The paper in your inbox every morning
Straight from the source · No aggregators, no reposts, no social feeds

The Tech Gazette

Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

News

Announcements from the labs, companies and platforms themselves.

Today

  1. Databricks7:02 AM UTCdatabricks.com
    Apache Spark vs Apache Flink: which should you use?

    For most teams, Apache Spark™ is the better choice. Spark runs batch ETL, SQL analytics,...

Yesterday

  1. CoreWeave12:37 AM UTCwf.coreweave.com
    CoreWeave delivers another industry first: End-to-end automated user provisioning for Slurm clusters

    Accelerate cluster access with AUP and SUP. Automated, secure user provisioning for SUNK (Slurm on Kubernetes) that syncs identities from your IdP or CW IAM in minutes.

  2. CoreWeave11:55 PM UTCwf.coreweave.com
    From NVIDIA GTC 2026 to Production: What CoreWeave Showed and Why It Matters

    From major launches to real-world demos, CoreWeave’s GTC 2026 recap explores the industry shifts shaping how AI is built, run, and improved in production.

  3. CoreWeave11:50 PM UTCwf.coreweave.com
    Engineered for Agentic AI: NVIDIA HGX B300 on CoreWeave Cloud

    Unlock the performance of NVIDIA HGX B300 at scale on CoreWeave.

  4. Vercel10:24 PM UTCvercel.com
    Daemons can now send traces to Vercel Tracing

    Vercel Daemons can now send OpenTelemetry traces to Vercel Tracing, allowing you and your agents to inspect background worker operations alongside the rest of your project's traces. Vercel provides each daemon with a Unix socket for receiving OTLP/HTTP traces and sets the socket'…

  5. AWS End User Computing10:06 PM UTCaws.amazon.com
    Amazon WorkSpaces for AI Agents Adds Linux, Windows 11, and OAuth Support

    In June, we announced the general availability of Amazon WorkSpaces for AI agents. That launch gave your agents a managed way to operate the desktop applications your business runs on, including ERP clients, claims systems, engineering tools, and internal apps that were never bui…

    More on Windows 11 · Windows

  6. AWS Big Data10:00 PM UTCaws.amazon.com
    Understanding span queries in Amazon OpenSearch Service

    Among OpenSearch query types, span queries give you precise control over where terms appear in a document and how they relate to one another. Learn how span queries work, when to use them instead of phrase queries, and how to compose them to enforce exact term order, position, an…

  7. AWS Databases9:10 PM UTCaws.amazon.com
    Fix Amazon Aurora MySQL error 63955: Virtual index ID overflow

    An Amazon Aurora MySQL cluster can exhaust its virtual index ID limit, after which any CREATE INDEX that includes a virtual column fails with error 63955 until you rebuild the databases. This post shows how to recognize the error, why backups cannot clear it, and how to run a log…

  8. AWS Databases9:08 PM UTCaws.amazon.com
    Improve RDS Proxy multiplexing for PostgreSQL, Part 1: Common causes

    RDS Proxy multiplexes many client connections across a small pool of database connections, but connection pinning, pool fragmentation, and uncommitted transactions can silently disable that benefit for PostgreSQL workloads. Part 1 shows how to recognize each condition with Amazon…

  9. AWS Databases9:08 PM UTCaws.amazon.com
    Improve RDS Proxy multiplexing for PostgreSQL, Part 2: Diagnose and monitor

    Metrics alone can't always pinpoint what is reducing RDS Proxy multiplexing for PostgreSQL. Part 2 shows how to use Amazon CloudWatch Logs Insights with enhanced proxy logs to find the root cause, what healthy multiplexing looks like in metrics and logs, and how to set up CloudWa…

  10. AWS Networking & Content Delivery9:02 PM UTCaws.amazon.com
    Monitoring global traffic with AWS Cloud WAN Flow Logs

    AWS Cloud WAN Flow Logs capture flow-level traffic across your global network. Learn how to create flow logs at the core network, edge, and attachment scopes, publish them to Amazon CloudWatch Logs, Amazon S3, or Amazon Data Firehose, and query them with Amazon Athena and CloudWa…

  11. WebKit9:00 PM UTCwebkit.org
    Safari on Apple HomeView

    It’s not every day our browser begins a life on a whole new platform.

  12. AWS Big Data8:58 PM UTCaws.amazon.com
    Optimizing PySpark UDFs on AWS Glue 6.0 with native Arrow UDFs

    Python UDFs in PySpark can be slow because data is serialized between the JVM and the Python runtime. We benchmark five approaches on AWS Glue 6.0 (standard Python, Arrow-optimized Python, vectorized pandas, native Arrow UDFs, and Spark SQL) across 10M to 100M rows, and separate…

    More on Glue 6.0 · Glue

  13. Snowflake8:58 PM UTCsnowflake.com
    Snowflake a Leader in Gartner® Data Lakehouse Magic Quadrant™

    Snowflake is named a Leader in the inaugural Magic Quadrant for Data Lakehouse Platforms report by Gartner. Explore its approach to modernization, governance and AI.

