Montreal, September 21, 2026 — Autumn tech season has arrived in full force. Tomorrow morning in Maui, Qualcomm opens the Snapdragon Summit and is expected to confirm the numbers that have already leaked: a smartphone processor whose fastest core clocks above 5 GHz for the first time in the industry's history. This week also brought a sobering reminder from Google that the browser sitting on almost every laptop and desktop we sell has just been patched against its sixth actively-exploited zero-day of the year, and Samsung Display quietly confirmed that its next generation of QD-OLED television panels will push peak brightness to 4,500 nits — a jump that changes how vivid highlights, sunlight glare and HDR content will look on our showroom floor next year. Behind each of these headlines sits real physics, real materials science and real silicon engineering, not just marketing copy. In today's edition of the PcHybrid tech briefing we scanned ten of the most significant technology stories of the past week, then chose the three with the deepest technical story to tell and the clearest connection to the laptops, phones, tablets and displays you can buy from us today.

Today's Tech Radar: The 10 Stories We Tracked

Here is the shortlist we compiled this morning from the past week of coverage, before narrowing it down to our three deep dives below.

Three of these ten stories share a common thread that we think deserves the deepest treatment: they are all about the physical limits of computing hardware being pushed outward this week — clock speed in silicon, brightness in a display panel, and the attack surface of the software that sits between you and the internet. Below, we unpack each one, the engineering behind it, and how it should influence what you buy.

1. Breaking 5 GHz: Inside Qualcomm's Snapdragon 8 Elite Gen 6

Starting September 22 in Maui, Qualcomm's annual Snapdragon Summit will formally introduce the Snapdragon 8 Elite Gen 6 — but thanks to a Geekbench listing that surfaced from one of Qualcomm's own internal reference devices on September 10, we already know more about this chip than any Snapdragon flagship at this stage in past years. The listing showed a mobile processor with a prime CPU core running at 5.11 GHz, a first for any smartphone chip in the industry's history.

Qualcomm's Oryon CPU cores are the foundation of both its phone and laptop silicon. Photo: Igor Omilaev / Unsplash.

Why clock speed alone doesn't tell the story

Clock speed — measured in gigahertz, or billions of cycles per second — describes how fast a processor's internal clock ticks, and each tick lets the chip advance one step of computation. It is tempting to treat it as the whole story, the way horsepower is often treated as the whole story for a car engine. But a modern flagship chip is not one core running at one speed; it is a heterogeneous cluster of cores tuned for different jobs. The Snapdragon 8 Elite Gen 6 reportedly uses a 2+3+3 Oryon core layout: two "prime" cores built for the heaviest bursts of single-thread work (web page rendering, opening apps, the workload that makes a phone feel instantly responsive), three "performance" cores for sustained multi-threaded loads such as gaming or video editing, and three efficiency cores that handle everything else — background sync, notifications, sensors — at a fraction of the power draw. In the Geekbench listing, the prime cores ran at that record 5.11 GHz, the performance cluster at 4.03 GHz, and the efficiency cluster at 3.74 GHz. The headline number belongs to only two of the chip's eight cores; the other six are tuned for endurance, not records.

This is also why Qualcomm is, for the first time, launching two distinct flagship dies rather than one: the standard Snapdragon 8 Elite Gen 6 (internally SM8950) and a higher-tier Pro/Extreme variant (SM8975) that is the one setting the clock-speed record. Splitting the flagship tier in two lets Qualcomm sell a cheaper, still very fast chip to mainstream flagships while reserving the most aggressive binning — the manufacturing process of sorting chips by how well individual silicon dies tolerate high voltage and heat — for the very top of the market. It is the same logic Intel and AMD have used for years with unlocked "K" or "X" processor variants, now arriving in a phone chip.

The manufacturing story: TSMC's 2nm node

None of this clock speed is possible without a manufacturing process to support it, and both Gen 6 variants are built on TSMC's 2-nanometre (N2) process node. The "2nm" label doesn't literally mean any transistor feature measures two billionths of a metre — it is a marketing-derived generation name — but it does mark a real architectural shift: TSMC's N2 node is the company's first high-volume process to use gate-all-around (GAA) nanosheet transistors in place of the FinFET transistors that have powered every leading-edge chip since roughly 2015. In a FinFET, the gate — the electrode that switches the transistor on and off — wraps around three sides of a thin silicon fin. In a gate-all-around nanosheet transistor, the channel is reshaped into stacked horizontal sheets, and the gate material wraps completely around all four sides of each sheet. That extra control surface lets the gate shut the channel off more completely when the transistor is meant to be "off," which directly reduces a phenomenon called leakage current — power that a chip wastes even when it isn't actively switching. Less leakage at a given clock speed means a chip can either run cooler at the same performance or push clock speeds higher within the same thermal budget, which is exactly the trade Qualcomm appears to be making with the Gen 6 Pro's 5-GHz-plus prime core.

Process yield — the percentage of manufactured chips on a wafer that come out defect-free and usable — is the unglamorous but decisive variable behind any new node's success, because low yields mean high prices and constrained supply. Industry reporting from earlier this year pegged TSMC's 2nm yields at roughly 60–70%, compared with an estimated 55% for Samsung Foundry's competing process. That gap is a major reason Qualcomm, like most of the industry's leading-edge chip designers, has stayed a TSMC customer for its flagship silicon rather than dual-sourcing.

New tricks beyond raw speed: FlexCache, memory and thermal design

Alongside faster clocks, Qualcomm has reportedly built in a new cache technology called Oryon FlexCache, which allows the chip to dynamically reallocate cache memory — the small, extremely fast pool of on-chip memory that stores data a core is likely to need next — between cores depending on workload, rather than statically partitioning it. The standard Gen 6 pairs its CPU cluster with a shared 16 MB L2 cache and an Adreno 845 GPU (a six-slice design with 12 MB of dedicated graphics memory and 6 MB of system-level cache), while the Pro variant steps up to an Adreno 850 GPU with 18 MB of dedicated graphics memory — a reported 50% increase in GPU memory bus width and capacity over the previous Snapdragon 8 Elite generation. On the memory side, the standard chip supports LPDDR5X system memory and UFS 5.0 storage, while the Pro variant adds support for the newer, faster LPDDR6 standard alongside LPDDR5X, giving device makers a choice depending on cost and availability.

All of that extra performance generates heat that has to go somewhere, which is why the Pro variant reportedly introduces Heat Pass Block (HPB) technology: a dedicated heat-spreading layer built directly into the chip package, sitting above the silicon to pull heat out faster before it ever reaches the phone's own vapor chamber or heat pipes. This is the same engineering pattern the PC industry has used for a decade — better on-package heat spreading buys headroom for sustained clock speeds — arriving in a smartphone chip for the first time at this scale.

What this means for your next phone or laptop purchase

The Snapdragon 8 Elite Gen 6 will power flagship Android phones arriving over the next several months, but the more immediately useful takeaway for most shoppers is what this generation of Oryon-derived engineering already means for the devices on our shelves today. Qualcomm's Oryon CPU architecture — the same core design lineage, scaled up for a larger thermal envelope — already powers the Snapdragon X Elite chip inside Windows laptops such as our in-stock Microsoft Surface Laptop 7 15" (Snapdragon X Elite, 16 GB / 512 GB), which is why Windows-on-Arm laptops have posted some of the best battery-life-per-watt numbers in the Windows ecosystem this year — the same architectural philosophy of wide, efficient cores paired with dedicated efficiency cores for background tasks. If you want a taste of where Qualcomm's phone silicon is headed today, our in-stock Samsung Galaxy Z Fold7 (512 GB) already runs on an Oryon-based Snapdragon platform with prime cores clocked at 4.47 GHz — extremely close to this year's flagship territory, in a folding form factor, and with 12 GB of RAM to keep multiple apps resident across its dual screens. And if your priority is simply a reliable 5G phone at an accessible price rather than record clock speeds, the in-stock Samsung Galaxy A16 5G (128 GB) covers the fundamentals — a 6.7" Super AMOLED display and 5G connectivity — without asking you to pay for silicon most everyday tasks will never fully exercise. Flagship clock-speed records make headlines, but for the vast majority of buyers, the practical question is always the same: does the chip in front of you comfortably outlast the next two or three years of app updates? Every one of these three devices answers yes.

