Chinese food in orbit, hard-working robots, and lightning strikes a rising rocket. As the Earth's northern hemisphere moves through autumn, let's check in on humanity's exploration of space.

Sun An international team found gorgeous images of the photosphere and "small-scale magnetized Kelvin–Helmholtz instabilities in the solar photosphere." (previously). Mercury The European Space Agency (ESA) and Japan Aerospace Exploration Agency (JAXA) BepiColombo mission arrived at Mercury. However, that planet closest to the Sun seems to be shrinking faster than previously understood. Venus A new study argues that Venus may have been covered with oceans a long time ago. A moon may once have orbited ancient Venus but spiraled in to its destruction. On Earth's surface In Canada an amateur astronomer identified an impact crater; "[a]fter consultations with the Innu Council of Ekuanitshit, the research team is calling the crater Uhackatik." Wildfires in Spain threatened a NASA observatory. In Chile an observatory started its "Legacy Survey of Space and Time," a decade-long project to "create the most comprehensive, cinematic record of the universe in history." Japan's experimental RV-X rocket lifted off, moved horizontally, then safely landed nearby in a test. RocketLab announced it was offering a portable spaceport, the Global Hypersonic & Orbital Spaceport Technology, or GHOST. Indian company Skyroot hopes to produce one launch vehicle per month. NASA's Office of Inspector General called for upgrades to launch facilities as Artemis missions and private rocketry increase pressure on the system. NASA stated that it won't fly humans on the Boeing Starliner until 2028. The Trump administration issued a national space transportation policy. Demand for space launches might soon exceed rocket capacity. From Earth's surface to orbit German's Isar Aerospace successfully launched a Spectrum rocket from Norway into Earth orbit, the first such mission from a Western European site. Lighting struck a Long March rocket as it ascended, but the craft went on to a successful orbital deployment. Another Long March suffered an anomaly and exploded (archive link). A Taiwanese rocket launch failed (archive). NASA's Nancy Grace Roman Space Telescope successfully launched, deployed solar panes and heatshield, and is on its way to an L2 point position with plenty of fuel. (previously). A Falcon rocket accomplished two achievements in August: 100 SpaceX missions that year to date, and the 37th mission for booster B1067. Starship's 13th mission reached orbit, deployed Starlink satellites, and returned to Earth. A camera captured the first 15 seconds of Starship's engines firing from close up; cameras on some of those Starlinks looked back at their launch vehicle (another copy). A Google satellite reached orbit, carrying a group of Tensor Processing Units (TPUs) running Gemma AI in a test of orbital data center capacity. In Earth orbit The Tiangong space station now serves more than 200 different meals. Russia's Rassvet satellites are apparently struggling to reach needed altitude. Polish company Orbital Matter is testing out materials 3d printed by its Replicator 2. Kyoto University researchers are using Starlink data to study Earth's thermosphere. NASA and Katalyst conceded defeat in an effort to rescue the failing Neil Gehrels Swift Observatory. Swift is still doing its best to track gamma-ray bursts. (previously) A United States Space Force exercise saw one satellite successfully launch, target, and intercept another. Space Force also declared it had placed "space control weapons" in orbit. back down to Earth A NASA astronaut in orbit observed cities changing their lighting technologies. The number of alerts for space debris falling to Earth has increased. The United States Federal Communications Commission granted Reflect Orbital permission to orbit its Eärendil-1 satellite, designed to reflect solar light onto the Earth's night side. Reflect then bought space on a Skyroot launch. SpaceX is struggling to make Starship's heat shield reusable. A petition warned that expanding satellite numbers with orbital data centers would cause Earthly damage, including pollution and ozone layer depletion. More than 40 million years ago it seems that an asteroid struck what is now known as the North Sea. Earth's Moon In 2024 an asteroid struck the moon, "the largest contemporary impact crater found in the Solar System and, according to current models, a once-in-132-year event.' A Falcon 9 rocket stage crashed into the moon (photo). A lunar hole, Marius Hill Pit, may become a habitat for human visitors. NASA's Cooperative Autonomous Distributed Robotic Exploration mission (CADRE) will rove the lunar surface to some degree of autonomy. NASA is also considering sending Promise, an engineering model for Perseverance, to the moon. The China Manned Space Agency (CMSA) delayed launching its Chang'e 7 (嫦娥七号) lunar mission until 2027. Mars Perseverance set a new record for offworld driving, having notched up 28.10 miles in over 14 years (seen from HiRISE). The rover also took photos of Phobos crossing in front of Earth. Not to be outdone Curiosity came across "honeycomb-like textures called polygonal fractures." Speaking of Martian moons, Japan's Martian Moons eXploration (MMX) mission is due to launch today (previously). Pioneer Labs announced they made their first microbe for a Mars mission. Planetary geological and former NASA program administrator Adriana C. Ocampo Uría called for an international approach to human settlement of Mars; NASA Administrator Jared Isaacman rejected that. To the asteroids Tianwen-2 (天问二号) reached asteroid 469219 Kamoʻoalewa and is scheduled to attempt a sample return. Astronomers were able to image 44 Nysa clearly enough to find it was unusually triple-lobed and had its own tiny moon. China's National Space Administration (CNSA) is considering a two-ship mission to strike and observe a near Earth asteroid. Jupiter The Juno probe marked ten years orbiting and working around Jupiter. Saturn Astronomers working with Hubble imagery discovered a new ten-sided atmospheric shape on Saturn's southern pole. Neptune The large moon Triton may have wrecked preexisting Neptunian moons when it first arrived, leaving tiny moons as orbital wreckage behind. (previously) In the Kuiper belt NASA's New Horizons safely awoke from hibernation mode as it traveled nearly 6 billion miles from Earth. It may become the third human craft to exit the solar system. However, funding cuts threaten two instruments.