  14. Google Research8:47 PM UTCresearch.google
    Advancing science & engineering with Antigravity’s /teamwork

    Education Innovation

All 875 in News →

Columns

The people building AI, writing on their own blogs. Last 30 days.

  1. swyx (Latent Space)Nov 14
    [AINews] The No AI Slop Manifesto

    November 13, 2026 — AIE speakers unite to lay out how to fight slop.

  2. Bruce SchneierNov 13
    Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters

    Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

  3. Dwarkesh PatelNov 13
    The avalanche that hit math is coming for AI development

    Why I now expect superintelligence by 2030

  4. Ben Thompson (Stratechery)Nov 13
    2026.46: The End of Jensen

    The best Stratechery content from the week of November 9, 2026, including the shocking demise of Jensen Huang; enterprise, consumer and Intel; and professional basketbal.

  5. Raymond ChenNov 13
    How can I make it easier to use the helper class that lets me pass more than one parameter to co_await?

    Remove the need to have to type out the name of the helper. The post How can I make it easier to use the helper class that lets me pass more than one parameter to <CODE>co_await</CODE>? appeared first on The Old New Thing.

  6. Zvi MowshowitzNov 13
    Jensen Huang Resigns After Having Another Affair In Addition to the Chinese Spy

    Jensen Huang has resigned as CEO of Nvidia and left its board. CFO Colette Kress will be interim CEO. Here is a quick profile of Kress. Here is a look at some of the potential long term successors. There were … Continue reading →

  7. Bruce SchneierNov 13
    AI Doesn’t Have to Go Rogue to Break the World

    This essay is adapted from a keynote speech delivered at the DEF CON 34 conference in Las Vegas on August 7, 2026. The essay originally appeared in CyberScoop. I want to talk about AI hacking. There are three aspects: people hacking AI systems, people using AI to hack other syste…

  8. swyx (Latent Space)Nov 13
    [AINews] Jensen Huang resigns after 33 years leading NVIDIA

    November 12, 2026 — Colette Kress takes over as interim CEO. What happens to open source/American AI leadership?

All 92 in Columns →

Technical Guides

Tutorials, case studies and technical deep dives.

  1. AWS Machine LearningNov 13
    Production MLOps at GS Caltex with Amazon SageMaker Canvas, part 1
  2. AWS Machine LearningNov 13
    Route coding agent requests to the right model on Amazon Bedrock with NVIDIA NeMo Switchyard
  3. NVIDIA DeveloperNov 13
    Faster Scientific Simulations with New FP64 Algorithms in NVIDIA cuBLAS
  4. AWS Machine LearningNov 13
    Architecture patterns for fast session startup on Amazon Bedrock AgentCore runtime
  5. AWS Machine LearningNov 13
    OpenFold3 on Amazon SageMaker JumpStart: Predict biomolecular structures
  6. AWS Cloud OperationsNov 13
    Your Guide to AWS Cloud Resilience Sessions at re:Invent 2026
  7. NVIDIA DeveloperNov 13
    Run GPU-Powered Black Hole Interferometry with NVIDIA cuPhoton
  8. AWS Machine LearningNov 13
    Cost-optimizing AssemblyAI speech-to-text inference on AWS with Amazon EC2 Spot

All 63 in Guides →

New Models

New models, as they become available.

  1. OpenRouterNov 13
    New model: Recraft: Recraft V4.1 Flash V2
  2. OpenRouterNov 13
    New model: Tencent: HY-World 2.1 Panorama
  3. inclusionAI (Ant Group)Nov 13
    Open model: inclusionAI/Duo-1.0-distill-quant
  4. OpenRouterNov 12
    New model: HeyGen: HeyGen Decision Turbo
  5. OpenRouterNov 12
    New model: HeyGen: HeyGen Decision
  6. OpenRouterNov 12
    New model: ByteDance Seed: Seedream 5.5
  7. OpenRouterNov 12
    New model: Google: Gemini 4 Hydrogen
  8. Hugging Face HubNov 12
    Open model: higurashi-ai/Haru-4B

All 32 in New Models →

Security Desk

Vulnerabilities exploited in the wild (CISA), critical advisories in the ecosystems devs build on (GitHub), and the security teams' own reports.

