyAdmin multi-sig setup that includes a single externally-owned address with no time delay, potentially enabling unauthorized contract upgrades. Reviewers also flagged a 24-hour timelock on critical actions as insufficient compared to the industry-recommended minimum of 72 hours, leaving the protocol exposed to flash-loan front-running. Additional risks include a replaceable bridge relayer contract that could be exploited to mint tokens and drain liquidity, and a lack of any emergency pause mechanism for governance. The protocol received an overall risk score of 7 out of 10, indicating functional but materially flawed governance design.

Int4 Per-Row Quantization Cuts Transformer Size 6x With No Accuracy Loss

A series of experiments on a small transformer model found that 71.7% of its parameters resided in the embedding lookup table, making it the primary target for compression. Quantizing the embedding to int4 precision with per-tensor scaling caused a notable accuracy drop, but switching to per-row scaling — adding just 16 KB of extra data — recovered nearly all of that loss. The int4 per-row configuration matched the full fp32 model's top-1 mixture score of 0.384 while reducing model size from 5.72 MB to 0.93 MB, a 6.2x reduction with no measurable performance cost. The findings highlight how sweeping only one variable at a time — such as bit-width without varying granularity — can produce misleading conclusions, since the benefit of per-row scaling only becomes visible at lower bit-widths. The experiment required no retraining and was conducted across just seven runs, suggesting the cross-product sweep approach is practical even in low-resource settings.

Bombay High Court Warns BMC Officers Over Worsening Garbage Crisis in Mumbai

The Bombay High Court has issued a stern warning to Brihanmumbai Municipal Corporation (BMC) officers over the growing garbage and filth problem across Mumbai. The court expressed serious concern about the deteriorating cleanliness situation in the city. BMC officials were cautioned that action could be taken against them if the issue is not addressed. The remarks highlight mounting judicial pressure on civic authorities to improve waste management in India's financial capital.

Moji

Discussion | Link

How Iranian arms helped Houthis seize key Red Sea port in 'lightning' blitz

India to Host BRICS Summit Amid Ongoing Conflicts in Ukraine and Gaza

India is set to host the BRICS summit, bringing together world leaders from major emerging economies at a time of significant global tension. The bloc, established in 2009, was formed to give developing nations a stronger voice in institutions traditionally dominated by Western powers. The summit takes place against the backdrop of two active conflicts — the Russia-Ukraine war and the Israel-Gaza crisis — making diplomacy particularly complex. Member nations are expected to discuss economic cooperation, geopolitical stability, and reforms to global governance structures. The gathering is being closely watched for any unified stance the bloc may take on the ongoing wars.

Interactive Tool Lets Users Build and Visualize a Transformer Model from Scratch

A developer named Jay Visaria has released an interactive web-based tool called LLM Visualizer. The tool allows users to build a transformer model from the ground up while visualizing each component of the architecture. It is accessible via a public GitHub Pages site, suggesting it is aimed at learners and those exploring large language model internals. The project was shared on Hacker News, where it received initial attention from the developer community. No further details about the tool's features or underlying framework were provided in the listing.

7 Key Lessons for a Successful Odoo CRM Implementation in Real ERP Projects

Implementing Odoo CRM requires understanding an organisation's existing sales process before any configuration begins, rather than jumping straight into building pipeline stages. Experts recommend keeping the CRM pipeline simple and purposeful, as overly complex pipelines reduce user adoption among salespeople. Data migration deserves treatment as a separate project, since customer records spread across multiple platforms often carry duplicates, errors, and outdated entries that must be cleaned before import. Businesses are advised to fully explore Odoo's standard features before commissioning custom development, as unnecessary customisation adds long-term maintenance costs. These practical lessons, drawn from real ERP deployments, aim to help organisations avoid common pitfalls and achieve a more effective CRM rollout.

12 API Security Best Practices Developers Should Treat as Non-Negotiable

APIs power modern software ecosystems but remain among the most frequently exploited attack surfaces in cybersecurity. Experts recommend adopting OAuth 2.0 with PKCE and OpenID Connect, enforcing multi-factor authentication, and issuing short-lived JWT tokens to secure API access. Fine-grained authorization checks at the object, function, and field levels are critical, as Broken Object Level Authorization consistently ranks as the top API vulnerability. Developers are also advised to apply least-privilege principles by minimizing token scopes and stripping unnecessary data fields from responses. Encrypting all traffic — using TLS 1.3 externally and mutual TLS between internal services — ensures no network hop is treated as inherently trusted.