The mission, which launched on Monday, is headed to Phobos, the larger of the two moons of Mars. It could carry back the first samples from the Martian system.

© Yuichi Yamazaki/Agence France-Presse — Getty Images

Despite the expansion of Starlink and other communications satellite services, most of the world’s Internet traffic still travels through subsea cables crisscrossing the ocean floors. Those fiber-optic cables coexist with a network of oil and gas pipelines and submarine power cables—and all these crucial links connecting countries and continents now face growing sabotage risks as gray-zone warfare and open conflicts have become widespread.

The rising risks to the world’s invisible infrastructure beneath the waves are the main subject of a new book by Elisabeth Braw, a senior fellow at the Atlantic Council who leads the Threats to the Global Maritime Order Initiative. Her book, titled Undersea War, explores the modern rise in suspicious incidents in which ships dragging their anchors for unusually long periods have cut or damaged undersea cables and pipelines, from the Baltic Sea to the Pacific Ocean.

Braw acknowledges that about 60 percent of undersea cable damage is primarily due to human error during fishing and shipping activities, when weighted nets or anchors drag across the seabed. Natural hazards like storms and undersea landslides also account for a smaller proportion of such incidents. In total, between 150 and 200 cables are damaged each year and usually repaired quickly.

Read full article

Comments

© Stefan Sauer/picture alliance via Getty Images

Asteroids has always been played on a torus, with a speed of light that is effectively infinite. Here the speed of light is slow enough to matter: by default light takes 2.5 seconds to cross the screen. Everything else follows from taking that seriously.

In an interview, Dr. Peter Piot recalled when he first saw the spindly virus under a microscope and reflected on a five-decade career spent fighting two deadly pathogens.

© Daniel Berehulak/The New York Times

A piece from Growing Up Transgender about having a trans kid and choosing to leave the UK. It's very sad but I think it's worth reading.

My family has spent four summers participating in demand response programs whereby utility companies pay customers to reduce energy use on the hottest summer days. Most summers have involved carefully precooling our New York City apartment before switching off the air conditioners and sweating it out during the designated demand response periods.

But this year, we kept our window air conditioners running throughout a heat dome event that drove daytime temperatures into the triple digits and made the nights oppressively hot. The difference was that we powered the air conditioners through two household batteries tucked away unobtrusively in the corners of our living room and bedroom.

We were among about 1,000 New York City households that took part in a free and growing program offered by the local startup Every Electric. The company’s proposition is simple: Get one or more batteries delivered to your home, plug the batteries into a standard wall electrical outlet, and then plug your window air conditioners into the batteries. Households can keep running air conditioners as usual during peak demand periods while also earning money through the local demand response program with the utility company Con Edison.

Read full article

Comments

© Jonathon Schaff, Green Juice (www.greenjuice.wtf)

Dave Blanchard runs the public radio show Wild Card. And one of the less exciting and, in fact, rather tedious parts of his job is that he has to keep an eye on the comments that people post about the show online. And one day last fall on Spotify, he saw all this activity about this episode they did with the writer Elizabeth Gilbert. And Dave thought, oh, her book was controversial. It must have struck a nerve, this episode. And then he looked at the comments. [This American Life podcast; Verge article]

At a whopping 728 feet wide, the newfound basin hints at the risks that impact events may pose to planned human outposts.