2. The Brightness Race: How Samsung Display Is Pushing QD-OLED to 4,500 Nits

Samsung Display has confirmed that its 2026-generation QD-OLED television panels will reach a peak brightness of 4,500 nits, up from the roughly 4,000-nit figure claimed for last year's panels — a 12% increase achieved, in the company's words, through "newly optimized organic materials" and by combining the maximum brightness contribution of each of the panel's red, green and blue sub-pixels. For a technology that only reached mass-market television screens a few years ago, this is a meaningful jump, and it is worth understanding exactly what is being measured and why it is hard to achieve.

Peak brightness determines how vivid highlights look and how well a screen fights ambient light. Photo: Oscar Nord / Unsplash.

What "nits" actually measure, and why OLED brightness is hard-won

A nit is a unit of luminance — one candela per square metre — describing how much visible light a surface emits toward your eye. Cloudy daylight outdoors is roughly 1,000–2,000 nits; a sunny beach can exceed 10,000 nits. A television's peak-brightness rating tells you how convincingly it can reproduce a small bright highlight, like sunlight glinting off a car or a flash of muzzle fire in a film, against a darker background — and it is also what lets a screen remain watchable in a sun-filled room.

QD-OLED panels earn both halves of their name from two different pieces of physics working together. The "OLED" half is an organic light-emitting diode layer: a stack of carbon-based compounds that emit their own light directly when a current passes through them, pixel by pixel, which is why OLED screens achieve true per-pixel black — a pixel that is off emits no light at all, unlike an LCD panel where a backlight always leaks some light through even a "black" pixel. The "QD," or quantum dot, half is a layer of nanometre-scale semiconductor crystals sitting in front of the OLED emitters; quantum dots absorb light of one color and re-emit it at a different, extremely narrow wavelength determined by the physical size of the crystal, which is what gives QD-OLED its wide, saturated color gamut compared with a conventional white-OLED-plus-color-filter design.

The catch has always been brightness. Every OLED material degrades — loses efficiency and eventually shifts color — a little more with every hour it is driven, and blue OLED emitters in particular have historically been the shortest-lived and least efficient of the three color channels, which is why manufacturers are conservative about how hard they push an OLED panel's peak output: push too hard and you accelerate burn-in and shorten the panel's usable life. Samsung Display's claimed 12% brightness gain for 2026 is therefore not simply a matter of turning up a dial; it reflects genuine improvements in the organic emitter materials themselves — chemistry that emits more photons per unit of electrical current and per unit of degradation, which is the real bottleneck the whole OLED television industry is racing to solve.

Panel specification versus what actually ships in your living room

It is worth being precise about what the 4,500-nit figure represents, because it is a laboratory panel specification, not a promise about any specific television you can buy. Samsung Display's own figures distinguish peak brightness (4,500 nits, achievable only on a very small portion of the screen for a short duration, a measurement convention often called a "1% window") from full-screen brightness, which is far lower — around 450 nits, a tenth of the peak figure — reflecting the reality that no OLED panel can sustain its maximum output across the entire screen simultaneously without overheating or drawing more current than its power supply and thermal design allow. Independent measurements of this year's actual shipping televisions illustrate the gap between panel potential and finished product: reviewers at FlatpanelsHD measured a peak of 2,069 nits on Samsung's current-generation S95F television and 1,689 nits on Sony's Bravia 8 II — both QD-OLED panels from Samsung Display, both well under half of the panel's rated ceiling, because a finished television's brightness is also gated by its power electronics, cooling, and the manufacturer's own longevity targets. Extrapolating the same 12% improvement to next year's shipping TVs suggests calibrated peak brightness approaching roughly 2,500 nits — still a meaningful step up, but a useful reminder to treat any manufacturer's panel-level nit figure as a ceiling, not a delivered spec.

Why this matters for your next screen purchase

Samsung Display manufactures the QD-OLED panels used in both Samsung's and Sony's television lineups, so this generational jump will show up across multiple brands' 2027 model years rather than being exclusive to one. For shoppers deciding what to buy today, the practical guidance is to separate the marketing number from your actual viewing environment. If your room has controlled lighting — blackout curtains, evening viewing, a dedicated home theatre — the incremental brightness gains at the very top of OLED's range matter less than OLED's core advantage: perfect per-pixel black levels and essentially instant pixel response time, which is why our in-stock Asus ROG Swift PG27UCDM 27" 4K OLED gaming monitor remains an excellent choice for a desk setup or a dedicated media room today — you get the same fundamental OLED contrast advantage the 4,500-nit panels are built on, without waiting a model year. If your priority is instead a very large screen for a bright, sunlit living room where peak brightness and glare-fighting matter more than absolute black levels, a high-nit LED-LCD panel remains the more practical choice at today's prices; our in-stock LG 75" 4K UHD Smart LED-LCD TV delivers a genuinely large-format 4K picture without the price premium OLED technology still commands at that screen size. And for business, retail or presentation environments that need a screen running many hours a day in a well-lit space — a boardroom, a showroom, a reception desk — our in-stock Samsung QM85C 85" UHD commercial display is purpose-built for exactly that job, with a 500-nit, non-glare, 24/7-rated panel engineered for continuous daytime operation rather than a single OLED's cinematic peak.

3. Chrome's Sixth Zero-Day of 2026: What a "Type Confusion" Bug Actually Is

Google has patched CVE-2026-85046, a high-severity flaw (CVSS score 8.8) in Chrome's V8 JavaScript and WebAssembly engine that was already being actively exploited when the fix shipped — the sixth Chrome zero-day of 2026 to reach that grim milestone. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its Known Exploited Vulnerabilities catalog on September 4 and gave federal agencies until September 18 to patch, underlining how seriously government security teams treat an actively-exploited browser bug.

Keeping browsers and operating systems patched remains the single most effective defense against zero-day exploits. Photo: FlyD / Unsplash.

Type confusion, in plain language

The vulnerability is described by researchers as a type confusion bug inside V8's compiler — the internal software component that translates the JavaScript running on a web page into machine instructions your CPU can execute. To understand type confusion, it helps to know that V8 tags every array in memory with an internal "map" that tells the engine exactly what kind of data the array holds and, crucially, how to interpret the raw bytes stored at each position — for example, whether a given array holds only small integers (a format called PACKED_SMI_ELEMENTS, optimized for size and speed) or a mix of arbitrary values including objects and floating-point numbers (PACKED_ELEMENTS, a more general and slightly slower format). The V8 compiler's job includes deciding, ahead of time, which of these representations an array will use, and generating optimized machine code on that assumption.

According to the security researcher credited with the technical analysis, CVE-2026-85046 lets an attacker trick the compiler into a state where an array is actually tagged as one type — PACKED_ELEMENTS — while the compiler's generated code still treats it, and the raw memory behind it, as though it were the other, incompatible type. That mismatch is the "confusion": the engine reads or writes memory using an interpretation that no longer matches what is actually stored there. Because JavaScript engines are built to be extremely fast, they skip many of the bounds- and type-checks a conservative language runtime would perform on every single access, trusting the compiler's earlier analysis instead — which is precisely why a bug at the type-analysis stage is so dangerous. Once that trust is broken, the flaw can be escalated by a skilled attacker into what security researchers call an "arbitrary read/write primitive": the ability to read or overwrite essentially any address in the browser process's memory, which is usually enough to build a chain that ends in full remote code execution, all triggered simply by getting a victim to load a booby-trapped web page.

