Tech news, September 24, 2026
Thursday: 698 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
83 pieces, the newest 20 here.
- Agent Factory recap: Agent harnesses, shifting left, and autonomous coding
In this episode of The Agent Factory, we explore the reality of building with autonomous agents alongside Ryan Lopopolo, a software engineer at Google Cloud and the person who coi…
- Agentic Platform: Open-Sourcing the Agentic Identity Broker
As part of our agentic platform initiative, we are open-sourcing the Agentic Identity Broker, a central component for user-to-agent delegation, consent, and token exchange that le…
- Accelerate Your AI Journey with new Introduction Track at PyTorch Conference NA 2026 and PyTorch Associate Training
As deep learning models move rapidly from research prototypes into core enterprise infrastructure, the demand for practical, end-to-end PyTorch expertise has never been higher.
- Amazon EventBridge relaunches event buses for enterprise scale
Amazon EventBridge relaunches event buses with a new enhanced Custom event bus that lets you build event-driven applications that decouple teams and can scale with your organizati…
- Introducing enhanced custom event buses in Amazon EventBridge for enterprise-scale event-driven applications
Amazon EventBridge announces an enhanced custom event bus for organizations scaling event-driven applications across teams and accounts.
- What it takes to build great products now
Getting to a prototype is easier than ever.
- Require proof of presence for high-impact actions
You can now require an interactive re-authentication or a multi-factor challenge before members take high-impact actions on GitHub Enterprise Cloud accounts.
- When chat is the wrong UI
What is a developer to do when they need something more tangible than a chat box?
- Building multimodal models for spatial reasoning
What is spatial reasoning?
- Automating coherent long-form video generation
Generative AI
- Rails Version 7.2.4 has been released!
Hi everyone,
- Expired GitHub Actions artifacts no longer shown in UI and API
Expired artifacts are no longer displayed in the GitHub Actions run summary or returned by the REST API.
- CoreWeave Mission Control Agent Brings Operational Intelligence to AI Workloads
CoreWeave Mission Control brings frontier scale expertise to AI operations.
- Your AI Passed the Jailbreak Tests: Here’s What They Missed
How Enkrypt AI's autonomous red-teaming agents adapt, chain attacks, and probe AI systems beyond what a static library can reach.
- AWS Lambda durable functions are now available in AWS European Sovereign Cloud region
AWS Lambda durable functions are now available in the AWS European Sovereign Cloud.
- Fine-tune on your LangSmith traces with Baseten Loops
LangSmith Fine-Tuning is in public beta today, and its open-source CLI, smithtune, trains on Baseten Loops.
- Ship agents faster with expanded model choice, voice agents, and continuous optimization
The best model for your business will keep changing.
- Retirement: Azure Communication Services (ACS) standalone services will be retired on September 30, 2028
Microsoft will retire several standalone Azure Communication Services (ACS) offerings on September 30, 2028.
- New in LangSmith Engine: red teaming and automated testing
LangSmith Engine now includes Red Teaming to proactively detect agent issues and automated agent testing.
- Manufacturing Trust for AI Agents | Docker’s WeAreDevelopers Keynote
Docker's WeAreDevelopers keynote shows how Sandboxes, Kits, and Cloud Sandboxes give AI agents strong isolation and reproducible authority.
New Models
3 pieces.
- New model: Fish Audio: Transcribe 1 Pro
Transcribe 1 Pro is a speech-to-text model from Fish Audio tuned for interviews, meetings, and podcasts.
- Open model: FrancisRing/Prism
Trending on the Hugging Face Hub.
- New model: Fireworks: Ember-1
Ember-1 is a specialized reasoning model from Fireworks Research, built on [Kimi K3](https://openrouter.ai/moonshotai/kimi-k3).
Security Desk
45 pieces, the newest 10 here.
- Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
- USN-8820-1: curl vulnerabilities
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances.
- Critical: DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution
Affects @bytebase/dbhub.
