Tech news, September 25, 2026
Friday: 590 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
64 pieces, the newest 20 here.
- Enterprise managed settings in-product validator
You can now use an in-product validator for enterprise managed settings for GitHub Copilot.
- Visual Studio Code CMake Tools 1.24
CMake Tools 1.24 includes several reliability fixes and productivity improvements.
- Unicode CLDR 49 Beta available for specification review
The Unicode CLDR 49 Beta is now available for specification review and integration testing.
- AWS named a Leader in the 2026 Gartner Magic Quadrant for Container Management
Gartner has recognized AWS as a Leader in the 2026 Gartner Magic Quadrant for Container Management for the fourth consecutive year.
- Usage metrics API adds pull request review stages
The enterprise and organization repository-level Copilot usage metrics reports now break down how long pull requests spend in each stage of review.
- Amazon Transcribe adds customer-managed KMS keys for custom resources
Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models at rest with a customer-managed AWS KMS key that you own and…
- Private saved views for repository issues and “Relates to” issue relationship is generally available
Private saved views for repository issues Repository issues pages now support private saved views, making it easier to create and save personalized views of your issues.
- AI agents need continuity, not just context
Pulumi Neo works on infrastructure the way an engineer does: it clones repositories, edits files, installs dependencies, runs previews, and produces intermediate work along the wa…
- “We Never Stand Still”: Ata Ul Haseeb Chaudhry’s 20 Years at EDB
EDB’s Ata Ul Haseeb Chaudhry is a senior director of Treasury and Financial Operations who manages multiple teams across multiple time zones.
- Changes to query results in the GitHub Actions API and UI
Queries for workflow runs in the GitHub Actions API and UI now return a less precise but more accurate count of records when you search by workflow, event, status, branch,… The po…
- [In preview] Public Preview: Azure HorizonDB supports PostgreSQL 18
Azure HorizonDB is a fully managed, PostgreSQL-compatible, cloud-native database service designed for scalable, high-performance workloads.Azure HorizonDB, now in public preview,…
- Your AI Agent is Writing Rust… But Is It Good? Explore On This Upcoming Livestream.
AI coding agents are making it easier for people to start writing Rust, but is the code they’re writing good?
- WinAppCLI v0.7.0 – Windows Sandbox automation, Native AOT support, single-file applications, and more
Windows App Development CLI v0.7.0 has shipped, and we’re excited to share it.
- Agentic autofix now uses Copilot Memory
Agentic autofix now uses Copilot Memory for customers who’ve enabled it.
- Sheila Vashee joins Baseten as CMO
Welcome Sheila Vashee!
- The agent-first cloud: why we built Managed Agents
Compute (EC2) opened the front door to the first generation cloud.
- AG-UI Protocol now has a first-class .NET SDK
The new AG-UI.NET SDK enables.NET services to expose and consume interoperable agent endpoints using Microsoft.Extensions.AI.
- Cognition Crosses $1B in Annualized Revenue Run Rate
A milestone that belongs to our customers.
- Celebrating 20 Years of Open Movies
A thank you message for the community that made this possible.
- GitHub Copilot weekly releases — September 21
This week’s releases add new models to Copilot, local sandboxing in the Copilot app, and updates to Copilot in Slack, Microsoft Teams, JetBrains, and VS Code.
New Models
6 pieces.
- New model: ByteDance Seed: Seed Audio 1.0
Seed Audio 1.0 is ByteDance Seed's non-streaming audio generation model.
- New model: TypeSafe: Jev Router
Jev Router picks the best model and reasoning effort for each request, balancing quality, speed, and cost.
- New model: Jared Palmer: Kev 4B
Kev 4B is a small open-weight decision model from Jared Palmer, built as a LoRA adapter and pointer head on Qwen3.5-4B-Base and served over the same /v1/systemone contract as Type…
- New model: Perceptron: Perceptron Mk1.5
Perceptron Mk1.5 is Perceptron's embodied reasoning model for physical agents.
- Open model: well9472/Nanosaur2-670M
Trending on the Hugging Face Hub.
- New model: Google: Gemini 3.5 Transcribe
Gemini 3.5 Transcribe is a speech-to-text model from Google.