Why this keeps happening — and why it's not unique to Chrome

It's tempting to read six zero-days in a single year as evidence that Chrome is uniquely troubled, but the more accurate framing is that V8, like every high-performance JavaScript engine (Apple's JavaScriptCore and Mozilla's SpiderMonkey included), is under constant, well-funded attack precisely because it sits at the intersection of two hard problems: it must run untrusted code — literally any JavaScript on any website you visit — at speeds competitive with compiled native software, and it must do so safely. Achieving that speed requires exactly the kind of aggressive, type-specialized compiler optimizations described above, and every such optimization is a new opportunity for a subtle logic error to open a security hole. Google's own transparency about these bugs — and the speed of its patch cadence, typically days from confirmed active exploitation to a shipped fix — is in fact one of the reasons Chrome, alongside other actively maintained browsers, remains a reasonable default choice, provided updates are actually installed.

A pattern across the whole network, not just the browser

This week's Chrome patch did not arrive in isolation. Security researchers also disclosed that attackers are hijacking MikroTik routers through internet-exposed SSH management interfaces that require no authentication at all, and separately confirmed that thousands of D-Link routers remain compromised by a botnet nicknamed "AryStinger." Taken together with the Chrome zero-day, the pattern is consistent: attackers are opportunistically exploiting whatever piece of your network sits with an unpatched, exposed, or poorly configured door — whether that door is a browser engine, a router's management interface, or an outdated firmware image — and are doing so at industrial scale using automated scanning rather than hand-picked, high-value targets. That should reshape how any household or business thinks about its risk: you do not need to be a specific target to be swept up in one of these campaigns; you only need to be running unpatched software with an exposed attack surface.

What you should actually do about it

The practical defense against a bug like CVE-2026-85046 has not changed in twenty years, even as the bugs themselves have grown more sophisticated: install browser and operating system updates promptly, and prefer devices and platforms that make that easy rather than optional. This is one of the most concrete, quietly important advantages of buying a current-generation business notebook rather than holding onto older hardware — modern Windows 11 machines such as our in-stock Microsoft Surface Laptop 7 13.8" (Intel Core Ultra 7, 32 GB / 512 GB) and our in-stock Lenovo ThinkPad T14s Gen 6 Copilot+ PC ship with current Windows 11 security baselines, hardware-backed credential protection, and full vendor support for the fastest possible security patch delivery — all of which meaningfully reduces the window during which a browser zero-day like this one can be leveraged against your business. If your organization is managing a fleet of laptops, routers or point-of-sale devices and you're not confident every one of them is current on firmware and patches, that audit is exactly the kind of engagement our team handles regularly — request a free quote from our team and we'll help you assess where your exposure actually is.

Reading the Three Stories Together

Pull back far enough and this week's three deep dives describe the same underlying story from three different angles: the physical and engineering limits of consumer technology are all being pushed at once. Qualcomm's silicon engineers are extracting more clock speed from a smaller, more efficient transistor. Samsung's materials scientists are extracting more light from an organic emitter without shortening its life. And Google's security engineers are racing, patch after patch, against attackers probing the same performance-driven compiler optimizations that make your browser fast in the first place. None of this progress is free — faster chips need better thermal engineering, brighter panels need better organic chemistry, and faster software needs a security team working as hard as the attackers targeting it. For anyone buying hardware this fall, the lesson is to look past the headline number — the GHz, the nit count, the CVSS score — and ask the harder question underneath it: what engineering had to happen to get here, and what does it actually change about the device sitting in front of you?

Glossary of the Week

Setup at a Glance

Sources & Further Reading

Snapdragon 8 Elite Gen 6 and Snapdragon Summit 2026: Gizmochina, Tech Insider. QD-OLED 4,500-nit panels: FlatpanelsHD. Chrome V8 zero-day CVE-2026-85046: The Hacker News, SecurityWeek. Router hijacking and botnets: The Hacker News Weekly Recap, Malwarebytes. Nvidia RTX Spark and PC chip competition: CNBC. Meta's in-house AI chip: CNBC. Qualcomm and Arm in data centers: Seoul Economic Daily. AI "model fatigue": CNBC, Startup Fortune. September smartphone launch wave: Sunday Guardian Live. Photos: Unsplash (free commercial license).

The PcHybrid tech briefing is researched and written daily. Questions about matching any of this week's technology to your needs? Our team at pc-hybrid.ca is happy to help — request a free quote here.

Montreal — September 17, 2026. Three storylines dominated the technology conversation this week, and all three land squarely on the devices sitting on your desk or in your living room. A global memory shortage is quietly reshaping how much RAM and storage you get in a new laptop or phone — and how much you'll pay for it. Google shipped one of its heaviest Android security bulletins of the year, patching 180 vulnerabilities across two waves. And at IFA 2026 in Berlin, Samsung and LG both bet big on a display technology called Micro RGB, positioning it as the next serious challenger to OLED in large-screen televisions. Below, we break down the ten stories we tracked this week, then go deep on the three with the most substance — the underlying engineering, why it matters to the Canadian market, and what it means if you're shopping for a new laptop, phone, tablet, or TV this fall.

Today's Tech Radar

Deep Dive 1: The Great Memory Squeeze of 2026 — Why Your Next Laptop or Phone Costs More and Comes With Less RAM

If there is one story this year that explains almost everything else happening in consumer hardware pricing, it's this one. Memory chips — DRAM and NAND flash — have quietly become the most contested commodity in technology, and the shortage is now visibly reshaping the laptops, phones and tablets sitting on store shelves.

RAM modules like this one are now competing directly with AI data centers for fab capacity. Photo: Karminski / Unsplash.

The science: what DRAM and NAND actually do, and why they're hard to make more of

Every device you own relies on two very different families of memory chips, and the shortage is hitting both. DRAM (Dynamic Random-Access Memory) is the working memory — the RAM — that your processor uses to hold data it's actively computing on. Each bit of DRAM is stored as a tiny electrical charge in a capacitor paired with a single transistor. Because that charge leaks away in milliseconds, the chip has to "refresh" every cell thousands of times per second, which is why DRAM is fast but volatile — it forgets everything the instant power is cut. NAND flash, by contrast, is what your SSD or phone's internal storage is built from. It stores bits by trapping electrons inside an insulated "floating gate" or charge-trap layer within each transistor, a state that persists with no power at all. That's why NAND is used for long-term storage while DRAM handles short-term, high-speed work.

Both technologies are manufactured on the same handful of advanced fabrication lines, run overwhelmingly by three companies: Samsung, SK Hynix, and Micron. That concentration is the root of the current crisis. According to IDC's 2026 market analysis, DRAM supply is expected to grow only around 16% year-on-year in 2026, with NAND growing about 17% — both well below the growth needed to keep pace with demand. The reason isn't a lack of factories; it's where those factories are choosing to point their output. A newer class of memory called HBM (High Bandwidth Memory) — DRAM dies stacked vertically and connected through thousands of microscopic vertical interconnects called through-silicon vias (TSVs) — is exactly what AI accelerator GPUs need to feed data to their compute cores fast enough to be useful. HBM commands far higher margins than the ordinary DRAM used in a laptop or phone, so Samsung, SK Hynix and Micron have been reallocating wafer capacity toward it and away from commodity memory. The result: less "ordinary" DRAM and NAND reaching the consumer electronics supply chain, even though total fab output hasn't shrunk.