- Critical: http4s-scala-xml has an XML External Entity (XXE) processing issue
Affects org.http4s:http4s-scala-xml_2.12, org.http4s:http4s-scala-xml_2.13, org.http4s:http4s-scala-xml_3.
- Inside the OpenSSF Summer Mentorship Showcase: How Emerging Developers Are Strengthening Supply Chain Security
At OpenSSF, securing the open source software supply chain isn’t just about writing code or establishing policies.
- VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Overview ViewSonic vCast software, which is included in ViewBoard smartboard devices, contains multiple vulnerabilities that an attacker can chained to achieve full device comprom…
- Critical: ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
Affects github.com/ixofoundation/ixo-blockchain/v8, github.com/ixofoundation/ixo-blockchain/v7, github.com/ixofoundation/ixo-blockchain/v6, github.com/ixofoundation/ixo-blockchain…
- Critical: Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
Affects decepticon-core, decepticon, decepticon-sdk.
- CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution
Bulletin ID: 2026-118-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/24/2026 12:00 PM PDT Description: pgcollection is an open source extension t…
- Top CodeQL alternatives in 2026
Top CodeQL alternatives compared on noise, fixes, cost, and more: Aikido Security, Semgrep, Snyk Code, SonarQube, Checkmarx, and Veracode Category: DevSec Tools & Comparisons
Technical Guides
36 pieces, the newest 10 here.
- How to build a remote evaluator in Arize AX with Jev
Evaluate agent responses with Jev and Arize AX.
- Control where your hosted agent connects with network egress in Foundry Agent Service
Define and attach an outbound policy to a hosted agent in Microsoft Foundry, observe calls in Audit, and verify allowed and denied destinations under Enforced mode.
- What if your agent's hallucinations had a budget? How to start using SLOs for agent behavior
At Grafana Labs, observability is what we do.
- The AI Loop: Launch Day Is Day One
The AI Loop is how your models constantly improve.
- How Intelligent Load Shedding Prevents Cascading Failures in Tier-0 Systems
By Ramya Subramani and Prateek Vats In our Engineering Energizers Q&A series, we highlight the engineering minds driving innovation across Salesforce.
- Running open-Jev in SQL on Databricks
Over the weekend, “System One” decision models such as Jev have launched, which are...
- Speaker-labeled transcription with WhisperX on SageMaker AI
The AWS WhisperX Deep Learning Container packages Whisper, wav2vec2 forced alignment, and speaker diarization into a GPU-ready image.
- Build a multi-account AI agent with AgentCore Gateway and MCP
Build a multi-account architecture that keeps each team's data in its own AWS account while giving AI agents a unified way to query across them.
- Aderant builds intelligent ticket triage with Amazon Nova
Learn how Aderant built an intelligent ticket triage system on Amazon Nova Lite through Amazon Bedrock, automating context gathering, classification, routing, and knowledge enrich…
- Context engineering is already possible in your warehouse. Here's how to get started.
Analytics teams have always modeled data for BI.
AI in the Field
8 pieces, the newest 6 here.
- Estimating suicide risk from text
A new language-processing tool could help identify the highest-risk individuals from natural language, enabling swifter interventions.
- DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising
Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions.
- The promise and peril of using visual AI to study cities
In their new book, “How AI Sees the City,” the leaders of MIT’s Senseable City Lab examine the technology’s implications for researching urban life.
- Enabling equitable global health AI with privacy‑enhancing technologies
npj Digital Medicine, Published online: 24 September 2026; doi:10.1038/s41746-026-03284-z Enabling equitable global health AI with privacy‑enhancing technologies
- A multicenter assessment of human oversight of generative AI outputs in simulated clinical decision making
npj Digital Medicine, Published online: 24 September 2026; doi:10.1038/s41746-026-03294-x A multicenter assessment of human oversight of generative AI outputs in simulated clinica…
- Old workers, young machines: can AI and automation offset population ageing?
Key takeawaysArtificial intelligence (AI) and robots have the potential to offset the macroeconomic consequences of an ageing workforce, but the ability to automate jobs depends o…
Columns
8 pieces, the newest 6 here.
