Keyboard shortcuts
New here? A new edition every day at 10:00 UTC, from primary sources only — no feed, no ranking by clicks, no account. What it is · How it works →
Get the paper when it's out — each morning, and when something breaks.
Put the paper on your home screen
Like the pieces you said were worth your time. Worked out in this browser only.
Announcements from the labs, companies and platforms themselves.
The few things to know today, in two minutes →

For most teams, Apache Spark™ is the better choice. Spark runs batch ETL, SQL analytics,...

Accelerate cluster access with AUP and SUP. Automated, secure user provisioning for SUNK (Slurm on Kubernetes) that syncs identities from your IdP or CW IAM in minutes.

From major launches to real-world demos, CoreWeave’s GTC 2026 recap explores the industry shifts shaping how AI is built, run, and improved in production.

Unlock the performance of NVIDIA HGX B300 at scale on CoreWeave.

Vercel Daemons can now send OpenTelemetry traces to Vercel Tracing, allowing you and your agents to inspect background worker operations alongside the rest of your project's traces. Vercel provides each daemon with a Unix socket for receiving OTLP/HTTP traces and sets the socket'…

In June, we announced the general availability of Amazon WorkSpaces for AI agents. That launch gave your agents a managed way to operate the desktop applications your business runs on, including ERP clients, claims systems, engineering tools, and internal apps that were never bui…
More on Windows 11 · Windows

Among OpenSearch query types, span queries give you precise control over where terms appear in a document and how they relate to one another. Learn how span queries work, when to use them instead of phrase queries, and how to compose them to enforce exact term order, position, an…

An Amazon Aurora MySQL cluster can exhaust its virtual index ID limit, after which any CREATE INDEX that includes a virtual column fails with error 63955 until you rebuild the databases. This post shows how to recognize the error, why backups cannot clear it, and how to run a log…

RDS Proxy multiplexes many client connections across a small pool of database connections, but connection pinning, pool fragmentation, and uncommitted transactions can silently disable that benefit for PostgreSQL workloads. Part 1 shows how to recognize each condition with Amazon…

Metrics alone can't always pinpoint what is reducing RDS Proxy multiplexing for PostgreSQL. Part 2 shows how to use Amazon CloudWatch Logs Insights with enhanced proxy logs to find the root cause, what healthy multiplexing looks like in metrics and logs, and how to set up CloudWa…

AWS Cloud WAN Flow Logs capture flow-level traffic across your global network. Learn how to create flow logs at the core network, edge, and attachment scopes, publish them to Amazon CloudWatch Logs, Amazon S3, or Amazon Data Firehose, and query them with Amazon Athena and CloudWa…

It’s not every day our browser begins a life on a whole new platform.
Python UDFs in PySpark can be slow because data is serialized between the JVM and the Python runtime. We benchmark five approaches on AWS Glue 6.0 (standard Python, Arrow-optimized Python, vectorized pandas, native Arrow UDFs, and Spark SQL) across 10M to 100M rows, and separate…
Snowflake is named a Leader in the inaugural Magic Quadrant for Data Lakehouse Platforms report by Gartner. Explore its approach to modernization, governance and AI.

Education Innovation
The people building AI, writing on their own blogs. Last 30 days.

November 13, 2026 — AIE speakers unite to lay out how to fight slop.
Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Why I now expect superintelligence by 2030

The best Stratechery content from the week of November 9, 2026, including the shocking demise of Jensen Huang; enterprise, consumer and Intel; and professional basketbal.
Remove the need to have to type out the name of the helper. The post How can I make it easier to use the helper class that lets me pass more than one parameter to <CODE>co_await</CODE>? appeared first on The Old New Thing.

Jensen Huang has resigned as CEO of Nvidia and left its board. CFO Colette Kress will be interim CEO. Here is a quick profile of Kress. Here is a look at some of the potential long term successors. There were … Continue reading →
This essay is adapted from a keynote speech delivered at the DEF CON 34 conference in Las Vegas on August 7, 2026. The essay originally appeared in CyberScoop. I want to talk about AI hacking. There are three aspects: people hacking AI systems, people using AI to hack other syste…

November 12, 2026 — Colette Kress takes over as interim CEO. What happens to open source/American AI leadership?
Tutorials, case studies and technical deep dives.







New models, as they become available.