The industry context: who gets hit, and how hard

The knock-on effects are already visible in how devices are speced and priced. Reporting compiled by Tom's Guide shows Chinese phone makers including Xiaomi and Redmi warning of price increases in the 20–30% range for 2026, while Dell and Lenovo have told commercial customers that current quotations expire at the end of the year, with resets to follow. IDC's modeling lays out the mechanics: memory typically represents 15–20% of the bill of materials for a mid-range smartphone and 10–15% for a flagship, so even a moderate price spike ripples straight through to the shelf price. IDC's downside scenarios for 2026 range from a "moderate" case — a roughly 3% smartphone market contraction paired with a 3–5% average selling price increase — to a "pessimistic" case with a market contraction above 5% and price increases as high as 6–8%. The PC market faces a similar squeeze, with major vendors signaling 15–20% price hikes and contract resets, according to the same analysis.

Not every manufacturer is affected equally. Apple and Samsung, IDC notes, have long-term supply agreements that let them lock in memory 12 to 24 months in advance — a structural hedge that smaller manufacturers such as Transsion, Realme, and various budget Android brands don't have. Tom's Hardware reports that Fairphone has said memory now accounts for as much as 60% of the materials cost on some devices, forcing smaller laptop and phone makers to redesign products around lower memory configurations and to invest more heavily in testing for counterfeit chips slipping into a tighter, more expensive supply chain. Reporting also indicates that mid-range phones are being pushed from 12GB RAM options down to 6–8GB, and budget phones are being capped near 4GB, while mid-range and budget laptops are seeing configurations drop toward 8GB. TrendForce, cited in that same coverage, expects the PC market to feel significant price fluctuation by the second quarter of 2026, and more than one analyst has suggested meaningful relief is unlikely before 2028.

There's a real irony sitting underneath all of this: the same AI boom that's consuming the memory supply is also the reason manufacturers want to sell you more memory. Microsoft's Copilot+ PC specification requires a minimum of 16GB of RAM to run on-device AI features, with premium configurations recommending 32GB or more — right as component costs make hitting those numbers on a mainstream laptop more expensive than ever.

What this means for your next purchase

The practical takeaway is straightforward: memory-hungry configurations bought today, before further contract resets take hold, are likely to be both cheaper and better specified than similar configurations bought in six months. A laptop with 32GB of soldered RAM is essentially impossible to upgrade later — with memory this scarce, that decision is worth making up front rather than assuming you can add capacity down the road. Our Microsoft Surface Laptop 7 (13.8", Intel Core Ultra 7, 32GB RAM, 512GB SSD) (in stock) is a good example of getting ahead of the curve: it already meets and exceeds the Copilot+ 16GB baseline, which matters more this year than in a typical product cycle. If your budget points toward a smaller machine, the Lenovo ThinkPad T14s Gen 6 (16GB RAM, Copilot+ PC) (in stock) still clears that bar comfortably. On the phone side, our Samsung Galaxy Z Fold7 (12GB RAM, 512GB storage) (in stock — final unit) shows how flagship devices with long-term supply contracts are still shipping generous memory configurations that mid-range and budget phones may no longer be able to match going forward. And for shoppers who want a capable tablet locked in at today's pricing before shortage effects cascade further down the product stack, the Samsung Galaxy Tab A11+ (6GB RAM, 128GB storage) (in stock) remains a sensible, well-supplied option.

Deep Dive 2: Android's Biggest Patch of the Season — and the Anatomy of a Zero-Click Flaw

Security researchers and IT administrators had a busy week. Google's September 2026 Android security bulletins, published in two waves on September 1 and September 5, addressed a combined 180 vulnerabilities — one of the largest monthly totals of the year, according to SecurityWeek's reporting, and notable in part because July and August 2026 had passed without a comparable bulletin.

Keeping a phone's OS current closes off exactly the kind of low-interaction flaws patched this month. Photo: Smartupworld / Unsplash.

The science: what makes a vulnerability "critical," and what "zero-click" really means

Not all software bugs are security vulnerabilities, and not all vulnerabilities are equally dangerous. Security researchers grade flaws largely on two axes: what an attacker gains if the bug is exploited, and how much the attacker has to do to trigger it. A bug that merely crashes an app is a nuisance; a bug that lets an attacker run their own code with the same privileges as the operating system is categorized as critical, because from there they can potentially read messages, install spyware, or pivot to other parts of the device.

According to SecurityWeek's breakdown, the September 1 bulletin alone covered 95 vulnerabilities: 56 in the Android System component (23 of them rated critical), 37 in the Framework layer (3 critical), and one in the Android Runtime. A second bulletin on September 5 covered 85 additional flaws in kernel and device-specific components — the layers closest to a phone's actual chipset hardware, which vary by manufacturer and are patched on a slower cadence than the core OS. The single flaw drawing the most attention, CVE-2026-28662, is a memory corruption bug in the Wi-Fi stack. Memory corruption vulnerabilities happen when a program writes data past the boundary it's supposed to stay within — into memory that belongs to something else — and a skilled attacker can often turn that overwritten memory into a way to redirect the processor into executing their own instructions instead of the program's legitimate code. What makes CVE-2026-28662 particularly serious, according to security analyst Adam Boynton, is that it enables remote code execution "without additional privileges or user interaction" — meaning a nearby malicious Wi-Fi access point or crafted network traffic could compromise a vulnerable device without the owner ever tapping a link, opening a file, or approving a permission prompt. That's the technical definition of a "zero-click" exploit, and it's the category security teams worry about most, precisely because there's no user behavior to train around.

The industry context: patch fragmentation is still Android's hardest problem

Android's patching model is inherently more complex than a single-vendor platform. Google issues the monthly security patch levels, but each phone maker — and in many cases each carrier — has to test and push that patch to its own hardware and software stack before it reaches your device. That's why the September bulletins were split in two: the September 1 patch level covers the shared Android System and Framework code common to every device, while the September 5 patch level covers kernel and chipset-specific components that differ by manufacturer and silicon vendor. A phone can be "up to date" on the first patch level while still lacking the second, and devices with a poor update track record can lag for months. This is also, notably, why the free-quote conversation matters here: if you manage phones for a small business or a family and you're unsure whether your fleet is current, our team can review your device inventory and update posture — you can request a free quote from our team to have that looked at.

Practical buying and security advice

Two habits meaningfully reduce your exposure to exactly this kind of vulnerability. First, enable automatic OS and security updates rather than manually deferring them — a zero-click Wi-Fi flaw doesn't care how careful you are online, only whether the patch has actually been installed. Second, when buying a new phone, the manufacturer's demonstrated update commitment is a real, measurable spec, not marketing fluff: Samsung's current Galaxy flagships, including the Galaxy Z Fold7 (in stock), ship with Samsung Knox's multi-layered hardware and software protections and a long committed update window, which matters far more over a three-to-five-year ownership period than any single benchmark score. If you're weighing device security as part of a purchase decision — for yourself, your family, or your organization — our team is happy to walk through the options; you can request a free quote from our team at any time.

Deep Dive 3: Micro RGB — The Technology Samsung and LG Are Betting Will Out-Muscle OLED in Your Living Room

Television technology rarely produces genuine architectural news — most years bring incremental brightness and processing gains on the same underlying panel types. This year is different. At IFA 2026 in Berlin (September 4–8) and in Samsung's parallel pricing announcement, both companies put real weight behind a technology called Micro RGB, aimed squarely at the large-screen segment where OLED has dominated the premium conversation for years.

Micro RGB targets exactly this use case: very large screens, in bright rooms, at prices below flagship OLED. Photo: Spacejoy / Unsplash.