Why IoT Data Needs Device, Measurement, and Timestamp Defined Before Storage

Storing IoT sensor data effectively requires clarifying three core attributes before designing any schema: the source device, the measurement type, and the precise timestamp of observation. A raw value like 72.4 is meaningless without the context of what produced it, what physical quantity it represents, and when it was recorded. Engineers are advised to use a simple modeling worksheet per signal to surface gaps early, such as missing units or unclear time semantics. Collection frequency also matters, since signals like vibration and temperature differ in density and interpretive value. Timestamp ambiguity — whether it reflects when a sensor observed a condition or when a system received the message — should be resolved explicitly before any schema is written.

Developers Debate What the Next Evolution of Git Could Look Like

A blog post published on ersc.io has sparked discussion in developer circles about the future of version control beyond Git. The article explores potential limitations of Git and what a next-generation version control system might look like. The post gained traction on Hacker News, accumulating 18 upvotes from the community. While the piece raises questions about evolving developer workflows and tooling needs, no specific replacement system is formally proposed or released.

Americans Reflect on Where They Were and How 9/11 Changed the US

The BBC spoke with people in Washington, D.C. to mark the anniversary of the September 11, 2001 attacks. Individuals shared personal recollections of what they were doing when the attacks occurred, with accounts ranging from everyday routines to work activities. The interviews highlight how the events of that day left a lasting imprint on ordinary Americans' lives. Respondents also reflected on the broader ways in which 9/11 reshaped the United States as a nation.

Xi’s India visit was no last-minute decision

Why Businesses Need Process Owners, Not Prompt Engineers, for AI Automation

A developer who builds automation systems argues that businesses should prioritize hiring process owners over prompt engineers when adopting AI tools. At small-to-mid business scale, the real bottleneck is rarely the AI prompt itself but the absence of clearly defined workflows — such as who approves discounts or where complaints are routed. A prompt engineer typically crafts polished AI interactions that perform well in demos but fail in production when edge cases expose gaps in underlying business logic. A process owner, by contrast, maps every real-world scenario before touching any AI tool, building systems that hand off to humans when uncertain rather than improvising. The author concludes that the simpler and safer the AI's role, the more valuable the system becomes in day-to-day operations.

A Practical Guide to the 2026 AI Developer Stack and Its Key Layers

The AI developer tooling landscape in 2026 has stabilized into distinct functional layers, making tool selection more straightforward for engineering teams. Coding assistants like GitHub Copilot, Cursor, and Claude Code have evolved beyond autocomplete into agentic tools capable of planning and executing multi-file changes. Application frameworks such as LangChain, LlamaIndex, and CrewAI handle how products interact with AI models through prompts, retrieval, and orchestration. Model gateways like OpenRouter and LiteLLM allow developers to route across multiple providers with built-in fallback and cost tracking. Evaluation and observability tools, including Braintrust and Maxim, have become essential for scoring outputs and catching regressions in production environments.

BRICS: Check traffic advisory for Delhi

US deploys up to 200 troops to aid Saudi Arabia against Houthi advances

The United States has sent up to 200 troops to support Saudi Arabia in its fight against Iran-backed Houthi forces in Yemen. The deployment comes as Houthis intensify operations along Yemen's Red Sea coast, seizing the port city of Mocha on Thursday. The group has also pushed toward strategic islands, including Hanish, further extending its territorial reach. Yemeni government military sources warn that these gains have strengthened Houthi control over the Bab el-Mandeb Strait, a critical chokepoint at the southern entrance to the Red Sea and one of the world's most vital shipping lanes.

New York Commemorates 25th Anniversary of 9/11 Terror Attacks

New York marked the 25th anniversary of the September 11, 2001 terrorist attacks under heightened security measures. The solemn commemoration honored the thousands of lives lost in one of the deadliest attacks on American soil. On that day, nineteen Al-Qaeda operatives hijacked four commercial aircraft in a coordinated assault. Two of the planes were deliberately flown into the Twin Towers of the World Trade Center, causing both 110-story skyscrapers to collapse. The attacks fundamentally changed the course of American history and global security policy.