Security Desk
47 pieces, the newest 10 here.
- Trading Maintenance for Momentum: Scaling Security Validation Across 230+ Sites
See how a global automotive technology manufacturer used NodeZero to reduce testing overhead, cut comparable test runtime by 50%, and scale security validation across more than 23…
- 3 Consulting Myths Debunked by Unit 42 Experts
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
- CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
Posted by Haitam Lazaar on Sep 25 Hello oss-security, An untrusted search path vulnerability leading to Local Privilege Escalation (LPE) was identified in GNU libextractor for ver…
- CVE-2026-91204: Apache Roller: Stored javascript: URI in HTML comments
Posted by David M.
- U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S.
- CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint
Posted by David M.
- CVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validation
Posted by David M.
- CVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayed
Posted by David M.
- Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
- Threat Actors Use Google Ads To Target Ledger Users
IntroductionIn August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users.
Technical Guides
50 pieces, the newest 10 here.
- How to add hybrid search to a Postgres app with Pinecone in 2026
Add hybrid search to a Postgres app with Pinecone: full-text and vector search in one index, Postgres as the source of truth.
- AI in M&A: Accelerating Due Diligence and Integration
Learn how Accenture and Snowflake use AI and a unified data platform to accelerate M&A due diligence, de-risk integration and drive deal value.
- Proaction boosts sales 60% and saves 75+ hours with Codex
With Codex, GPT-Live-1, and GPT-6 Astra, Proaction builds, operates, and sells modern fleet management faster.
- AI best practices for AWS network operations with AI agents and MCP
This post is for platform and SRE teams running 24/7 network operations who want AI Agents and Model Context Protocol (MCP) for intelligent, automated event response, and for indi…
- Programmatically Understand Your AWS Enterprise Support Charges with the AWS Billing API
If you manage Enterprise Support for a large AWS organization, you've likely been asked which accounts a single Support line item comes from and how it was calculated.
- GitHub Copilot app for Beginners: How to build custom workflows with canvases
Describe the interface you need in plain English, then let the agent build a live surface you can both use and update—so you spend less time adapting to tools and more time gettin…
- Data-driven planning for cloud migration using AWS Storage Assessment
Data is the foundation of AWS Cloud migration, and choosing the right storage services is one of the earliest, most critical decisions enterprises face.
- Inside the AWS Storage Assessment: How intelligent analysis replaces guesswork
A completed storage assessment looks simple: an AWS Storage service recommended per workload, capacity and performance recommendations, and cost.
- Planning data protection before migration: How AWS Storage Assessments model backup and disaster recovery costs
Data Protection and disaster recovery is an important part of any migration.
- Scaling MoE reinforcement learning on Amazon EKS with EFA and DeepEP with 40% more throughput
Learn how to scale Mixture-of-Experts (MoE) reinforcement learning on Amazon EKS using Elastic Fabric Adapter (EFA) and DeepEP.
AI in the Field
5 pieces.
- MIT students gain a humanist lens on technical innovation in Tulsa, Oklahoma
The PKG Center for Social Impact expands Code.Tulsa experiential learning program.
- Controlling delegation in agentic AI with Amazon Bedrock Agent Core
This post introduces a delegation model that gives architects a structured way to assess whether agentic systems meet their authorization and access control requirements.
- Large language models as judges for clinical generative AI evaluation
npj Digital Medicine, Published online: 25 September 2026; doi:10.1038/s41746-026-03248-3 Large language models as judges for clinical generative AI evaluation
- LEME: open large language models for ophthalmology with advanced reasoning and clinical validation
npj Digital Medicine, Published online: 25 September 2026; doi:10.1038/s41746-026-03104-4 LEME: open large language models for ophthalmology with advanced reasoning and clinical v…
- Artificial intelligence-mediated clinical communication between providers and patients or caregivers: scoping review and conceptual framework
npj Digital Medicine, Published online: 25 September 2026; doi:10.1038/s41746-026-03279-w Artificial intelligence-mediated clinical communication between providers and patients or…
Columns
9 pieces, the newest 6 here.