The science: three ways to put color on a screen

To understand why Micro RGB is a genuinely different approach, it helps to place it next to the two technologies it's competing with. An OLED panel is self-emissive: every individual pixel is its own tiny organic light-emitting diode that produces its own light and color, and pixels that should be black simply switch off completely. That's what gives OLED its defining strength — true, per-pixel black levels and very wide viewing angles — but it comes with trade-offs: organic materials degrade with use (creating burn-in risk with static images over time), and pushing very high sustained brightness across a large organic panel is harder and more expensive than doing the same with an inorganic backlight.

A conventional QLED or Mini-LED television takes a different approach: a backlight made of white or blue LEDs, grouped into dimming zones, shines through a liquid-crystal layer and then through a quantum-dot film that converts some of that light into the pure reds and greens needed to fill out the color gamut. This is often cheaper to produce at large sizes and can achieve very high peak brightness, but because the backlight and the color-generating layer are separate, you get some light bleed between zones and generally less precise color-per-zone control than a self-emissive panel.

Micro RGB takes a third path that borrows strengths from both. Instead of a white or blue backlight paired with a separate color-conversion layer, it uses a backlight made of enormous numbers of individually addressable red, green, and blue micro-LEDs directly. Because each cluster of LEDs can independently control not just brightness but hue, the panel can tune color and light output together, zone by zone, rather than generating white light and then filtering or converting it into color afterward. Samsung's marketing names for the resulting image-processing stack — "Micro RGB Color Booster Pro" and "Micro RGB HDR Pro" — describe software that maps content dynamically across those RGB zones; Samsung states its 2026 Micro RGB sets achieve 100% coverage of the BT.2020 color space, a wider reference gamut than the more commonly cited DCI-P3 standard used for most current premium TVs. LG's parallel technology, Micro RGB evo, applies the same individually controllable RGB LED backlight concept, which the company is pairing with a new α11 AI Processor Gen3 that LG says delivers 5.6 times the AI computing power of its 2025 predecessor — headroom that matters because mapping color and brightness independently across thousands of individually driven LED zones in real time, frame by frame, is a meaningfully heavier processing task than driving a conventional backlight.

The industry context: a genuine three-way fight for the premium living room

The pricing Samsung has revealed tells you how seriously it's taking this launch. According to TechRadar's reporting, Samsung's flagship 65-inch Micro RGB set (the R95H) is priced at $3,199.99 USD, undercutting the comparable 65-inch LG G6 OLED at $3,399.99 and the 65-inch Hisense UR9 mini-LED at roughly $3,499.99 — a direct, aggressive shot at both of its most credible large-screen rivals. Samsung's lineup extends down to a more accessible R85H series starting at $1,599.99 for 55 inches, and up to a 115-inch MR95F flagship at $29,999.99, alongside gaming-friendly specs like up to 165Hz refresh rates and Dolby Atmos support with object tracking. LG's Micro RGB evo, described in its IFA 2026 coverage as the company's response to Samsung's giant-screen ambitions, is being positioned specifically for very large living-room installations where LG believes conventional backlighting starts to show its limits. Separately, LG also used the show to reaffirm its OLED credentials with the ultra-thin Wallpaper TV W6 — a 9mm-profile panel, available in 77-inch and 83-inch sizes, that transmits video and audio wirelessly from a separate Zero Connect box up to 10 meters away and claims a Brightness Booster Ultra system delivering up to 3.9 times the brightness of a traditional OLED panel, alongside 165Hz 4K gaming support.

What this means if you're shopping for a TV this year

The honest, practical answer for most Canadian buyers this fall is timing. Micro RGB sets are launching first at genuine flagship price points — Samsung's own numbers put the technology firmly in the $1,600-and-up bracket even at the smaller 55-inch size — so for most households, a well-specified conventional 4K Smart LED-LCD television remains the pragmatic choice today, with Micro RGB worth watching as it matures and (likely, following the usual pattern for new display tech) becomes more affordable over the next one to two product cycles. If you want a large, sharp 4K set now, our in-stock LG 75" Smart LED-LCD 4K UHDTV (in stock) and LG 86" Smart LED-LCD 4K UHDTV (in stock) both give you a genuinely large-format 4K picture at a fraction of Micro RGB flagship pricing, which for most living rooms — sports, streaming, everyday viewing — remains the better value call while the newer RGB-backlight technology works its way down-market.

Glossary of the Week

Setup at a Glance

Whatever you're shopping for this fall — a laptop that won't be squeezed by the next round of memory price resets, a phone with a security and update track record you can trust, or a TV that fits your room and budget rather than next year's flagship price tag — our team can help you match the right device to your needs and budget. You can also request a free quote from our team if you'd like a personalized recommendation or a security review for the devices you already own.

Sources & Further Reading

Memory shortage and market data: IDC, "Global Memory Shortage Crisis: Market Analysis"; Tom's Guide, "RAMageddon" coverage; Tom's Hardware, on Fairphone and device redesigns. Android security: SecurityWeek, "Android's September 2026 Updates Patch 180 Vulnerabilities"; ongoing exploited-vulnerability tracking via CISA's KEV catalog alerts. Display technology: TechRadar, on Samsung's 2026 Micro RGB pricing; Basic Tutorials, "LG at IFA 2026". Additional context: Android Headlines, on the Snapdragon 8 Elite Gen 6; CNBC/Reuters, on Meta's AI chip production; Tech Xplore, on energy-efficient edge AI chip design. Photos: Unsplash (free commercial license).

Montreal, Tuesday September 15, 2026. Three storylines dominated the technology wires over the past seven days, and — unusually — all three of them end up on the same desk: yours.

The first is a supply-chain story that has quietly become the single biggest determinant of what a laptop costs in Canada this autumn. Memory. Specifically, the fourth generation of High Bandwidth Memory, HBM4, which is being consumed in enormous volume by AI accelerators and which, because of the way it is manufactured, removes far more fabrication capacity from the world than the bits it delivers would suggest. DIGITIMES reported on Sunday that Samsung and SK hynix DRAM inventories have fallen below ten days of supply, and that HBM4 requires roughly three times the wafer capacity of conventional DRAM for the same output. That is not an abstraction. It is the reason a 32 GB notebook is a materially different purchase decision in September 2026 than it was in September 2024.

The second is a display story. Samsung's Micro RGB architecture — sub-100-micrometre red, green and blue LEDs used as the backlight itself rather than a white light source filtered into colour — has moved from a single 115-inch halo product into a six-size lineup spanning 55 to 115 inches. The engineering behind it is genuinely interesting, and it clarifies what "wide colour gamut" has actually meant on spec sheets for the last decade.

The third is security. The npm registry — the package repository underneath most of the world's JavaScript — has been hit repeatedly through 2026 by self-replicating supply-chain malware, most recently the Keyv/"Shai-Hulud" campaign flagged in August by Singapore's Cyber Security Agency. It is a story about trust propagation in software, and it has direct consequences for any small business running a website, a point-of-sale system, or a fleet of laptops.

Below is our radar of the ten stories worth knowing this week, followed by three deep dives that explain the underlying science, the industry context, and what any of it means when you are actually choosing hardware. Every product we name below was verified in stock in our Montreal inventory at the time of writing.

Today's Tech Radar — September 15, 2026

Deep Dive 1 — The Memory Supercycle: why HBM4 is quietly setting the price of your next laptop

A DRAM module at macro scale: each black package holds billions of capacitor-and-transistor cells. Photo: Liam Briese / Unsplash.

What a DRAM cell actually is

To understand why the memory market has behaved so strangely for the past eighteen months, it helps to know what is physically being sold. A dynamic random-access memory cell is close to the simplest possible storage element: one transistor and one capacitor. The capacitor holds a charge — charged is a 1, discharged is a 0 — and the transistor acts as a gate that connects that capacitor to a wire called a bitline when the cell is addressed.