Vulnerabilities exploited in the wild (CISA), critical advisories in the ecosystems devs build on (GitHub), and the security teams' own reports.
Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 9.1 (critical) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:L/U:Red Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.1 Description: When authentication caching is…
Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 2.3 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Green Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.2 Description: When PropertiesRealm reloads its prop…
Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 2.3 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Green Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.2 Description: `DefaultPasswordService` and `SimpleC…
Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 5.9 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:L/U:Amber Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.1 - Apache Shiro (org.apache.shiro:shiro-web)…
M-156, ChromeOS version 16836.33.0 (Browser version 156.0.8078.102)has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community Be…
Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 6.3 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Amber Affected versions: - Apache Shiro (org.apache.shiro:shiro-guice) before 3.0.2 - Apache Shiro (org.apache.shiro:shiro-aspectj…
Fake crypto exchange sessions are showing up on ScreenConnect servers and could be bait for technicians. See what Huntress found and what to do.
We have published Qubes Security Bulletin (QSB) 124: Partial filtering bypass in split-gpg2. The text of this QSB and its accompanying cryptographic signatures are reproduced below, followed by a general explanation of this announcement and authentication instructions. Qubes Secu…
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting. The post SCKit abuses ScreenConnect to deploy remote access and target technician sessions appeared first on Microsof…
Bulletin ID: HCSEC-2026-60 Affected Products / Versions: cap/jwt up to 0.13.0; fixed in 0.14.0. Publication Date: November 13, 2026 Summary The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may cause downstream applica…
Incidents from the status pages of the services developers build on, as each provider reports them.
| Service | Incident | Status | Reported |
|---|---|---|---|
| Quay.io | Red Hat updating our system certificates and keys | Ongoing · Major | Nov 14, 7:16 AM UTC |
| Claude | Some users unable to sign up with Apple on the Claude iOS app | Ongoing · Major | Nov 14, 7:11 AM UTC |
| Twilio | SMS Delivery Delays from a Subset of Twilio Phone Numbers to Telenor Pakistan | Ongoing · Minor | Nov 14, 3:52 AM UTC |
| SendGrid | SMS Delivery Delays from a Subset of Twilio Phone Numbers to Telenor Pakistan | Ongoing · Minor | Nov 14, 3:52 AM UTC |
| Bandwidth | Bandwidth Local Market Impairment - 538 Tulsa, OK | Ongoing · Critical | Nov 13, 10:53 PM UTC |
| Twilio | SMS Delivery Delays from Twilio to Brisanet Servicos De Telecomunicacoes SA Brazil | Ongoing · Minor | Nov 13, 10:36 PM UTC |
| SendGrid | SMS Delivery Delays from Twilio to Brisanet Servicos De Telecomunicacoes SA Brazil | Ongoing · Minor | Nov 13, 10:36 PM UTC |
| Twilio | Voice Call Failures from Twilio Phone Numbers to Multiple Networks in Colombia, Mexico, Chile, and Costa Rica | Ongoing · Minor | Nov 13, 9:56 PM UTC |
New arXiv papers in AI, language, machine learning and software engineering.
The rapid growth of long-form documents presents a fundamental challenge to information retrieval (IR). Their length, dispersed evidence, and complex structures demand approaches that go beyond standard passage-level techniques. This survey provides a comprehensive review of long…
Retrieval-augmented generation (RAG) has attracted significant attention for enhancing large language models (LLMs) in domain-specific and knowledge-intensive tasks by utilizing external documents retrieved by retrievers. However, LLMs often struggle to determine which retrieved…
Multi-modal Recommender System (MRS) has emerged as a key information retrieval technology, widely adopted to enhance various web platforms. However, three interrelated challenges remain insufficiently explored: (1) noisy multi-modal content, (2) noisy user feedback, and (3) misa…
Recommendation throughout the cold-start period remains a challenge in recommender systems. Strictly cold entities (users/items) have no interactions, while warm-up entities only have a few unreliable interactions. Strict cold-start methods typically overlook warm-up entities, wh…
In recommender systems, user feedback typically follows a long-tail distribution, which leads many recommendation algorithms to exacerbate popularity bias by disproportionately favoring popular items. To mitigate this issue, recent studies have employed Inverse Propensity Scoring…
The conversational recommendation system (CRS) breaks the limitations of traditional static methods, presenting a novel framework for personalized recommendations with real-time adaptability and dynamic interactions. Existing methods predominantly focus on the balance between “ex…
Clusterwise Linear Regression (CLR) integrates clustering and regression to uncover complex relationships within heterogeneous datasets by simultaneously partitioning data and fitting cluster-specific models. This dual capability offers a significant advantage over traditional re…
A novel, thorough manual survey is presented, focusing on the trustworthy extraction and application of temporal features in drone video feeds for object detection and tracking. Trust stems from reducing the necessary scope of opaque, deep components, and externally accounting fo…
Stable versions of the tools and libraries we track. Prereleases are left out.
| Project | Version | Date |
|---|---|---|
| llama.cpp | b12376 | Nov 14 |
| ClickHouse | Release v26.3.63.123-lts | Nov 14 |
| Goose | v1.59.1 | Nov 14 |
| ONNX Runtime | ONNX Runtime CUDA Plugin EP 0.4.0 | Nov 14 |
| llama.cpp | b12375 | Nov 14 |
| LangGraph | langgraph==1.2.22 | Nov 13 |
| LangGraph | langgraph-checkpoint-postgres==3.2.1 | Nov 13 |
| LiteLLM | v1.106.10 | Nov 13 |
| Cypress | chore: release @cypress/webpack-dev-server-v6.2.0 | Nov 13 |
| llama.cpp | b12374 | Nov 13 |
New repositories under the GitHub topics we track, and packages published to npm.
Rising on GitHub this weekSuperfast runtime validators with only one line
Superfast runtime validators with only one line
Fast token estimation with 95%+ average accuracy, 2kB minified and gzipped
Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.
DSH Skills Manager — 在 DeepSeek Harness 中统一加载并安全管理本机 Agent Skills · Load and safely manage local Agent Skills in DSH
Adobe Acrobat PDF 2026 desktop setup with text and image editing directly inside any PDF, conversion to and from Word, Excel and images, plus fill, sign and merge documents with an AI assistant for Windows 11
DxO PhotoLab 10 2026 desktop setup with DeepPRIME XD denoising for clean high-ISO shots, optical corrections from measured lens profiles, and non-destructive RAW workflow with local adjustments on Windows 11
Kontakt 8 2026 desktop setup with industry-standard sampler for virtual instruments, thousands of libraries and the Kontakt Factory, plus a scripting engine to build your own instruments on Windows 11
AI at work outside tech — in health, science, finance, government and more — from the users, regulators and journals themselves. Only real use: deployments, approvals, trials, results.
Nothing in this section in the last 7 days.
Launches, keynotes, demos and talks from the makers' own channels, and interviews with the people who build it. A video loads from YouTube only when you press play.
That's the paper. The next one closes tomorrow morning.