Tech news, September 28, 2026
Monday: 669 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
114 pieces, the newest 20 here.
- Announcing v1 of OpenTelemetry Go Compile-Time Instrumentation
If you write Java, Python, Node.js, or.NET, you have been able to add OpenTelemetry to an application without editing its code for years: attach an agent at startup and telemetry…
- Building event-driven applications at scale with Amazon EventBridge
Amazon EventBridge relaunched the Custom event bus so a platform team can share one governed bus across the organization while application teams publish and subscribe from their o…
- Grok 4.7 is now available on Amazon Bedrock
xAI's Grok 4.7 is now available on Amazon Bedrock: a frontier model for coding, long-running agents, and knowledge work.
- [Launched] Generally Available: Vector search and vector indexes in Azure SQL
Vector search and vector indexes are now generally available in Azure SQL Database.
- [In preview] Public Preview: Azure SQL Dev Hub
Azure SQL Dev Hub gives you a central starting point for building applications with Azure SQL, whether you’re developing directly or using AI agents.
- Improving Lambda function latency with scalable network bandwidth
AWS Lambda now supports scalable network bandwidth for functions with 2,048 MB of memory or more running outside a VPC.
- Perimeters in Anaconda Platform: One Policy Boundary Around Your Code, Data, Models, and Compute
Perimeters draw a policy boundary around every part of an AI system, so a project moves from experimentation to production without touching the code.
- One year in: How Microsoft Research Asia – Singapore is advancing research, partnership and talent for real-world impact
Since launching a year ago, the Microsoft Research Asia — Singapore lab has established a strong foundation, deepened collaboration across government, academia, and industry, and…
- Evaluate production traces with Jev-as-a-Judge directly in Arize AX
Arize AX now integrates directly with TypeSafe AI, bringing native Jev-as-a-Judge evaluations into the Arize evaluation workflow.
- Adapting for a world of software factories
Software factories change what engineers do.
- Amazon Rekognition Face Liveness now returns Feedback Codes
Amazon Rekognition Face Liveness now returns Feedback Codes that help customers understand why a liveness check received a low score and how users could retry successfully.
- Lakebase Search: State-of-the-art full text and vector search for Postgres
Traditional OLTP systems weren't built for the search demands of AI agents.
- EDB Postgres AI on Red Hat OpenShift Virtualization: Enterprise HA Without Rewriting Your Stack
EDB and Red Hat have closed a critical gap with a validated, supported way to run VM-based Postgres on OpenShift Virtualization without re-architecting it first.
- Shoutout to More Layouts – These Weeks in Firefox: Issue 210
Highlights Rév O’Conner added a settings popup to control the layout of the Inspector.
- Self-hosted runner version enforcement date has moved
The enforcement date for GitHub Actions minimum version requirements for self-hosted runners on GitHub Enterprise Cloud has changed.
- Announcing Claude Sonnet 5.5 on Snowflake Cortex AI
Claude Sonnet 5.5 is coming to Cortex Inference in public preview, with Cortex AI Functions, Snowflake CoWork, Snowflake CoCo, and Cortex Agents coming soon.
- How we will do better for Australia
OpenAI apologises for incidents involving Australian government websites and outlines stronger safeguards and support to strengthen Australia’s cyber defences.
- Watch the winning trailer from the Future Vision XPRIZE, The Gifted.
Watch the winning trailer from the Future Vision XPRIZE, The Gifted.
- Introducing Claude Sonnet 5.5 on AWS
Claude Sonnet 5.5 is now available on Amazon Bedrock and Claude Platform on AWS.
- Engineering Multi-Agent AI Teams That Build and Test Themselves
By Sohini Arya and Manish Kumar Jha.
New Models
3 pieces.
- New model: Anthropic: Claude Sonnet 5.5
Claude Sonnet 5.5 is Anthropic's Sonnet-class model for well-scoped everyday work, succeeding Claude Sonnet 5 as a direct upgrade.
- New model: Upstage: Solar Decide
Solar Decide is Upstage's structured decision model, served as a System One endpoint on Solar Mini 4.
- Open model: IQuestLab/IQuest-Q1
Trending on the Hugging Face Hub.
Security Desk
52 pieces, the newest 10 here.
- Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)
Apple today released patches for all of its operating systems.
- From AI Agents to RCE - Building a Vulnerability Research Workflow
The edge isn't the AI model, but how you assemble the system around it.
- USN-8487-2: curl regression
USN-8487-1 fixed vulnerabilities in curl.
- USN-8840-1: libevent vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that libevent incorrectly handled certain DNS responses.
- Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
Huntress researchers reveal how attackers are exploiting ChatGPT Custom GPTs to spread ClickFix lures and DLL-sideloaded malware.