Reports

  1. oss-security (Openwall)Nov 14
    CVE-2026-129349: Apache Shiro: DefaultLdapRealm accepts any password when authentication caching is enabled

    Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 9.1 (critical) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:L/U:Red Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.1 Description: When authentication caching is…

  2. oss-security (Openwall)Nov 14
    CVE-2026-129348: Apache Shiro: PropertiesRealm reload does not remove deleted users or narrowed permissions

    Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 2.3 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Green Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.2 Description: When PropertiesRealm reloads its prop…

  3. oss-security (Openwall)Nov 14
    CVE-2026-129347: Apache Shiro: Empty stored credential matches an empty submitted password

    Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 2.3 (low) CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Green Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.2 Description: `DefaultPasswordService` and `SimpleC…

  4. oss-security (Openwall)Nov 14
    CVE-2026-74762: Apache Shiro: Possible session fixation with RememberMe

    Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 5.9 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:L/U:Amber Affected versions: - Apache Shiro (org.apache.shiro:shiro-core) before 3.0.1 - Apache Shiro (org.apache.shiro:shiro-web)…

  5. Chrome ReleasesNov 14
    Stable Channel Update for ChromeOS / ChromeOS Flex

    M-156, ChromeOS version 16836.33.0 (Browser version 156.0.8078.102)has rolled out to ChromeOS devices on the Stable channel.&nbsp; If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community Be…

  6. oss-security (Openwall)Nov 14
    CVE-2026-74763: Apache Shiro: Authorization annotations not always enforced, depending on where they are placed

    Posted by Lenny Primak on Nov 13 Severity: CVSS 4.0: 6.3 (medium) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Amber Affected versions: - Apache Shiro (org.apache.shiro:shiro-guice) before 3.0.2 - Apache Shiro (org.apache.shiro:shiro-aspectj…

  7. HuntressNov 13
    Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers

    Fake crypto exchange sessions are showing up on ScreenConnect servers and could be bait for technicians. See what Huntress found and what to do.

  8. Qubes OSNov 13
    QSB-124: Partial filtering bypass in split-gpg2

    We have published Qubes Security Bulletin (QSB) 124: Partial filtering bypass in split-gpg2. The text of this QSB and its accompanying cryptographic signatures are reproduced below, followed by a general explanation of this announcement and authentication instructions. Qubes Secu…

  9. Microsoft SecurityNov 13
    SCKit abuses ScreenConnect to deploy remote access and target technician sessions

    SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting. The post SCKit abuses ScreenConnect to deploy remote access and target technician sessions appeared first on Microsof…

  10. HashiCorp security bulletinsNov 13
    HCSEC-2026-60 - CAP JWT claims validation bypass using non-canonical claim names

    Bulletin ID: HCSEC-2026-60 Affected Products / Versions: cap/jwt up to 0.13.0; fixed in 0.14.0. Publication Date: November 13, 2026 Summary The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may cause downstream applica…

All 320 in Security →

Outages

Incidents from the status pages of the services developers build on, as each provider reports them.

All 160 in Outages →

Research

New arXiv papers in AI, language, machine learning and software engineering.

  1. ACM TOIS (Information Systems)Nov 13
    A Survey of Long-Document Retrieval in the PLM and LLM Era

    The rapid growth of long-form documents presents a fundamental challenge to information retrieval (IR). Their length, dispersed evidence, and complex structures demand approaches that go beyond standard passage-level techniques. This survey provides a comprehensive review of long…

  2. ACM TKDD (Knowledge Discovery from Data)Nov 5Open code
    Enabling Retriever-LLM Connection across the Semantic Gap in Retrieval-Augmented Generation

    Retrieval-augmented generation (RAG) has attracted significant attention for enhancing large language models (LLMs) in domain-specific and knowledge-intensive tasks by utilizing external documents retrieved by retrievers. However, LLMs often struggle to determine which retrieved…

  3. ACM TOIS (Information Systems)Nov 13
    Lightweight Denoising and Aligning for Multi-modal Recommender System

    Multi-modal Recommender System (MRS) has emerged as a key information retrieval technology, widely adopted to enhance various web platforms. However, three interrelated challenges remain insufficiently explored: (1) noisy multi-modal content, (2) noisy user feedback, and (3) misa…

  4. ACM TOIS (Information Systems)Nov 13
    Turning Cold Entities Warm: LLM-Based User and Item Interaction Simulation for Recommendations

    Recommendation throughout the cold-start period remains a challenge in recommender systems. Strictly cold entities (users/items) have no interactions, while warm-up entities only have a few unreliable interactions. Strict cold-start methods typically overlook warm-up entities, wh…

  5. ACM TOIS (Information Systems)Nov 13
    Mitigating Popularity Bias in Recommendation with Global Listwise Learning and Progressive Bi-Weighting

    In recommender systems, user feedback typically follows a long-tail distribution, which leads many recommendation algorithms to exacerbate popularity bias by disproportionately favoring popular items. To mitigate this issue, recent studies have employed Inverse Propensity Scoring…

