Tech news, September 27, 2026
Sunday: 253 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
7 pieces.
- Cloudflare’s 2026 Annual Founders’ Letter
The Internet is changing more today than at any point since Cloudflare launched back on September 27, 2010.
- SAIL: Scaling In-Context Imitation Learning
- Lambda to build new data center in Mayes County, Oklahoma, generating half a billion dollars in tax revenue over next decade
Facility will be built in MidAmerica Industrial Park & deploy closed-loop cooling technology to preserve and recycle water; all energy costs paid in compliance with Oklahoma’s rat…
- September 27, 2026
Agent Platform Workbench Change 20260927-2130-rc0 Release Change Installed latest packages from upstream dependencies.
- Implementing and Evaluating a Basic Per-Action Monitor for Safer Evals
In light of recent incidents (e.g.
- Ember-1 from Fireworks now available on AI Gateway
Ember-1 from Fireworks is now available on AI Gateway.
- Project rebrand: Nura
After a one and a half year selection process, the new name of the operating system formerly known postmarketOS has been announced during the mystery talk of our very own conferen…
New Models
4 pieces.
- Open model: NaiveAI/Naive-N0.5-Flash
Trending on the Hugging Face Hub.
- Open model: shhivv/taiga-s1
Trending on the Hugging Face Hub.
- Open model: XiaomiMiMo/MiMo-V2.6-Flash-MOPD
New open weights from Xiaomi MiMo on the Hugging Face Hub.
- Open model: XiaomiMiMo/MiMo-V2.6-Pro-MOPD
New open weights from Xiaomi MiMo on the Hugging Face Hub.
Security Desk
10 pieces.
- CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog amccarty Sep 27, 2026 Release Date September 27, 2026 Description CISA has added two new vulnerabilities to its Know…
- Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway dskinner Sep 27, 2026 Release Date September 27, 2026 Last Revised September 28, 2026 Description CISA…
- 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2…
- Wireshark 4.6.9 Released, (Sun, Sep 27th)
Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs.
- CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execut…
- CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.
- DSA-6521-1 ruby-oj - security update
Multiple security vulnerabilities were discovered in Oj, a fast JSON parser and serializer for Ruby, which could result in denial of service or memory disclosure.
- DSA-6520-1 lemonldap-ng - security update
Multiple security vulnerabilities were discovered in the Lemonldap::NG web SSO system, which could result in a bypass of access controls, authorisation bypass in setups using PKCE…
- DSA-6522-1 exim4 - security update
Several vulnerabilities were discovered in the Exim mail transport agent, which could result in SMTP smuggling, information disclosure, denial of service or the execution of arbit…
- Qubes OS Summit 2026: Freedom of the Press Foundation and NovaCustom sponsorships; conference schedule available!
We’re proud to announce two new Qubes OS Summit 2026 sponsorships: Freedom of the Press Foundation (FPF) as a Gold-tier sponsor and NovaCustom as a Silver-tier sponsor!
AI in the Field
1 piece.
- Building AI-augmented B-pillar DFMEA on AWS: Architecture, multi-agent orchestration, and implementation
In this post, we deliver the implementation blueprint.
Columns
4 pieces.
- 2026 in LLMs (so far)
On Friday I gave the closing keynote at the WeAreDevelopers World Congress North America in San Jose.
- Focusing on Post-Training
Why I'd invest in post-training existing open-weight LLMs, with Fireworks' Ember-1 as an example of more token-efficient reasoning.
- Replacing the old battery on rechargeable bike lights
Hello!
- Human-AI partnerships are for alignment, not capability
It’s common to compare the current AI takeover of software engineering to the rise of AI in chess.
Research
128 pieces, the newest 10 here.
- UOPD: Uncertainty-Aware Intervention for On-Policy Distillation of Multi-Turn Agents
On-policy distillation (OPD) trains a student on its own rollouts using dense supervision from a teacher.
- 3D Point Tracking with State Space Models
Tracking any point of a dynamic scene in metric 3D - in absolute meters, not up to an unknown scale - underpins 3D and 4D reconstruction, robot navigation, and autonomous driving,…
- ADPTNet: Adaptive with Prescriptive Timescales Non-Linear SSM for Sequence Modelling
A central aim of neuromorphic computing is to provide a viable alternative to highly energy-intensive Transformer-based AI.
- Faithful Activation Verbalization: Reducing Hallucinations in LLM Representation Interpretation
Activation verbalization methods such as Activation Oracle and Natural Language Autoencoders decode hidden representations of large language models into human-readable natural lan…
- Re:Cognize -- Open-Set Comic Character Re-Identification
A manga reader meets a character on one page and knows them on sight a hundred pages later, without ever being handed a cast list.
- Posterior Regimes and Latent Deception: Variational Bayesian Inference in Hidden Markov Models for Sequential Fraud Detection in Financial Transactions
We present a three-tier progression of Hidden Markov Models: maximum-likelihood (Baum-Welch), variational Bayesian (VBEM), and a neural variational extension (Neural VBEM), that m…
- Uncovering shortcut learning in audio classifiers by discovering recurring concepts in temporal explanations
Correlations between events in machine learning datasets may result in shortcut learning, where models learn to predict the target event based on the presence of a correlated even…
- PerceptFence: Content-Mediation Architecture and Deterministic Coverage for Screen-Share AI Assistants
Live screen-share AI assistants observe raw screen and speech streams, but users have little runtime control over what an assistant may observe, retain, or disclose.
- Structure-Adaptive Tree Field Integrators
We present a new class of near-linear algorithms for efficiently integrating general tensor fields defined on trees with distance dependent kernels, the Structure-Adaptive Tree Fi…
- Jev in Medicine: A Benchmark Evaluation. Preliminary Results
Jev is a non-generative "System One" model that assigns probabilities to predefined answer options and cannot answer outside them.
Releases
28 pieces, the newest 12 here.
New Repos & Packages
41 pieces, the newest 8 here.
Watch
3 pieces.
Package releases
27 from the most used packages' own repositories, the newest 15 here.
- checkov 3.3.20 · every release →
- phpstan/phpdoc-parser 2.3.6 · every release →
- rich-rst v2.2.0 · every release →
- peewee 4.5.2 · every release →
- srsly release-v2.5.4 · every release →
- postcss-discard-duplicates cssnano@9.1.0 · every release →
- werkzeug 3.1.9 · every release →
- office365-rest-python-client v3.2.0 · every release →
- gql v4.4.0 · every release →
- tox 4.64.4 · every release →
- python-slugify v9.1.2 · every release →
- graphql-core v3.3.0 · every release →
- @tanstack/history release-2026-09-27-1408 · every release →
- sharp v0.35.5 · every release →
- tldts-core v7.4.16 · every release →