Assorted Links — September 14, 2026

A cyber incident can be contained without being understood immediately

NovoCure’s September 1 filing says a subsidiary found unauthorized access in mid-August, activated its response plan, and was still investigating exposed information. The filing says medical treatment devices were not accessed and systems remained functional. It is a useful incident-reading lesson: describe what is known, what is protected, and what remains under review.

Hardware security is becoming a lifecycle problem

NIST’s new workshop report describes priorities spanning chip design, manufacturing, deployment, operation, and end of life. Provenance, attestation, software bills of materials, and traceability appear together because a secure component is not enough if nobody can explain where it came from or what happened to it later.

A data center now arrives with a public balance sheet

Canada’s responsible-data-center principles ask projects to account for electricity ratepayers, water use, and lasting local benefits. The framework is not a universal rulebook, but it captures a practical shift: compute capacity is infrastructure with physical inputs and community consequences, not an invisible cloud abstraction.

Digital resilience includes the things that are not called cyber

Singapore introduced a bill covering the security and resilience of major cloud services and data centers, including power, cooling, fire, and other operational failures. It is a useful reminder for smaller organizations too: an incident plan that names malware but not dependencies is not yet a resilience plan.

NASA’s new X-ray objects are a reminder that discovery starts as a puzzle

NASA’s September science roundup highlights Chandra observations of mysterious X-ray objects alongside other current work. A compelling scientific result does not always arrive as an answer; sometimes it is a new object or signal that makes the next observation worth doing.

An AI cyber-defense pilot starts with constrained work

The Center for Internet Security announced a pilot with state and local organizations to examine whether AI can help identify, validate, and prioritize defensive findings. The interesting boundary is the work being tested: assisting established controls and remediation decisions, not handing an unattended system the authority to run security.

AI operations still have to earn trust from the people on call

NTT DATA says it is expanding an AI-powered infrastructure-operations platform using monitoring, predictive analytics, and automation. The vendor’s claims are not independent performance evidence, but the operational question is useful: an AI system becomes part of support only when people can see what it noticed, why it acted, and how to correct it.

Space technology is also a story about the systems behind the mission

NASA’s Discovery Days program uses hands-on exhibits to show how power, propulsion, communications, and materials support Artemis work. The event is aimed at the public, but the underlying idea travels well: visible products depend on layers of specialized infrastructure that usually stay out of sight.