The paper in your inbox every morning
Straight from the source · No aggregators, no reposts, no social feeds

The Tech Gazette

Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

News

Announcements from the labs, companies and platforms themselves.

Today

  1. Qodo9:27 AM UTCqodo.ai
    Building quality into the agentic workflow

    AI coding agents changed how fast teams ship. They didn’t change who has to verify the output. Last week, Qodo field CTO Shlomo Dalezman and solutions engineer Jonathan Klick ran a live session on what happens when code review stops waiting for the pull request. They walked…

  2. openSUSE8:00 AM UTCnews.opensuse.org
    Planet News Roundup

    This is a roundup of articles from the openSUSE community listed on planet.opensuse.org. This community blog feed aggregator lists the featured highlights below from Oct. 9 - 15. This week highlights KDE’s 30th anniversary and the premiere of the KDE documentary, the launch of Pl…

  3. Vivaldi6:04 AM UTCvivaldi.com
    Minor update (11) for Vivaldi Desktop 8.2

    This update includes a minor upgrade to Chromium 152 (Extended Stable Release) from upstream, which in turn includes security fixes from Chromium 155.

    More on Desktop 8.2 · Desktop

Yesterday

  1. Vercel12:00 AM UTCvercel.com
    DeepSeek V4.1 Flash 1017 now available on AI Gateway

    DeepSeek V4.1 Flash 1017 is now available on AI Gateway. DeepSeek V4.1 Flash 1017 is a minor update to DeepSeek V4.1 Flash that improves reasoning, coding, agentic tasks, and image understanding. The coding gains show up in terminal work and in building and editing whole reposito…

    More on Flash 1017 · Flash

  2. CoreWeave9:07 PM UTCwf.coreweave.com
    From training to serving: Reflection’s Beam on CoreWeave

    Reflection’s open-weight Beam model on CoreWeave spans training with Weights & Biases Models, SFT in partnership with Axolotl, and Day 0 API access on Serverless Inference in CoreWeave Forge.

  3. Databricks9:00 PM UTCdatabricks.com
    Transactions are Generally Available, advancing warehousing on the Lakehouse

    Multi-Statement Transactions are Generally Available, enabling organizations to run...

  4. AlmaLinux8:18 PM UTCalmalinux.org
    PwnEscape (CVE-2026-99999): Patched kernels available in testing

    A new Linux kernel vulnerability, nicknamed PwnEscape ( CVE-2026-99999 ), has been disclosed. It is a guest-to-host virtual machine (VM) escape: anyone who controls a guest VM can send specially crafted network packets that leak the host’s kernel memory, crash the host, or,…

  5. Apple Developer8:05 PM UTCdeveloper.apple.com
    Updated App Review Guidelines are now available

    The App Review Guidelines have been revised to support new features, updated policies, and to provide clarification. App Review Guidelines Before You Submit: Added links to additional documentation. 1.2: Clarified app content and app types that are subject to this guideline, and…

  6. What's New with AWS8:04 PM UTCaws.amazon.com
    Amazon CloudWatch log centralization now available in AWS GovCloud and additional commercial Regions

    Amazon CloudWatch log centralization is now available in AWS GovCloud (US) and 13 additional commercial Regions. CloudWatch log centralization copies log data from multiple AWS accounts and Regions into a single destination account, integrating with AWS Organizations for efficien…

  7. PingCAP (TiDB)8:02 PM UTCpingcap.com
    TiDB Cloud BYOC Public Preview: Fully Managed Distributed SQL in Your AWS Account

    Teams running distributed SQL in production face a trade-off. A managed service removes the work of upgrades, scaling, and backups, and it moves the database into the vendor’s cloud account. Self-managing TiDB keeps the database in your account and leaves every upgrade, backup, a…

  8. Apple Developer8:00 PM UTCdeveloper.apple.com
    Strengthening App Review Guidelines against nonconsensual intimate imagery and bait-and-switch apps

    The App Review Guidelines are a core part of the safe and trusted experience that the App Store strives to offer users around the world — and the foundation of that trust is clear standards that are consistently enforced. As outlined in our App Review Guidelines, pornographic mat…

  9. Open Source Initiative7:42 PM UTCopensource.org
    Announcing the 2027 State of Open Source Survey

    The OSI has teamed up again with Perforce Zend and OpenLogic, as well as the Eclipse Foundation, for the 2027 State of Open Source Survey.

  10. MariaDB Foundation7:31 PM UTCmariadb.org
    MariaDB Foundation: Exploring TidesDB Performance with TAF

    TidesDB now exists inside MariaDB as a pluggable storage engine. With the TideSQL plugin available, anyone can load TidesDB into a MariaDB server and begin experimenting with it. But having a plugin is only the first step — you still need a practical, reproducible way to run real…

  11. OpenAI7:00 PM UTCopenai.com
    How Itaú is building generative AI for its entire customer base

    With ia.i, a conversational interface, and the IARA governance platform, Itaú is applying its AI First strategy to customers and employees — in one of Brazil’s most regulated sectors.