© NASA Goddard/Intuitive Machines

Pamela Toler (History in the Margins, 9/5/26), "The Great Panic of 1893": "occasionally an event, or person, or book, or idea ... shows up in footnotes or casual asides ... if it's interesting or important enough, I share it ... Lately, the Great Panic of 1893 has become insistent." Neil Flanagan (The Birth of a Capital, 9/4/26), "How often do you think about the 1893 World's Fair?": "what draws us to an event, story, or image depends less on the context of the events than the context we inhabit." Photos / maps / VR of the fair. Foods, sweet treats, and "orange cider" of the fair. Pall Mall Magazine and RIBA Journal on the fair. And other magazines that began in 1893 feature Ida Tarbell on "Pasteur at Home," famous prints, rules for psychic / occult investigators, articles on orchidology and astronomy, "Last Week's Paris" followup on anarchists, and the first story of Sexton Blake.

Orchids return to grassland after 28 Years Later filming. Fountains Abbey staff left grounds unmown to appear abandoned for film shoot - and orchids returned for the first time since the 1850s. (North Yorkshire, Britain.)

There had been no record of the flowers on the abbey site since the 1850s and the orchids had not been seen in living memory. 170 Years Later, nobody knows where they have come from or why they have germinated once again.

Revolut has acknowledged that it disclosed sensitive customer records to an unauthorized party. The company had accepted fraudulent information requests sent from an email address on a legitimate government agency domain, according to TechCrunch.

Revolut is a London-based banking and financial platform with more than 80 million customers globally, according to the company.

Revolut describes this as an external impersonation scam, not an intrusion into its systems. It also says customer funds were not affected. Revolut has not identified the government agency or disclosed its email domain.

The attacker appears to have abused the trust attached to a real government email domain to make bogus requests for customer information. Revolut detected the activity, blocked the sending address, and says it notified the relevant agency, law enforcement, data protection authorities, and financial regulators.

“Upon detection, we immediately blocked the address and alerted the relevant government agency as well as enforcement agencies, data protection, and financial regulators.”

Through this social engineering attack, rather than by gaining access to Revolut’s systems, the criminals obtained the following types of information about customers:

• Identity and contact information like dates of birth, postal address, email address, and phone number.
• Copies of IDs such as passports and driver’s licenses.
• Verification selfies.
• Account statements and transaction histories.

Revolut has said only that a “limited” or “very limited” number of customers were affected, and that it contacted them directly.

Those customers have received or will receive an email specifying which of their personal data was disclosed:

How to stay safe

The likely consumer impact will be second-stage fraud attempts rather than immediate unauthorized transfers. Here are some guidelines to help keep your money safe:

Treat any unexpected Revolut-related contact as suspicious, especially calls, emails, WhatsApp messages, or text messages claiming you need to “secure” an account, reverse a transfer, or replace documents. Do not use links or phone numbers supplied in the message. Revolut advises ending contact with suspected scammers and contacting the company through official channels.

IDs and other exposed information could be used for identity theft. Monitor your accounts and credit reports for unfamiliar account openings or credit applications, and consider placing a fraud alert or using credit monitoring where available in your country.

If you received a notification email, check your balances, cards, beneficiaries, recent transfers, account statements, and linked devices. Report any unfamiliar activity immediately through Revolut’s secure in-app chat.

If you were involved in a data breach, read our blog Involved in a data breach? Here’s what you need to know for more recommendations. 

Pro tip: Use Malwarebytes Scam Guard to analyze any suspicious communications. It can help you determine whether a message is a scam and advise you on what to do next.

---

Let’s face it, an incognito window can only do so much. 
 
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance. 

The technology is far from the only existential risk our species faces. But weighing such cosmic fears can become a mind-bending exercise.

© Andrew Harnik/Associated Press

India's Central Bureau of Investigation searched 89 locations across 20 states in three digital arrest fraud cases and arrested three people accused of moving the stolen money, the agency said.

The searches were conducted under Operation Chakra-VI, the agency's ongoing cybercrime enforcement programme. All three cases were transferred to the CBI from state police forces.

In a digital arrest, fraudsters posing as police officers, courts or central agencies contact a victim by phone or video call, allege involvement in a crime, and hold the person under sustained psychological coercion — often forbidding contact with family — while extracting transfers described as bail, verification deposits or asset audits.

The three cases together account for about ₹42.4 crore (approx. US$4.49 million) in losses, an official press release stated. One, linked to the Birla Institute of Technology and Science, Pilani, involved a victim kept under digital arrest for three months and defrauded of ₹7.67 crore by callers impersonating police officers. The release does not specify the victim's role at the institution. A second case in Gujarat also ran three months and cost the victim ₹19.24 crore, again to scammers posing as police. The third, in Karnataka, involved a month of coercion and ₹15.45 crore.

Those durations are the notable detail. Where most online fraud is transactional, these cases show victims held in a controlled state for weeks or months, which is what allows losses to climb into crores from a single target.

