Tech news, September 23, 2026
Wednesday: 573 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
81 pieces, the newest 20 here.
- Introducing NV-Reason-CT Open 3D CT VLM for Radiologist Chain-of-Thought Reasoning
Radiology AI has made remarkable strides in detecting abnormalities across chest X-rays, pathology slides, and 2D scans.
- Amazon Kinesis Data Streams announces Service-Managed Partition Keys for simplified data ingestion
Amazon Kinesis Data Streams now supports service-managed partition keys for On-Demand Standard and On-Demand Advantage streams, automatically distributing records across shards wi…
- Release Notes for Safari Technology Preview 253
Safari Technology Preview Release 253 is now available for download for macOS Golden Gate and macOS Tahoe.
- Giving Back to the Open Source We Build On
LanceDB adds ASOF join support to Apache DataFusion, improving time-series joins while giving back to the open source projects we rely on.
- Reverie, Nov 5, ML Data Loading Performance Guide, CrewAI Cognitive Memory on LanceDB
Reverie launches as LanceDB's summit for AI builders, GPU training bottlenecks traced to CPU-side transforms, and CrewAI unifies cognitive memory on LanceDB, plus upcoming events,…
- More ways to request and configure Copilot code reviews
GitHub Copilot code review now offers additional personal configurations to an expanded set of Copilot plans and an enterprise-level default setting.
- Node 20 is no longer available in GitHub Actions
This is the final notification that Node 20 is no longer available on GitHub Actions runners.
- From Research Project to Open Source Ecosystem: Bring Your Academic PyTorch Project to PyTorchCon NA
Some of the most interesting work being built with PyTorch starts in universities, research labs, student groups, and academic institutions.
- Microsoft is updating its author-signing certificate starting September 23, 2026
Starting September 23, 2026, Microsoft is updating the author-signing certificate used for NuGet packages.
- Node.js 22.23.3 (LTS)
- Google Beam expands with new regions, partners, and customers
We’re expanding Google Beam to five new countries, and partnering with Industrious for an extended network.
- Unlimited Vercel Blob stores on every plan
You can now create as many Vercel Blob stores as you need.
- Upcoming Next.js September Security Release
Next.js is preparing a scheduled September security release for September 30, 2026.
- Amazon Bedrock Managed Knowledge Base now supports Salesforce and Zendesk as native data source connectors
AWS announces Salesforce and Zendesk data source connectors for Amazon Bedrock Managed Knowledge Base, a fully managed retrieval-augmented generation (RAG) service.
- Visual Studio Code 1.139
Learn what is new in Visual Studio Code 1.139 Read the full article
- Retirement: Support for PowerShell 7.4 ends on November 10, 2026
Support for PowerShell 7.4 will end on November 10, 2026, please transition to PowerShell 7.6.
- Retirement: Support for .NET 8 and .NET 9 ends on November 10, 2026—upgrade your apps to .NET 10
Support for.NET 8 and.NET 9 will end on November 10, 2026.
- Claude discovers a novel enzyme system
In early results from our new life sciences research lab, Claude agents found an enzyme system whose function is still unknown.
- Offloaded inference for real-world physical AI robotics
Robots are getting smarter, but how can their hardware match that growth?
- Advancing Private AI Compute with secure, server-side memory
Introducing private, server-side memory to Private AI Compute for personal AI.
New Models
10 pieces.
- New model: inclusionAI: Ming Image 0.1 Design Layer
Ming Image 0.1 Design Layer is an image-to-image model from inclusionAI that decomposes a flattened design image into separate RGBA layers, such as a background layer and foregrou…
- New model: Google: Gemini 3.8 Flash Lite TTS
Gemini 3.8 Flash Lite TTS is a text-to-speech model from Google and the fast, high-throughput member of the 3.8 TTS family alongside [Gemini 3.8 Flash TTS](https://openrouter.ai/g…
- New model: Google: Gemini 3.8 Flash TTS
Gemini 3.8 Flash TTS is a text-to-speech model from Google and the successor to [Gemini 3.1 Flash TTS Preview](https://openrouter.ai/google/gemini-3.1-flash-tts-preview).
- New model: Z.ai: GLM 5.3 Prime
GLM-5.3-Prime is the high-speed variant of Z.ai's GLM-5.3, inheriting its full capabilities while delivering 1.5–2× the output throughput through inference acceleration.
- New model: Qwen: Qwen3.8 Max Prime
Qwen3.8 Max Prime is a higher-throughput variant of Qwen3.8 Max from Alibaba's Qwen team, served as a separate SKU at a higher price point.