  12. Google Workspace Updates6:44 PM UTCworkspaceupdates.googleblog.com
    Google Workspace Weekly Recap - October 16, 2026

    Google Meet now uses post-quantum cryptography Calls in Google Meet will use post-quantum cryptography (PQC) for extra protection, starting now with laptop web clients and meeting room hardware, with mobile support coming soon. There are no visible changes, and you can continue u…

All 784 in News →

Columns

The people building AI, writing on their own blogs. Last 30 days.

  1. swyx (Latent Space)Oct 17
    [AINews] High Taste Testers Ep. 1

    a quiet day lets us pilot a new show

  2. Bruce SchneierOct 16
    Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact

    New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

  3. Jeremy KeithOct 16
    Ranking proposals for Interop 2027

    The Firefox team are asking us to weigh in on proposals for Interop 2027—what features should browsers be concentrating on implementing or improving. Here are my top five: Web app installation via <install> and navigator.install(). Prompts the user to install a progressive…

  4. Ben Thompson (Stratechery)Oct 16
    2026.42: Home At Last

    The best Stratechery content from the week of October 12, 2026, including what Apple is doing, SpaceX's appetite, and the title, takes, and the Washington Wizards.

  5. Jeremy KeithOct 16
    The Tusks Of Extinction by Ray Nayler

    Hot on the heels of reading and enjoying The Mountain In The Sea, I picked up Ray Nayler’s next work, this tightly constructed novella. Once again it deals with inter-species communication. This time it’s de-extincted mammoths. Once again, it’s set in the relatively near future.…

  6. Raymond ChenOct 16
    C++ futures part 5: std::future and std::shared_future

    Getting the results back out. The post C++ futures part 5: <CODE>std::<WBR>future</CODE> and <CODE>std::<WBR>shared_future</CODE> appeared first on The Old New Thing.

  7. Zvi MowshowitzOct 16
    Monthly Roundup #47: October 2026

    AI might not yet be eating the physical world. AI is still eating the world of news, and I am finding less and less opportunity to post about other things. My backlog of items grows across most of my secondary … Continue reading →

  8. Bruce SchneierOct 16
    Backdooring Open-Weight AI Models

    This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modifi…

All 103 in Columns →

Technical Guides

Tutorials, case studies and technical deep dives.

  1. Real PythonOct 17
    Quiz: Python's .__call__() Method: Creating Callable Instances
  2. AWS Cloud Financial ManagementOct 16
    Know Before You Go: your re:Invent 2026 guide to managing cloud and AI spend
  3. AWS Machine LearningOct 16
    Building trust in AI agents: A production-ready evaluation framework with Amazon Bedrock AgentCore
  4. NVIDIA DeveloperOct 16
    Code, Test, and Deploy on One Machine with NVIDIA RTX Spark
  5. AWS Machine LearningOct 16
    Introducing Reflection Beam: an open-weight model for agentic coding on AWS
  6. Real PythonOct 16
    Python Exceptions: An Introduction
  7. Real PythonOct 16
    How to Run Your Python Scripts and Code
  8. Real PythonOct 16
    The Real Python Podcast – Episode #315: Python Pitfalls: Common Mistakes and How to Avoid Them

All 140 in Guides →

New Models

New models, as they become available.

  1. OpenRouterOct 17
    New model: DeepSeek: DeepSeek V4.1 Flash 1017
  2. OpenRouterOct 17
    New model: Elorian: Glimpse
  3. Hugging Face HubOct 16
    Open model: deepseek-ai/DeepSeek-V4.1-Flash-1017
  4. OpenRouterOct 16
    New model: Qwen: Qwen Image 2.1 Turbo
  5. OpenRouterOct 16
    New model: Qwen: Qwen Image 2.1 Pro
  6. OpenRouterOct 16
    New model: Perplexity: Decider Flash V1.2
  7. OpenRouterOct 16
    New model: Perplexity: Decider V1.2
  8. NVIDIAOct 16
    Open model: nvidia/NVIDIA-Nemotron-Labs-Dory1.0-4B-NVFP4

All 51 in New Models →

Security Desk

Vulnerabilities exploited in the wild (CISA), critical advisories in the ecosystems devs build on (GitHub), and the security teams' own reports.