- OpenRouter: from Seed to Stripe — with OpenRouter’s Alex Atallah & AMP’s Anjney Midha
In 2023 most people doubted that there could be more than 1 or 2 frontier model labs.
- Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world of marine biology during an exciting, hands-on Family Squi…
- The Chinese AI Infrastructure Boom: Introducing the SemiAnalysis China Datacenter Model
1,000+ facilities across 60+ operators mapped, built retail-first and flipped by AI, largest hyperscaler leases 1/5 national capacity, 100MW in 12 months, Eastern Data Western Com…
- Think local
If you’re anything like me, you’re sick of hearing about so-called “AI”.
- On Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected.
- 25 years on Apple computers
Exactly on this day, September 25 2001, Apple shipped version 10.1 of their OS X operating system.
Research
250 pieces, the newest 10 here.
- Security expert weighs in on Trump, Xi state dinner with tech CEOs
CSET’s Sam Bresnick joined ABC News for an interview discussing U.S.-China competition in artificial intelligence.
- FuseReg: Regularizing Layer Fusion Mitigates the Reconstruction-Generation Gap in Representation Autoencoders
Representation autoencoders (RAEs) reuse features from a pretrained visual encoder as reconstruction and diffusion latents, integrating strong visual representations into image ge…
- Learning to Stop without Learning to Stop: Self-Supervised Confidence Training Improves Reasoning Efficiency
Reasoning models often generate very long reasoning traces, making inference computationally expensive.
- Gap-free Differentially Private PCA for Gaussian Data
We give a gap-free differentially private algorithm for the principal component analysis (PCA) problem with Gaussian data.
- First-Order Stationarity of Reverse Diffusions
Recent literature has shown a strong connection between optimization and sampling.
- Statistical attribute alignment for black-box generative AI via output post-processing
Generative AI systems are increasingly used, but aligning their outputs with user requirements poses a continuing challenge.
- User Model Extraction via Belief Self-Distillation
Large language models (LLMs) implicitly infer attributes of their users and adapt their behavior accordingly, yet these beliefs remain difficult to inspect and causally manipulate.
- New LoRA Skills Should Read but Never Write
Low-rank adapters (LoRA) make it cheap to fine-tune a large language model once per task, but combining several independently trained adapters into one model remains difficult: me…
- GraphWrit3R: End-to-End 3D Scene Graph Writing
3D scene graphs provide a structured representation of complex environments by encoding objects, their semantic attributes, and the spatial and functional relationships between th…
- From Source Code to Network Profile: Automated and Traceable MUD Profile Generation for IoT Devices
The Manufacturer Usage Description (MUD) standard allows IoT manufacturers to define expected network behaviors in a MUD file.
Releases
62 pieces, the newest 12 here.
New Repos & Packages
46 pieces, the newest 8 here.
Watch
10 pieces, the newest 6 here.
- Foundation Models for the Physical World + Making Biology Computable
- How to use Claude, Codex, and BYOK in GitHub Copilot for VS Code | GitHub Copilot Day
- One model deployment to route them all
- RustConf 2025 Interview: Alyssa Haroldsen, Crab Wrangler @ explain.rs
- Per-Layer Embeddings (PLE) in Gemma 4 explained
- Personalized onboarding action plans with Gemini Enterprise
Package releases
41 from the most used packages' own repositories, the newest 15 here.
- is-what v5.5.2 · every release →
- pydantic-ai-slim v2.51.0 · every release →
- claude-agent-sdk v0.2.160 · every release →
- behat/gherkin v4.18.0 · every release →
- astroid v4.3.2 · every release →
- microsoft-kiota-http microsoft-kiota-bundle-v1.14.1 · every release →
- strands-agents harness-cli/v0.1.4 · every release →
- @smithy/util-utf8 @smithy/signature-v4@5.7.4 · every release →
- bare-fs v4.8.2 · every release →
- google-adk v2.10.0 · every release →
- google/apiclient v2.20.1 · every release →
- @aws-sdk/types v3.1141.0 · every release →
- resend v2.48.0 · every release →
- import-fresh v4.0.1 · every release →
- aws/aws-sdk-php 3.398.1 · every release →