- New model: Recraft: Recraft V4.1 Flash
Recraft V4.1 Flash is a text-to-image model from Recraft, the speed and cost tier of the V4.1 family.
- New model: Space Bunny Alpha
Space Bunny Alpha is an anonymous large model with blazing-fast inference, strong coding capabilities and native multimodal input support.
- New model: AionLabs: Aion 3.5 Mini
Aion 3.5 Mini is a multi-model roleplaying and storytelling system from AionLabs, built on the GLM family of models.
- New model: AionLabs: Aion 3.5
Aion 3.5 is a multi-model roleplaying and storytelling system from AionLabs, built on the GLM family of models.
- New model: Upstage: Solar Mini 4
Solar Mini 4 is Upstage's compact, cost-efficient language model, a 35B-parameter mixture-of-experts with 3B active parameters and a 524K context window.
Security Desk
37 pieces, the newest 10 here.
- Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
Well, well, well, well, well, well, well, well, well, well, well, well, well, well, well.
- ICYMI: August 2026 @AWS Security
Read all about the latest AWS security features, compliance updates, and hands-on resources in our monthly digest posts.
- Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.
- Security Slam 2026 – Fall Edition
The Open Source Security Foundation (OpenSSF) is partnering with the Cloud Native Computing Foundation (CNCF) Security Technical Advisory Group (TAG Security) to support the 2026…
- CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer
With Pwn2Own Ireland 2026 coming up, I wanted to share an unreleased blog post from my time as a Pwn2Own contestant.
- Critical: OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)
Affects openc3.
- USN-8287-2: XDG Desktop Portal regression
USN-8287-1 fixed a vulnerability in XDG Desktop Portal.
- USN-8809-1: libgit2 vulnerability
Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport.
- VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Overview Imprivata Enterprise Access Management (EAM), an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions…
- USN-8808-1: SQL parse vulnerabilities
It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string lite…
Technical Guides
32 pieces, the newest 10 here.
- A Practical LLM Pretraining Pipeline with LanceDB
Training a GPT-2-like model from raw text in 25 minutes with LanceDB, using one table for curation, tokenization, shuffling, packing, training, and analysis.
- Validate GPU Cluster Readiness Before AI Workloads Land
A GPU cluster can pass every health check and still fail to run an AI workload.
- Megabytes in milliseconds: How FireTV uses parallel queries and vertical partitioning to serve millions of customers in Amazon DynamoDB
How Amazon FireTV redesigned its Continue Watching watch-progress data model on Amazon DynamoDB with vertical partitioning and hash-prefixed sort keys for parallel reads, removing…
- How to Use NVIDIA Warp and MjWarp to Accelerate Robotics Simulation and Learning Workflows
- From portal-hopping to instant answers: HEMA’s journey with MCP and Amazon Bedrock
HEMA, a 100-year-old Dutch retailer, turned developer portal-hopping into instant answers by building HAL, an internal AI assistant on Amazon Bedrock AgentCore.
- Building a single-pane NOC dashboard for Amazon EKS with Amazon CloudWatch
An incident is the worst moment to discover you cannot trust your Amazon EKS dashboard.
- Rendering huge pull requests in the GitHub Copilot app
How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments.
- Manage Kubernetes Node Fleets with NodeWright
Kubernetes manages what runs on your nodes.
- Agentic conversational video intelligence built on AWS
Learn how to build a conversational video intelligence solution on AWS using an agentic architecture.
- Use open weight models as your AI coding agent with Amazon Bedrock
Pair OpenCode, an open-source terminal-native AI coding agent, with open weight models on Amazon Bedrock to get a secure, flexible, pay-per-use coding assistant.
AI in the Field
4 pieces.
- How financial institutions can operationalize AI-DLC quickly and effectively
In this post, you will learn how to build a governance harness in days, and what engineering and Governance, Risk and Control (GRC) teams gain from it.
- MIT welcomes David Siegel SM ’86, PhD ’91 as its next Innovation Fellow
Computer scientist, entrepreneur, and philanthropist will collaborate with the MIT Schwarzman College of Computing to advance AI and scientific discovery.
- How Polymet gives every user a real backend without a backend team
Polymet is an AI product designer that turns a prompt or an image into working code.
- Guiding large language models to predict edit sequences for molecular synthesizability optimization
Nature Machine Intelligence, Published online: 23 September 2026; doi:10.1038/s42256-026-01304-x Computational drug design often generates molecules that cannot be synthesized.
Columns
7 pieces, the newest 6 here.
- What Happens When the Model Eats the Stack? Rethinking the Research Agenda for Data Agents to Withstand the Bitter Lesson
General methods that scale with computation will inevitably displace hand-engineered domain knowledge!