The word "dynamic" is the interesting part. The capacitor is tiny and leaky. Charge drains away in milliseconds, so the memory controller must read every row and write it back, over and over, thousands of times per second. This is the refresh cycle, and it is why DRAM consumes power even when nothing is happening and why your laptop's RAM is empty every time you boot. The trade-off is density: one transistor and one capacitor per bit is vastly more compact than the six transistors an SRAM cell needs, which is why your processor has megabytes of cache and gigabytes of DRAM rather than the other way round.

For thirty years, the industry's engineering effort went into shrinking that capacitor while keeping enough charge in it to remain distinguishable from noise — using deep-trench or stacked structures that grow vertically to preserve surface area while shrinking footprint. This is one of the hardest scaling problems in semiconductors, and it is why DRAM density improvements have slowed far more than logic density improvements over the past decade.

Why HBM4 removes three wafers of capacity for every one it delivers

High Bandwidth Memory does not change the cell. It changes the packaging, and it changes it drastically.

A conventional DDR5 module talks to the processor over a bus that is 64 bits wide per channel, running at very high frequency across centimetres of motherboard trace. That distance is the enemy: driving a signal across a printed circuit board at multi-gigahertz rates costs energy, generates reflections, and limits how many parallel wires you can practically route. HBM abandons the approach entirely. Instead of a wide-and-fast bus over a long distance, it uses an extraordinarily wide bus over a very short one.

The DRAM dies are stacked vertically — HBM4 designs reach sixteen layers — and connected to each other by through-silicon vias, or TSVs: microscopic copper-filled holes etched straight through the body of each silicon die. The whole stack then sits millimetres from the processor on a silicon interposer, with a bus thousands of bits wide. SK hynix showed a sixteen-layer, 48 GB HBM4 device at CES 2026, and stacks in this class deliver bandwidth in excess of 2 terabytes per second. You get that number not by running the wires fast, but by running an absurd number of them slowly and in parallel, over a distance so short that the energy per bit collapses.

That elegance has a cost, and it is the cost that is reshaping consumer pricing. Building a sixteen-high stack means thinning wafers to fragile dimensions, drilling and plating tens of thousands of vias per die, aligning and bonding layers with sub-micron precision, and testing at every stage. Yields compound: if each bonding step is 99% successful, sixteen of them are not. A defective die anywhere in the stack can write off the entire assembly, including the fifteen good dies around it. Add the die area consumed by the TSVs themselves and by the base logic die at the bottom of the stack, and the arithmetic becomes brutal — DIGITIMES reports the industry estimate at roughly three times the wafer capacity of conventional DRAM for equivalent output.

The next step is already in view. SK hynix told Hot Chips 2026 that hybrid bonding — joining dies copper-to-copper without intervening solder microbumps — will not be ready for HBM4E, and that its existing MR-MUF approach will carry through NVIDIA's Rubin generation, because stack heights are running into a 775-micrometre packaging ceiling. Samsung used FMS 2026 to show zHBM, a concept that stacks memory directly on top of the accelerator itself, alongside HBM4E samples and an HBM5 preview. Memory is migrating physically closer to compute, and each step closer is more expensive to manufacture.

The squeeze reaches LPDDR5X and DDR5

Here is the mechanism that connects a data centre in Virginia to a laptop in Montreal. A memory fabrication plant is a fungible asset. The same lines that produce DDR5 for notebooks and LPDDR5X for phones can, with retooling, be pointed at HBM and server DRAM — which command far higher margins. Faced with AI infrastructure customers willing to sign long-term supply agreements at premium prices, manufacturers have rationally shifted capacity away from consumer parts.

The numbers are stark. TrendForce's survey found consumer memory prices rising by up to 89% in the second quarter of 2026 alone; 96 Gb LPDDR5X modules moved from roughly US$77 to roughly US$146 in a single quarter. For the third quarter, TrendForce projects conventional DRAM contract prices up 13–18% quarter-over-quarter and NAND flash up 10–15%. Those are smaller increases — but they are increases on top of increases, and the reason for the deceleration is not improved supply. It is that consumer electronics makers have reached the limit of what they can absorb or pass on. Demand destruction, not relief.

The downstream effects are visible across the industry. Micron retired its consumer-facing Crucial brand in February 2026 to concentrate on data-centre and HBM products. Apple raised prices across iPads, Macs, HomePods, Vision Pro and Apple TV in June. Dell and HP have pivoted toward higher-margin premium configurations while trimming entry-level models. Intel's PC CPU prices are expected to rise another 10%, with some low-margin small-core parts heading toward end-of-life. The budget tier of the computing market is being thinned out from several directions at once.

What this means when you buy a machine this autumn

Three practical conclusions follow from the engineering, and they are unusually clear-cut.

First: buy the memory you need at purchase time, not later. This advice used to be the opposite. For twenty years the rational move was to buy a modest configuration and add RAM in two years when it was cheaper. That trade has inverted. Memory is getting more expensive, not less, and the modern thin-and-light laptop has soldered LPDDR5X that cannot be upgraded at all — a consequence of the same physics discussed above, since low-power DRAM needs the short, controlled traces that only direct board attachment provides. The RAM your machine ships with is the RAM it will die with.

If you are specifying a machine that has to last four or five years and you expect to run local AI features, video calls, a browser with sixty tabs and a virtual machine, 32 GB is the configuration to target. The Lenovo ThinkPad T14s Gen 6 with the Ryzen AI 7 PRO 350, 32 GB of RAM and a 512 GB SSD is exactly that specification in a 14-inch touchscreen chassis, and we currently have units in stock. The Microsoft Surface Laptop 7 13.8" with Core Ultra 7, 32 GB and 512 GB is the same idea in a smaller, lighter package, and it is our best-stocked 32 GB machine right now.

Second: 16 GB is still a perfectly good business configuration — buy it deliberately, not by default. For a machine that handles a browser, an office suite, video conferencing and a line-of-business application, 16 GB with a fast SSD remains genuinely sufficient, and paying the 2026 premium for 32 GB you will not use is poor value. The Lenovo ThinkPad E16 Gen 3 with a Core Ultra 5, 16 GB and 256 GB is our deepest-stocked machine in that category. If your users prefer a bigger screen and exceptional battery life, the Surface Laptop 7 15" on Qualcomm's Snapdragon X Elite with 16 GB and 512 GB is an Arm-based alternative worth considering — with the standard caveat that you should confirm your critical Windows applications have native Arm builds or tolerate emulation acceptably.

Third: storage follows the same logic. NAND contract prices are rising 10–15% this quarter. A 512 GB SSD today is better value than a 256 GB SSD plus an external drive in eighteen months, and unlike RAM, running a boot drive at 90% capacity measurably degrades performance because the controller loses the free blocks it needs for wear levelling and garbage collection.

There is one more category worth mentioning, because it is where the memory squeeze bites least. Tablets ship with the memory they ship with and nobody expects to upgrade them, so the calculus is simpler: buy the model that matches the job. The Samsung Galaxy Tab S10 FE 5G is our highest-volume tablet in stock and a sensible fleet device for field staff who need cellular connectivity without a laptop. For heavier work — note-taking, annotation, a genuine second screen — the Samsung Galaxy Tab S11 with the 3 nm MediaTek Dimensity 9400+ and 12 GB of RAM is a considerably more capable machine, though stock is thin.

Deep Dive 2 — Micro RGB: what happens when you stop filtering white light

Large-format 4K panels are now the default centrepiece of both living rooms and meeting rooms. Photo: Prydumano Design / Unsplash.