  6. ACM TOIS (Information Systems)Nov 13
    MDCD: Meta-Learning Driven Conditional Diffusion for User Cold-Start in Conversational Recommendation

    The conversational recommendation system (CRS) breaks the limitations of traditional static methods, presenting a novel framework for personalized recommendations with real-time adaptability and dynamic interactions. Existing methods predominantly focus on the balance between “ex…

  7. ACM TKDD (Knowledge Discovery from Data)Nov 5
    Optimization-Driven Cluster-Weighted Clusterwise Linear Regression

    Clusterwise Linear Regression (CLR) integrates clustering and regression to uncover complex relationships within heterogeneous datasets by simultaneously partitioning data and fitting cluster-specific models. This dual capability offers a significant advantage over traditional re…

  8. ACM Computing SurveysOct 31
    Critiquing AI Surveys with a Case Study on Temporal Features for Trustworthy Computer Vision

    A novel, thorough manual survey is presented, focusing on the trustworthy extraction and application of temporal features in drone video feeds for object detection and tracking. Trust stems from reducing the necessary scope of opaque, deep components, and externally accounting fo…

Releases

Stable versions of the tools and libraries we track. Prereleases are left out.

ProjectVersionDate
llama.cpp b12376 Nov 14
ClickHouse Release v26.3.63.123-lts Nov 14
Goose v1.59.1 Nov 14
ONNX Runtime ONNX Runtime CUDA Plugin EP 0.4.0 Nov 14
llama.cpp b12375 Nov 14
LangGraph langgraph==1.2.22 Nov 13
LangGraph langgraph-checkpoint-postgres==3.2.1 Nov 13
LiteLLM v1.106.10 Nov 13
Cypress chore: release @cypress/webpack-dev-server-v6.2.0 Nov 13
llama.cpp b12374 Nov 13

All 173 in Releases →

New Repos & Packages

New repositories under the GitHub topics we track, and packages published to npm.

Rising on GitHub this week
  1. npm #llmNov 14
    typia 15.4.1

    Superfast runtime validators with only one line

  2. npm #llmNov 14
    @typia/utils 15.4.1

    Superfast runtime validators with only one line

  3. npm #llmNov 14
    tokenx 2.2.1

    Fast token estimation with 95%+ average accuracy, 2kB minified and gzipped

  4. npm #ai-agentNov 14
    instar 1.3.1768

    Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.

  5. npm #ai-agentNov 14
    @michengai/dsh-skills-manager 1.4.7

    DSH Skills Manager — 在 DeepSeek Harness 中统一加载并安全管理本机 Agent Skills · Load and safely manage local Agent Skills in DSH

  6. GitHub #developer-toolsNov 13
    briskember13/adobe-acrobat-pdf-desktop (225 stars)

    Adobe Acrobat PDF 2026 desktop setup with text and image editing directly inside any PDF, conversion to and from Word, Excel and images, plus fill, sign and merge documents with an AI assistant for Windows 11

  7. GitHub #developer-toolsNov 13
    ben-miller-23/dxo-photolab-10-desktop (226 stars)

    DxO PhotoLab 10 2026 desktop setup with DeepPRIME XD denoising for clean high-ISO shots, optical corrections from measured lens profiles, and non-destructive RAW workflow with local adjustments on Windows 11

  8. GitHub #developer-toolsNov 13
    ben-cook-42/kontakt-8-desktop (225 stars)

    Kontakt 8 2026 desktop setup with industry-standard sampler for virtual instruments, thousands of libraries and the Kontakt Factory, plus a scripting engine to build your own instruments on Windows 11

All 51 in Repos →

AI in the Field

AI at work outside tech — in health, science, finance, government and more — from the users, regulators and journals themselves. Only real use: deployments, approvals, trials, results.

Nothing in this section in the last 7 days.

Watch

Launches, keynotes, demos and talks from the makers' own channels, and interviews with the people who build it. A video loads from YouTube only when you press play.

  1. GitHubNov 14
    Meet Valkey | Open Source Friday
  2. Black HatNov 13
    Black Hat USA 2026 | AI and the Future of Cyber Defense Panel
  3. Black HatNov 13
    Black Hat USA 2026 | ChatMate: Remote Prompt Execution on AI Assistants through Sandbox Escaping
  4. DatabricksNov 13
    Compare Claude Code, Codex and Hermes on One Model with Unity Gateway
  5. Google Cloud TechNov 13
    Decide which Looker MCP integration is right for you?
  6. NVIDIANov 13
    Meet the Startup: Prima Mente, an AI Biology Company
  7. JetBrainsNov 13
    JetBrains AI.JS Day 2026
  8. GitHubNov 13
    How a personal AI productivity hack became Slack's internal tool
  9. AWS EventsNov 13
    The Round Up with AWS and the DP World Tour | Episode 1

All 107 in Watch →

Source

Full size