- ClusterMAX 3.0: The Industry Standard GPU Cloud Rating System Returns
In gory detail: reliability, performance, support, pricing—and, of course, security—in our most thorough analysis of GPU cloud providers globally.
- Professor Yoshua Bengio’s speech at the UN Security Council
In this speech, Professor Yoshua Bengio addresses the UN Security Council to discuss the unprecedented threat posed by uncontrolled frontier AI.
- Design Engineering with Maggie Appleton
Maggie Appleton on what engineers can learn from designers, working with AI agents, and why human judgment still matters.
- Bio-security is an AI Arms Race - Eric Nguyen (CEO, Radical Numerics)
Radical Numerics is using biological chain-of-thought and multimodal perception to keep up with the bio-defense arms race, design new genomes and gain insights into biology itself.
- [AINews] Claude Opus 5.5, the new default model for AINews — and everybody cuts prices 40-50%
overshadowing more efficient GPT6 models from OpenAI
Research
248 pieces, the newest 10 here.
- On the Diffusibility of High-Dimensional Latents
Representation Autoencoders (RAEs) enable diffusion models to operate in the feature spaces of pretrained visual encoders.
- Contrastive Learning for Authorship Verification
Our results show that contrastive learning outperforms a classification-based approach to authorship verification under the tested settings.
- StudentBench: AI and human tutoring yield equivalent GRE learning gains
Artificial intelligence offers an unprecedented opportunity to augment human capabilities, yet progress at the frontier has focused primarily on advancing model capabilities.
- Where Should I Join? Robot Group Joining via Language-Guided Goal Prediction
Social navigation typically assumes a specified goal and focuses on reaching it while respecting social conventions, whereas robot group joining requires predicting where to join…
- Even Sharper Bounds for Transductive Learning and Its Applications
We introduce Sharper Transductive Local Complexity (STLC), a localized complexity method for transductive learning under uniform sampling without replacement.
- Can LLMs Reason About Runtime Behavior? A Repository-Level Dynamic Benchmark
Large language models (LLMs) are increasingly used in coding tasks, but their ability to reason about code execution remains unclear.
- Nonequilibrium Phases of Repulsive Self-Attention: Chaos, Attention Condensation, and Emergent Locality
We study the nonequilibrium dynamics of a minimal recurrent transformer with $N$ normalized tokens, $Q=K=I$, and a negative value map $V=-I$.
- Order-Invariant Answers, Order-Sensitive Representations in Mathematical Reasoning
Reordering a set of mathematical rules without changing its meaning should preserve the correct answer, but must a model's internal representations stay invariant too?
- Minimal-Norm Univariate Two-Layer ReLU Classification: Exact Solutions and Global Optimality with Skip Connections
We study minimal-norm interpolation and $\ell_2$-regularized logistic-loss minimization for binary classification by univariate two-layer ReLU networks.
- Cross-Scale Transfer Learning for Depression Severity Prediction: From PHQ-8 to HAMD-17 Across Languages and Clinical Paradigms
This work addresses continuous depression-severity score prediction from clinical interview transcripts under data scarcity.
Releases
59 pieces, the newest 12 here.
New Repos & Packages
34 pieces, the newest 8 here.
Watch
17 pieces, the newest 6 here.
- Kubernetes 1.37: Scale to Zero, Checkpoint Restore, Resilient API | Dipesh Rawat, CNCF
- Stop guessing which model your agent needs
- How Rogo ships agent-written code to production in 5 minutes on Vercel
- Aligning Multi-Agent Systems and Financializing Compute
- Inside Anthropic's molecular biology lab
- Get Stuff Done with ChatGPT Voice
Package releases
44 from the most used packages' own repositories, the newest 15 here.
- cyclopts v5.0.0 · every release →
- @azure/msal-common msal-browser-v5.9.1 · every release →
- gcp-metadata google-gax-v6.7.0 · every release →
- react-resizable-panels 4.13.3 · every release →
- @angular-devkit/core v22.2.0 · every release →
- google-ads 33.0.0 · every release →
- semgrep v1.178.0 · every release →
- cuda-bindings cuda-core-v1.2.1 · every release →
- firebase-admin v7.7.0 · every release →
- thiserror-impl 2.0.21 · every release →
- wcwidth 0.9.1 · every release →
- tldts-core v7.4.15 · every release →
- justinrainbow/json-schema 6.13.0 · every release →
- setuptools-scm vcs-versioning-v2.5.0 · every release →
- fonttools 4.66.0 · every release →