Reports

  1. Palo Alto Networks Security AdvisoriesOct 16Niche impact
    CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
  2. RustSec advisoriesOct 17
    RUSTSEC-2026-0365: Vulnerability in negentropy

    Remote DoS through unchecked `IdList` allocation in negentropy

  3. RustSec advisoriesOct 17
    RUSTSEC-2026-0366: Vulnerability in pest_grammars

    Stack overflow when parsing deeply nested input in pest_grammars

  4. RustSec advisoriesOct 17
    RUSTSEC-2026-0369: Vulnerability in zip

    ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  5. RustSec advisoriesOct 17
    RUSTSEC-2026-0367: Vulnerability in zip

    Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  6. RustSec advisoriesOct 17
    RUSTSEC-2026-0368: Vulnerability in zip

    zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory

  7. WordfenceOct 17
    PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads

    Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was downloaded or installed through an update between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. If an affected copy…

  8. oss-security (Openwall)Oct 16
    Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)

    Posted by eddyflores100 on Oct 16 Alexander, Fair on both counts, and thank you for verifying the domain state yourself before responding - that is more diligence than the posting deserved in the shape it was sent. Two process corrections, both accepted: 1. Disclosure: the follow…

  9. HuntressOct 16
    ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

    ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.

  10. Zscaler ThreatLabzOct 16
    Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access

    Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating AI into their malicious workflows and ransomware operators have been able to leve…

All 291 in Security →

Outages

Incidents from the status pages of the services developers build on, as each provider reports them.

All 144 in Outages →

Research

New arXiv papers in AI, language, machine learning and software engineering.

  1. ACM PACMMOD (SIGMOD)Sep 24Open code
    CatKV: Accelerating Position-Independent Caching with Context-Adaptive KV Cache Compression

    Context caching is widely adopted to reduce the dominant prefill cost for long prompts across various large language model (LLM) applications. Recently, position-independent caching (PIC) has emerged to improve KV cache reuse beyond strict prefix matching. However, the required K…

  2. ACM TOSEMOct 11
    BHunter: Generating Blind-Spot Driving Scenarios for Robustness Testing of Perception Systems

    For widespread deployment of autonomous driving systems (ADS), perception robustness plays a fundamental role. However, maintaining robust perception performance remains a significant challenge, especially under occlusion-rich conditions, known as blind-spot driving scenarios. In…

  3. ACM TOCS (Computer Systems)Oct 3Open code
    Orion: A Fully Homomorphic Encryption Framework for Deep Learning

    Fully Homomorphic Encryption (FHE) has the potential to substantially improve privacy and security by enabling computation directly on encrypted data. This is especially true in deep learning, as many popular user services today are powered by neural networks in the cloud. Beyond…

  4. ACM TOIS (Information Systems)Oct 11Open code
    Distilling Transitional Patterns to Multimodal Large Language Models for Session-based Recommendation

    Session-based recommendation (SBR) predicts the next item based on anonymous sessions. Traditional SBR explores user intents based on ID collaborations or auxiliary content. To further alleviate data sparsity and cold-start issues, recent Multimodal SBR (MSBR) methods utilize sim…

  5. ACM TOIS (Information Systems)Sep 30Open code
    ScoreRec: Reallocating Probability Mass in Sequential Recommendation via Score-based Diffusion Modeling

    Sequential recommendation generates personalized item rankings by estimating latent user-preference distributions from historical interactions. Although Diffusion Models (DMs) have gained prominence due to their exceptional capacity to capture complex distributions, current DM-ba…

  6. ACM TOPS (Privacy and Security)Oct 10
    Privacy Risks and Leakage Pathways in Agentic and Multi-Agent AI Systems

    Agentic and multi-agent AI systems are increasingly deployed as part of operational systems, introducing autonomous planning, delegation, persistent memory, tool use, and inter-agent coordination into data-driven decision making. These architectural properties challenge prevailin…

  7. ACM TIST (Intelligent Systems)Oct 7Open code
    A Sequential Condition Evolution and Interaction Knowledge Graph Framework for Traditional Chinese Medicine Recommendation

    The ancient art of Traditional Chinese Medicine (TCM) is distinguished by its extensive annals of utilizing nature's botanical emissaries to ameliorate various pathological conditions. TCM diagnosis and treatment exhibit a pronounced degree of personalization and an organically h…

  8. ACM TOIS (Information Systems)Oct 3
    Secure Recommender Systems: A Co-evolutionary Survey of Vulnerabilities, Attacks, and Defenses

    Recommender systems (RS) increasingly mediate what users see, buy, and believe, making them attractive targets for malicious manipulation. As RS have progressed from traditional collaborative filtering to deep learning and, most recently, LLM-driven designs, the landscape has co-…

All 30 in Research →

Releases

Stable versions of the tools and libraries we track. Prereleases are left out.