The CBI said the searches were planned on the basis of financial and technical analysis, including examination of bank accounts and online account access records, and were carried out simultaneously to prevent destruction of evidence. Investigators seized banking documents, account records and digital devices, which the agency said are now undergoing forensic examination to map the financial and technological infrastructure supporting syndicates operating across state lines.

Also read: CBI Files Charges Against 13 in Digital Arrest Fraud Case Linked to Myanmar Cyber Slave Compounds

The three people arrested are described as beneficiaries in the laundering chain rather than the callers. Akash, a resident of Haryana, allegedly received ₹1.95 crore into an account he opened himself and pushed the funds onward to other accounts the same day. Raja Karmakar of Kolkata is accused of receiving ₹1.5 crore into his firm's account. Jyoti Rani allegedly received part of the proceeds, withdrew some in cash and transferred the rest onward. The agency said efforts continue to trace the remaining accused.

On Dec. 1, 2025, a Supreme Court bench of Chief Justice Surya Kant and Justice Joymalya Bagchi ordered a pan-India CBI investigation into digital arrest scams, specifically directing scrutiny of mule accounts and alleged collusion by bank officials, and requiring several states to grant the agency consent under the Delhi Special Police Establishment Act. In interim directions issued Aug. 5, 2026, the court told the Reserve Bank of India to publish a standard operating procedure for banks handling mule accounts, pressed states to notify cyber crime coordination centres, and ordered an inter-departmental committee to examine a shared-liability and victim compensation framework.

Home ministry figures cited before the court show digital arrest complaints falling from 123,672 in 2024 to 58,249 in 2025 and 16,377 through June 30, 2026, with ₹18.05 crore restored across 36,290 cases. The trend is fewer complaints but heavier individual losses.

A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards.

The collection included more than 153 million driver’s licenses, 10 million ID cards, 3 million travel documents, and 579,000 medical cards, including marijuana dispensary cards, according to reports.

The trove of driver’s license scans reported by KrebsOnSecurity is a sharp reminder that identity verification is not a harmless box-ticking exercise.

The FBI’s New Orleans field office has opened an investigation into an apparent breach involving identity verification provider IDScan.net. The company said it was investigating.

IDScan.net advertises as follows:

“We provide simple, secure solutions to help dispensaries reduce liability and protect their licenses by validating IDs, including a customer’s age, in a matter of seconds.”

The allegedly exposed records were especially concerning because some included more than a basic photo of an ID. KrebsOnSecurity found records containing front-and-back images, as well as infrared and ultraviolet scans, with timestamps that appeared to align with the holders’ travel or car-rental activity.

That matters because a driver’s license is far more useful to an identity thief than a password. You can reset a password. You cannot easily replace your face, date of birth, address, or license number, particularly when they’re accompanied by high-resolution images of your government-issued ID.

The age-verification problem

Age verification has become a common justification for asking people to upload an ID, take a selfie, or submit both to a third-party identity verification provider.

We have previously warned about the privacy and security trade-offs in age-verification systems, particularly those that require people to submit copies of government-issued ID. Such systems can turn a request to access a website into a decision to share an enduring identity document with a company the user may never have heard of.

In our opinion, that is a disproportionate risk. Once someone uploads an ID, the service or its vendor can potentially link the visit to their identity. If the provider is breached, the consequences can extend well beyond unwanted marketing or an exposed email address.

The reported Nexus dataset illustrates a broader concern: Identity documents are collected in many places that people may not connect with one another. Each individual collection may be presented as routine, but together they create an ever-expanding ecosystem of organizations, contractors, software platforms, cloud services, and privacy policies.

Facial images and ID copies can be reused. Criminals may use them to make scams more convincing, pass weak identity checks, or assemble detailed victim profiles from records obtained from separate breaches. An attacker who knows your name, address, date of birth, email address, and license details has a useful foundation for fraud.

This is why “we only need to verify your age” should not automatically mean “please upload your driver’s license” or another form of ID.

How to stay safe

When an ID check is required to use an online service, ask a basic question: Why does this company need a copy of my identity document, and what happens to it afterward? The scale of the data reportedly offered through Nexus shows why the answer matters.

Consumers cannot always refuse an ID check, particularly where it is legally required or necessary for a regulated service. But you can reduce unnecessary exposure:

• Ask whether an ID image is stored and, if so, for how long.
• Check whether the company uses a third-party identity verification provider.
• Prefer services that offer a privacy-preserving age check rather than requiring a full ID upload.
• Avoid submitting identity documents to sites you do not trust or did not intend to use.
• Do not email copies of IDs unless there is no safer alternative and you have independently verified the recipient.
• Be alert for phishing, account-recovery scams, and fraudulent credit applications if you believe your ID may have been exposed.
• Consider a credit freeze where available.

---

Let’s face it, an incognito window can only do so much. 
 
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance.