Tech news, September 26, 2026
Saturday: 241 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
6 pieces.
- September 26, 2026
Google SecOps SOAR Announcement Release 6.3.100 is now available for all regions.
- Cypress Ambassador Spotlight: Ibukun Micheal Popoola
Welcome back to the Ambassador Spotlight.
- JEP targeted to JDK 28: 539: Strict Field Initialization in the JVM (Preview)
The following JEP is targeted to JDK 28: 539: Strict Field Initialization in the JVM (Preview)
- The Python documentation is now available in German
You can now read the Python documentation online in German!
- Crystal 1.21.1 is released!
We are announcing a new Crystal release 1.21.1 with important security patches, and a regression fix for macOS.
- Announcing Tauri 2.12
The Tauri team is happy to announce the 2.12 release.
New Models
2 pieces.
- New model: Respan: Span-01
Span-01 is a behavior scoring model from Respan.
- New model: Respan: Span-01 Lite
Span-01 Lite is the free, lighter tier of Span-01, a behavior scoring model from Respan.
Security Desk
4 pieces.
- Re: CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
Posted by Simon McVittie on Sep 26 Was this library advertised as being safe for use in setuid, setgid or otherwise privileged processes?
- DSA-6517-1 nodejs - security update
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, permission model bypass, incorrect certificate validation or information disclosure.
- DSA-6519-1 swift - security update
A vulnerability was discovered in the Swift tempurl middleware, which could result in information disclosure.
- DSA-6518-1 incus - security update
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security/authorisation restrictions, guest to…
Technical Guides
2 pieces.
- The FinTech Scalability Crisis: How Distributed SQL Unlocks Innovation with Zero Downtime Operations
When Plaid’s Amazon Aurora MySQL fleet faced a major-version upgrade, the estimate came back at six engineering months and tens of minutes of downtime.
- How Jev Compares to Other Rerankers for LanceDB Search
See how Jev compares with 19 reranker configurations across five datasets on accuracy, latency, and prompt-driven relevance for LanceDB search.
AI in the Field
3 pieces.
- Development and validation of a parsimonious AI-based mortality risk score for heart failure
npj Digital Medicine, Published online: 26 September 2026; doi:10.1038/s41746-026-03258-1 Development and validation of a parsimonious AI-based mortality risk score for heart fail…
- Quantifying the plausibility gap in generative AI for surgical video generation with expert assessment
npj Digital Medicine, Published online: 26 September 2026; doi:10.1038/s41746-026-03276-z Quantifying the plausibility gap in generative AI for surgical video generation with expe…
- Large language model–assisted preoperative communication reduces patient anxiety and physician workload in prostate cancer: a prospective randomized phase II trial
npj Digital Medicine, Published online: 26 September 2026; doi:10.1038/s41746-026-03309-7 Large language model–assisted preoperative communication reduces patient anxiety and phys…
Columns
4 pieces.
- Rusty thoughts on "Parse, don't validate"
Like many programmers, I find Alexis King's Parse, don't validate article fascinating, because it gives a name to an idiom that seems familiar and important - one I've observed an…
- Intel Panther Lake Teardown
Looking inside Intel 18A and Intel’s Panther Lake.
- Joy & Curiosity #101
Interesting & joyful things from the previous week
- Advice to a beginning software engineer
In general, you should be suspicious of engineers who are trying to give you advice.
Research
116 pieces, the newest 10 here.
- Transfer Learning for Edge Classification on Dynamic Text-Attributed Graphs
Learning transferable representations for dynamic text-attributed graphs (DyTAGs) requires models to capture underlying interaction dynamics that persist across domains.
- Packets, Transactions and Queues: Design Principles for HFT Systems from a Measurement Study of CME Market Data
HFT systems are conventionally built as a single-threaded event loop, on the rule that every thread hop adds latency.
- Sliced Orlicz-Wasserstein
We propose sliced Orlicz-Wasserstein (SOW) distance which is a generalization of sliced Wasserstein (SW) distance.
- SynCo: Learning Cross-Modal Synergy by Contrasting Interaction Residuals
Multimodal contrastive learning is a dominant paradigm for learning transferable representations from unlabeled data, but standard objectives primarily capture information that is…
- VCRE-Fib: View-Conditioned Regional Evidence for Fine-Grained Ultrasound Grading of Schistosoma japonicum-Associated Liver Fibrosis
Accurate assessment of Schistosoma japonicum-associated liver fibrosis is essential for disease management and long-term follow-up in endemic regions.
- Mend the Measurement Gap: Latent User Preference Modeling for Short-Form Video Recommendation
Recommender systems rely heavily on heterogeneous behavioral feedback to infer user preference.
- HamiFormer: Dual-Expert Diffusion Fields with Affine Symplectic Maps
Predicting smooth dynamics and collisions requires modeling continuous evolution and abrupt state changes.
- Scanning While Imagining: A Scene-Graph World Model for Robotic Ultrasound Navigation
Ultrasound (US) acquisition depends on the operator's ability to interpret anatomy and anticipate how the view will change with probe motion.
- Radiomap Blind Prediction under Incomplete Observation: Error Characterization and Correctable Propagation-Prior Learning
Radiomap blind prediction aims to infer radiomaps from observable representations of the propagation environment and base station configuration without field measurements.
- FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priors
As AI agents are becoming widely adopted in the financial services industry, careful measurement is essential to understand where they can be reliably deployed and where oversight…
Releases
24 pieces, the newest 12 here.
New Repos & Packages
41 pieces, the newest 8 here.
Watch
7 pieces, the newest 6 here.
- AI Agents Running Your SRE Workflows on Elasticsearch | Michael Guarino, Plural
- The Next Chapter of AI Is Inside Our Software
- The Ads Business Model Will Die & Lessons from Working with Elon at Twitter | Parag Agrawal
- Robot-Use Agents: Why General-Purpose Models May Win in Robotics
- Kelsey Hightower: ZTA: Zero Token Architecture -- Docker x WeAreDevelopers
- New Agent Models, Muse Connector & VR Apps | This Week in Replit (Sep 25, 2026)
Package releases
32 from the most used packages' own repositories, the newest 15 here.
- prefect 3.8.7 · every release →
- @asamuzakjp/css-color v7.1.1 · every release →
- @asamuzakjp/dom-selector v9.2.2 · every release →
- cattrs v26.2.1 · every release →
- pikepdf v10.14.0 · every release →
- multidict v7.0.0 · every release →
- apprise v2.0.0 · every release →
- webpack-sources v3.6.0 · every release →
- phpstan/phpstan-phpunit 2.0.19 · every release →
- serde_with v3.24.0 · every release →
- virtualenv 21.13.0 · every release →
- micromark-util-symbol 4.0.3 · every release →
- platformdirs 4.12.0 · every release →
- filelock 4.0.4 · every release →
- ws 8.22.0 · every release →