ProjectVersionDate
ClickHouse Release v26.3.54.6-lts Oct 17
llama.cpp b11710 Oct 17
llama.cpp b11711: cuda : fix -Wtautological-compare in fattn vec dispatch (#30519) Oct 17
llama.cpp b11709 Oct 17
Rollup v4.64.8 Oct 17
Unsloth Meta Muse Spark Open + NVIDIA Nemotron 3.5 Oct 17
Neovim Nvim development (prerelease) build Oct 17
Electron electron v44.9.0 Oct 17
Cline Desktop v0.0.48 Oct 17
ComfyUI v0.41.3 Oct 17

All 187 in Releases →

New Repos & Packages

New repositories under the GitHub topics we track, and packages published to npm.

Rising on GitHub this week
  1. npm #ai-agentOct 17
    pi-mcp-extension 1.9.6

    MCP (Model Context Protocol) client extension for the Pi coding agent — connect Pi to any MCP server

  2. npm #mcpOct 17
    @lovable.dev/mcp-js 3.1.1

    Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.

  3. npm #ai-agentOct 17
    @tangle-network/create-agent-app 0.60.185

    Create a tested Tangle agent application with either a tool loop or a complete chat interface.

  4. npm #ai-agentOct 17
    @tangle-network/agent-app 0.60.185

    Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.

  5. npm #mcpOct 17
    pi-mcp-adapter 5.3.2

    MCP (Model Context Protocol) adapter extension for Pi coding agent

  6. npm #ai-agentOct 17
    @plannotator/pi-extension 0.28.23

    Plannotator Pi extension - interactive plan review with annotations, annotate agent messages, and review code/PRs

  7. GitHub #generative-aiOct 17
    harshpreet931/harshpreet-hand (7 stars)

    I gave Claude Code 120 pages of my handwritten college notes. It gave me back my handwriting as a real font, in 66 minutes for $13.68.

  8. npm #llmOct 16
    node-llama-cpp 3.22.2

    Run AI models locally on your machine with node.js bindings for llama.cpp. Enforce a JSON schema on the model output on the generation level

All 51 in Repos →

AI in the Field

AI at work outside tech — in health, science, finance, government and more — from the users, regulators and journals themselves. Only real use: deployments, approvals, trials, results.

  1. EFFSep 24Finance
    DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

    Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is a form of online behavioral advertising, which is when companies personalize the ads they show you based…

  2. AWS for IndustriesOct 6HealthVendor’s case
    Agentic AI on Connect Health: An end-to-end telehealth visit

    Healthcare organizations are being asked to widen access, protect increasingly thin margins, and keep clinicians from burning out. Telehealth is one of the most effective levers on all three, and it’s no longer a pandemic stopgap: 71.4 percent of physicians now use it weekly, nea…

  3. Google HealthOct 8Health
    Study in The Lancet suggests AI could improve patient-physician relationships.

    A peer-reviewed study in The Lancet evaluates Google's AMIE medical AI in a real-world primary care clinic.

  4. AWS for Media & EntertainmentOct 12Other fieldsVendor’s case
    Finding the perfect moment: How Formula 1® uses AWS AI to search archives in seconds

    F1 worked with AWS to migrate petabytes of footage from ageing tape robots, in multiple formats and proxy files, into Amazon Simple Storage Service (Amazon S3) alongside the live footage from every new race. That gave the sport one durable home for its heritage: the F1 Video Arch…

  5. U.S. FTCOct 8Finance
    FTC Returns More than $15.8 Million to Consumers Misled by Cash Advance App Company Cleo AI

    Agency charged that the company deceptively marketed cash advance services and obstructed cancellations The Federal Trade Commission is sending more than $15.8 million to consumers impacted by cash advance app company Cleo AI’s deceptive claims about the amounts and timing of ava…

  6. Google HealthOct 6Health
    Making global public health more proactive with Google Earth AI

    Google is helping health leaders overcome reporting lags, forecast disease outbreaks, and deliver care to vulnerable communities.

Watch

Launches, keynotes, demos and talks from the makers' own channels, and interviews with the people who build it. A video loads from YouTube only when you press play.

  1. AWS EventsOct 17
    AWS Glow-Up: New Sign-Ups & Surviving Day One with Kiro
  2. CNCFOct 16
    Meet Kevin Klues - Speaker at KubeCon + CloudNativeCon North America
  3. SnowflakeOct 16
    How DPR Construction Delivers Insights Faster With AI In Snowflake
  4. a16zOct 16
    Why AI Can Write Code But Can’t Keep It Running (Yet)
  5. The Linux FoundationOct 16
    Vendor Neutral Governance Tripled OpenSearch Contributors | Bianca Lewis
  6. JetBrainsOct 16
    JetBrains Pafos Camp 2026: 12 Days of Competitive Programming
  7. NVIDIAOct 16
    NVIDIA RTX Spark | A New Beginning for Windows PCs
  8. CloudflareOct 16
    Cloudflare Immerse Dubai 2026
  9. VercelOct 15
    Vercel Ship 2026

All 125 in Watch →

Source

Full size