- The Pulse: RoR creator sparks new “death of coding by hand” debate
37signals – the creator of Ruby on Rails (RoR) – moves over to agents generating nearly all its code.
- Fragments: September 24
Rob Bowley is “flipping tables in his head” with anger at the current media coverage of the danger of AI killing us all The risk I’m worried about isn’t a future machine deciding…
- Foundries vs Navigators: Lowering the Cost of Science
Guest Post: In science, thinking has gotten cheap but doing has not.
- Healthy Feedback
Human collaboration, like most things, improves with feedback.
- The summer of ’26
It was the autumnal equinox a few days ago.
- Malicious npm Packages That Evade Defenses
This is an impressive piece of malware.
Research
335 pieces, the newest 10 here.
- America Is Behind on Memory Chips—and Tariffs Threaten to Make Things Harder
CSET’s Hanna Dohmen shared her expert insight in an article published by The Wall Street Journal.
- Who’s Who In The Fight Over Whether AI Will Kill Us
CSET’s Helen Toner was featured in an article published by Forbes.
- Project Swap: What happens when agents trade for us?
To see what works and what breaks when agents are sent into a market, we made a miniature market of Claudes.
- LLM Agents Can Easily Tamper With Their Own Traces
Asynchronous monitoring, incident investigations, and compliance audits primarily rely on agent traces to reconstruct what happened.
- AD-WM: Action-Discriminative World Models for Counterfactual Model Predictive Control
Latent world models are typically trained to predict factual transitions, whereas model predictive control (MPC) must compare alternative actions from the same state.
- Temporal Gradient Inversion for Private Trajectory Reconstruction in Embodied Reinforcement Learning
Distributed learning in embodied reinforcement-learning agents offers a degree of privacy by retaining raw sensor data on-device and transmitting only policy gradients to the serv…
- Agentic Detection of Online Conspiracies
Conspiratorial discourse on social media is not always expressed through explicit claims or stable lexical markers.
- RAPID: Robot Agentic Programming from Demonstrations
Coding agents have demonstrated enormous success in solving complex programming problems.
- Rolling-WAM: World Action Models with Rolling Imagination
World Action Models (WAMs) couple action generation with future visual prediction for robotic manipulation.
- Forte: A sensitivity type system for imperative Rust
We introduce Forte, a sensitivity type system for Rust whose soundness rests on ownership.
Releases
65 pieces, the newest 12 here.
New Repos & Packages
55 pieces, the newest 8 here.
Watch
28 pieces, the newest 6 here.
- The next generation of voice AI with Google DeepMind and Sierra AI
- A Developer’s Guide to Gemini 3.5 Transcribe
- Tidal Auto-scaling for Training and Inference Based on Kubernetes + KEDA - Jun Zheng & Tan Pei Xiang
- Operating Frontier Intelligence at Scale - Chris Aniszczyk & Xiao Zhang
- Evolving Argo Workflows for AI: New Features, Tuning, and Multi-Tenant Isolation - S. Tian & Y. Su
- Tidal Auto-scaling for Training and Inference Based on Kubernetes + KEDA - Jun Zheng & Tan Pei Xiang
Package releases
32 from the most used packages' own repositories, the newest 15 here.
- sagemaker v3.23.0 · every release →
- google-auth googleapis-common-protos-v1.75.4 · every release →
- pbs-installer 2026.09.24 · every release →
- tree-sitter-php v0.25.0 · every release →
- pymongo 4.18.2 · every release →
- databricks-sql-connector v4.6.0 · every release →
- @azure/abort-controller @azure/storage-blob_12.34.0 · every release →
- hyper-util v0.1.21 · every release →
- brotli-decompressor 6.0.1 · every release →
- @formatjs/ecma402-abstract formatjs_cli_v1.7.5 · every release →
- @tanstack/store @tanstack/preact-store@0.13.3 · every release →
- composer/semver 3.5.0 · every release →
- string-width v8.3.0 · every release →
- datadog-api-client 2.61.0 · every release →
- browserslist 4.29.1 · every release →