The compromise hiding inside every LCD television

Almost every LCD television sold in the last fifteen years works the same way, and the way it works is a compromise that most buyers have never had explained to them.

Behind the panel sits a backlight that produces white light. In front of it sits a layer of liquid crystal that acts as a controllable shutter, and in front of that sits a colour filter array — red, green and blue filters, one per subpixel. To show a red pixel, the display shines white light through a red filter and throws away the green and blue components. To show any colour at all, it starts with everything and subtracts.

This is inefficient by construction — most of the light generated is absorbed by filters — but the deeper problem is spectral. The "white" LED in a conventional backlight is not white at all. It is a blue LED coated in a yellow phosphor. The blue light excites the phosphor, which re-emits across a broad yellow-green band, and the eye integrates blue plus broad-yellow into something it reads as white. The resulting spectrum has a sharp blue spike and a wide, smeared hump covering green and red.

Now push that spectrum through a red filter. The filter passes a band of wavelengths, and in the red region the phosphor emission is weak and broad. You get red, but it is a desaturated, impure red — a mixture of wavelengths rather than a narrow band. The same problem afflicts green, where the phosphor hump overlaps heavily with the blue channel. This is precisely why colour gamut coverage numbers on television spec sheets have historically topped out where they do.

Quantum dot technology, used in QLED sets for years, was the first serious attack on this problem. Quantum dots are semiconductor nanocrystals whose emission wavelength is set by their physical size — a quantum-confinement effect, where the bandgap depends on how tightly the electron is boxed in. Tune the diameter and you get a very narrow band of green; enlarge it slightly and you get narrow red. Replacing the broad phosphor with tuned quantum dots produces three clean spectral peaks instead of a spike and a hump, and gamut coverage jumps accordingly. But the architecture is still subtractive: generate light, then filter most of it away.

Emitting the colour instead of filtering for it

Micro RGB removes the intermediate step. Rather than a white backlight filtered into colour, the backlight itself is composed of discrete red, green and blue LEDs, each below 100 micrometres — smaller than the width of a human hair — and each independently driven.

The consequences follow directly from the physics. A red LED emits red because of the bandgap of its semiconductor material; the emission is inherently narrow-band. There is no phosphor smearing the spectrum and no filter discarding photons. When the display needs a saturated red, it drives the red emitters in that zone and leaves green and blue dark. The light arriving at the colour filter is already close to the colour the filter wants to pass, so far less energy is thrown away and the resulting primary is far purer.

Samsung's claim for the 2026 lineup is that Micro RGB Precision Color 100, verified by the German testing body VDE, achieves 100% of the BT.2020 colour gamut. That number deserves unpacking, because it is the most technically significant figure in this week's display news. BT.2020 is the ITU recommendation that defines the colour space for ultra-high-definition television. Its primaries are monochromatic — single wavelengths — which means BT.2020 is, by design, not fully reachable by any display using broadband emitters and filters. It was written as a target to grow into. Premium televisions have historically covered somewhere in the region of 70–80% of it. Reaching full coverage requires narrow-band primaries, which is exactly what discrete RGB emitters provide.

The practical payoff is not a more garish picture. It is accuracy in the regions of colour space where conventional panels quietly fail: deep saturated reds in fabric and skin, the specific greens of foliage and sports pitches, the cyan-teal range in underwater and aerial photography. Content mastered in wide gamut has always contained that information; most displays simply could not show it and clipped it to the nearest reachable colour.

Local dimming, halo, and why zone count is the number to ask about

The second thing a Micro RGB backlight buys you is dimming control — and this is where the engineering gets subtle.

LCD contrast is limited by light leakage. Liquid crystal shutters do not close perfectly; a small fraction of backlight escapes even in the "black" state, which is why an LCD showing a night scene looks dark grey rather than black. Local dimming addresses this by dividing the backlight into independently controlled zones and dimming the zones behind dark regions of the image. Mini-LED sets do this with hundreds or thousands of small white emitters.

The characteristic artefact is blooming, or halo: a bright object on a dark field — white credits on black, a streetlight at night — sits inside a zone that must be lit, so a faint glow surrounds it. The severity depends on zone count relative to screen area. Fewer, larger zones mean more visible haloing.

Micro RGB adds a dimension that white-LED mini-LED cannot offer: because each zone contains separately controllable red, green and blue emitters, the backlight can be modulated in colour as well as in brightness. Samsung markets this as Micro RGB Color Booster Pro and Micro RGB HDR Pro. Physically, the backlight for a given region can be biased toward the colour that region actually needs, which improves both efficiency and the precision of highlight rendering in high-dynamic-range content.

Two further features in the 2026 lineup deserve a mention because they address real-world viewing rather than showroom demonstrations. Samsung's Glare Free treatment is an anti-reflection layer that scatters incident ambient light rather than mirroring it — which matters enormously, because in a bright room reflected light raises the black floor of the panel and destroys measured contrast far more effectively than any backlight deficiency. And all 2026 Samsung sets carry Eclipsa Audio, a spatial sound system, alongside Dolby Atmos and Q-Symphony.

Practical advice: what to actually buy

Micro RGB is a premium halo category, and honest advice about a premium category has to start with who does not need it. If your display will show presentations, spreadsheets, dashboards, video calls or digital signage, colour gamut coverage beyond BT.709 is close to irrelevant, and you should spend your budget on size, brightness, uniformity and reliability instead.

For most rooms, the decision that improves the experience the most is still screen size — the single variable with the largest effect on perceived immersion, and the one most people under-buy. At a typical seating distance of three metres, a 55-inch panel subtends a visual angle well below what cinema standards recommend. For meeting rooms and larger living spaces, the LG 86PK640S0UA 86" Smart LED-LCD 4K is in stock and is the size class where 4K resolution genuinely earns its pixel count at normal viewing distances. The LG 75PK340S0UA 75" 4K is our deepest-stocked large panel and a strong value in the 75-inch class. For smaller rooms, huddle spaces and reception areas, the LG 50PK640S0UB 50" Smart LED-LCD 4K and the LG 55PK340S0UB 55" 4K cover the range, and both are in stock.

Three technical notes worth carrying into any display purchase. Check the peak brightness in nits and, more importantly, whether that figure is sustained or a brief window measurement — HDR content in a bright room needs sustained output. Check the anti-glare treatment against your actual room, because a matte panel in a window-lit space beats a higher-contrast glossy one every time. And confirm the panel supports the refresh rate and variable-refresh standards your sources need before you buy, not after.

For desk work, the same reasoning scales down. The Samsung Essential S32B304NWN 32" Full HD monitor is in deep stock and is an economical way to give a workstation genuine screen real estate; if you need pixel density for text or design work, tell us and we will spec a higher-resolution panel instead. If you are not sure which class of display fits your room, sightlines and content, request a free quote from our team and we will work through it with you.

Deep Dive 3 — Self-replicating malware in the software supply chain, and why it reaches your business

Supply-chain compromise attacks the trust between components rather than the perimeter around them. Photo: Sasun Bughdaryan / Unsplash.

The trust graph underneath modern software

Nearly every piece of software you use — your accounting web app, your online store, the dashboard your point-of-sale system exposes — is assembled rather than written. A developer building a checkout page does not implement HTTP requests, date parsing or colour conversion from scratch. They declare dependencies, and a package manager fetches them from a public registry.

The scale of this is easy to underestimate. A single modern JavaScript application typically pulls in several hundred to well over a thousand packages once transitive dependencies are resolved — the dependencies of your dependencies of your dependencies. Each of those packages is maintained by someone, often a single volunteer, and each is installed with the implicit authority to run code on the machine that installs it.

That last point is the crux. The npm package manager supports lifecycle scripts, including postinstall, which executes automatically when a package is installed. It exists for legitimate reasons — compiling native extensions, generating configuration. It also means that adding a dependency is functionally equivalent to running a stranger's program on your build machine with your user's privileges.

How a self-replicating package worm works

The Shai-Hulud campaign — named for the sandworms in Dune, after the shai-hulud-workflow.yml file the malware drops — is the clearest demonstration of what happens when that authority is abused systematically. It was documented by Unit 42 at Palo Alto Networks and by CERT/CC as self-propagating malware, and Singapore's Cyber Security Agency issued an advisory on the ongoing Keyv-related wave in August 2026.

The propagation logic is a textbook worm adapted to a package registry. When a compromised package is installed, its post-install script executes and searches the machine for npm authentication tokens — the credentials a developer uses to publish packages. If it finds one, it enumerates every package that account is authorised to publish. For each of those, it downloads the package, injects its own post-install script, repackages it, and publishes a new version to the registry under the legitimate maintainer's name.

The result is exponential. Every developer who installs an infected package and holds publishing rights becomes a new vector, and each new infected package reaches that maintainer's entire downstream user base. Roughly 180 packages were affected in the first documented wave; a later variant reached approximately 640. Along the way the malware harvests whatever else it finds: GitHub tokens, AWS and Google Cloud credentials, Atlassian keys, Datadog API keys.

The broader pattern is well documented. One 2026 analysis counted 59 supply-chain campaigns and 657 malicious packages across npm and PyPI. The axios compromise in March 2026 is instructive about the speed involved: an attacker hijacked the lead maintainer's npm account and published two poisoned versions of a package with over 100 million weekly downloads within 39 minutes, injecting a phantom dependency that deployed a cross-platform remote access trojan.

Why this is not only a developer problem

It is tempting to file this under "things that happen to software companies". That is a mistake, for three reasons.

First, if you run an e-commerce store, a booking system or a customer portal, that software is built from the same registries. A compromise upstream of your platform vendor or your web agency is a compromise of your customer data, and you will learn about it after the fact.

Second, the credentials these campaigns harvest are cloud credentials. An AWS or Google Cloud key exfiltrated from a contractor's laptop can provide access to infrastructure that has nothing to do with the package that stole it. The blast radius of a stolen token is defined by the token's permissions, not by the context in which it was compromised.

Third, the initial compromise vector in several of these campaigns was phishing aimed at maintainers — the same class of attack that targets your staff. A well-crafted email asking a maintainer to re-authenticate on a lookalike registry domain is not technically sophisticated. It works because it is plausible.

What defence actually looks like

The mitigations are unglamorous and effective.

Pin your dependencies and commit the lockfile. A lockfile records the exact resolved version of every package. Installing from a lockfile means a malicious version published upstream this morning does not silently enter your build this afternoon. Combine this with a deliberate, reviewed upgrade cadence rather than automatic updates.

Disable install scripts in continuous integration. Most builds do not need postinstall to run. Turning it off by default and allowlisting the handful of packages that genuinely require it removes the primary execution path these worms depend on.

Use scoped, short-lived credentials. A publishing token that works forever, from anywhere, for every package an account owns is the ideal target. Tokens scoped to a single package, expiring quickly, and restricted to CI infrastructure are dramatically less valuable when stolen.

Enforce phishing-resistant multi-factor authentication. Hardware security keys using WebAuthn are cryptographically bound to the legitimate domain, so a lookalike site cannot relay the authentication. This is the single highest-leverage control against maintainer account takeover, and the same logic applies to your own staff accounts.

Maintain a software bill of materials. An SBOM is an inventory of every component in a deployed application. When an advisory names a compromised package, the difference between an organisation that can answer "are we affected?" in ten minutes and one that takes three weeks is whether that inventory exists.

Keep endpoints patched and managed. The credentials these campaigns steal live on laptops. A managed fleet with full-disk encryption, current patches, enforced screen locks and a credential store that is not a text file on the desktop is the foundation everything else rests on. This is also where hardware choice matters: business-class machines such as the ThinkPad and Surface models above ship with firmware-level protections — TPM 2.0, secure boot, firmware attestation and manageability tooling — that consumer hardware frequently omits.

If you are responsible for a small or mid-sized organisation and you are not certain where your dependencies come from, who holds publishing rights, or whether your endpoints are consistently managed, that uncertainty is itself the finding. Our team works through exactly this kind of assessment with Montreal-area businesses, and you can request a free quote from our team to start the conversation. We would rather help you build the inventory now than help you reconstruct it during an incident.

Glossary of the Week

Setup at a Glance

Sources & Further Reading

Reporting and primary sources consulted for this article: DIGITIMES, "Weekly news roundup: HBM4 strain, Intel price hikes and the next AI infrastructure buildout" (September 14, 2026), covering the sub-10-day DRAM inventory figures attributed to KB Securities, the expected Intel CPU price increase, the Micron compensation package, the Synopsys NPU die-area result on Samsung SF2P, and the ASML 12-inch photomask roadmap; Tom's Hardware, "Memory price surge begins to cool as consumers hit affordability limit", reporting TrendForce's Q3 2026 DRAM and NAND contract price projections; Tom's Hardware, "Hot Chips 2026: SK hynix pushes hybrid bonding to HBM5 as AI memory hits 775-micron ceiling"; EE Times, "The State of HBM4 Chronicled at CES 2026", on SK hynix's 16-layer 48 GB HBM4 device; Samsung Global Newsroom, "Samsung Unveils Next-Gen 3D-Memory Vision at FMS 2026", on zHBM, HBM4E samples and the HBM5 preview; Wccftech, "Memory Shortages Have Destroyed The Consumer Segment As DRAM Prices Surge By Up To 89% In Q2 2026"; IDC, "Global Memory Shortage Crisis: Market Analysis and the Potential Impact on the Smartphone and PC Markets in 2026"; Samsung Newsroom U.S., "Samsung Expands Premium Micro RGB TV Lineup for 2026 with New Sizes and Advanced Features", the source for the sub-100 µm RGB LED architecture, the VDE-verified 100% BT.2020 claim, the 55-to-115-inch size range, Glare Free and Eclipsa Audio; Samsung U.S., Micro RGB TV product highlights; Unit 42 (Palo Alto Networks), "Shai-Hulud Worm Compromises npm Ecosystem in Supply Chain Attack"; Cyber Security Agency of Singapore, advisory AD-2026-009 on the ongoing Keyv-related npm campaign; SecurityWeek, "640 NPM Packages Infected in New 'Shai-Hulud' Supply Chain Attack"; Trend Micro, "Axios NPM Package Compromised"; Phoenix Security, "Supply Chain Attacks 2026: npm, PyPI, VS Code, AI Agents"; NVIDIA Newsroom, "NVIDIA and TSMC Bring AI Into Fabs to Advance Semiconductor Design and Manufacturing". Photos: Unsplash (free commercial license).

Closing

The connecting thread across all three of this week's deep dives is that the interesting engineering is happening several layers below the spec sheet — in the geometry of a stacked memory die, in the emission spectrum of a hundred-micrometre LED, in the execution semantics of a package installer. None of it appears on the box. All of it determines whether the thing you buy is still the right thing in four years.

Our advice for autumn 2026 is narrower than usual, because the market conditions are unusually clear: specify memory and storage generously at purchase because you cannot add them later and they are not getting cheaper; buy display size rather than display buzzwords unless colour accuracy is genuinely part of your work; and treat your software supply chain and endpoint management as one problem rather than two. If you would like help translating any of that into a specific configuration, a fleet rollout or a room build, request a free quote from our team — we will give you a straight answer about what you need and, just as importantly, what you do not.