- The New Rules of Patching: When a Fix Becomes a Blueprint for Attackers
TL;DR: Frontier AI has collapsed the vulnerability exploit window from weeks to mere hours.
- VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Overview Authlib (versions up to and including 1.7.2) contain a signature‑verification bypass in the JSON Web Signature (JWS) general JSON serialization handling.
- How we found 24 Android vulnerabilities using our open source AI security agent
A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app.
- CVE-2026-88815: DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
Posted by Robert Rothenberg on Sep 28 ======================================================================== CVE-2026-88815 CPAN Security Group =================================…
- AWS European Sovereign Cloud: Demonstrating an independent operation
On Saturday, October 24, 2026, we will conduct an exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any infrastructure outside of the E…
Technical Guides
44 pieces, the newest 10 here.
- RL environments for LLM agents: Design, rewards, and validation
TLDR: An agent, by definition, can take actions and is more than just a language model.
- RL environments for LLM agents: Design, rewards, and validation
TLDR: An agent, by definition, can take actions and is more than just a language model.
- Manufacturing data and AI: Connecting the product value chain
A manufacturing defect rarely belongs to one system.
- How Property Finder automated incident management with AWS DevOps Agent
Property Finder built end-to-end autonomous incident management with AWS DevOps Agent.
- Towards safety cases for frontier AI training
Our early guidelines for safety cases in frontier AI training cover technical safeguards, operational practices, and investigating misalignment incidents
- Why model versioning is not enough for production AI
An MLOps workflow for evaluating deploying and rolling back AI applications
- Resolving query plan regressions after a MySQL engine upgrade
After a major or minor version upgrade on Amazon Aurora MySQL or Amazon RDS for MySQL, some queries regress because the optimizer's cost models, defaults, and execution strategies…
- Scaling Mission AI: 3 Lessons for Public Sector
Moving from AI pilot to production in government requires more than technology.
- Combating quantum noise with AWS: University of Washington Capstone Project
Quantum computers promise to solve problems beyond the reach of classical machines, but they share a stubborn adversary: noise.
- Build real-time voice applications with vLLM-Omni on SageMaker AI – Part 1
Deploy a text-to-speech model on Amazon SageMaker AI with the AWS vLLM-Omni Deep Learning Container and stream generated speech over a persistent bidirectional connection.
AI in the Field
14 pieces, the newest 6 here.
- Reduce SMT Defects with Agentic AI: Automating Polarity Validation on AWS
Surface Mount Technology (SMT) polarity programming defines how a polarity-sensitive component feeds from tape reel or tray to the pick-and-place machine, designed to help maintai…
- Beyond Traditional Market Price Tracking: A Generative AI Solution for SAP Customers
Retail companies managing finished goods face mounting pressure to maintain competitive pricing while protecting profit margins in today’s dynamic marketplace.
- Cook, An Update on AI and the Economy
Speech At the Oakland Tech Week Opening Keynote, cohosted by the Kapor Center, Oakland, California
- White House Releases Taxpayer-Funded Midterm Ads
In the wake of NVIDIA's announcement of a new agent safety platform, AI Now's Aya Ibrahim joins "Balance of Power" to warn against "one-size-fits-all" security steps.
- Guidance: AI Research Resource
The AI Research Resource (AIRR) is a suite of advanced supercomputers that provides AI-specialised compute capacity to researchers, academia, and industry.
- Pro-Worker AI Adoption Prize: how to nominate
How to nominate a UK organisation for the Pro-Worker AI Adoption Prize, recognising organisations using artificial intelligence (AI) that benefits workers.
Columns
7 pieces, the newest 6 here.
- How GLM5.3 Sparse Attention Affects HBM Memory Usage
GLM-5.3, KV Cache Offloading, HiSparse, DeepSeek Sparse Attention, IndexShare, Single-rollout Asynchronous Optimization, Cybersecurity
- What’s the Future for Pure Math Research in the Age of AI?
Headlines and History The headlines keep coming: such and such an AI system has solved such and such a math problem.
- Post Capitalism
You know we don’t have to do this anymore, right?
- C++ reminder: Function-local static variables are initialized only once, even if it looks like they get initialized multiple times
Only on first execution.
- Import AI 474: Platonic mindspace; TPUs in space; Zhipu starts an outer RSI loop
Welcome to Import AI, a newsletter about AI research.
- New Attack Against RSA
ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring.
Research
240 pieces, the newest 10 here.
- FurE: Efficient Instance-Specific 3D Fur Reconstruction without Animal-Fur Datasets
Realistic and editable animal fur reconstruction from multi-view images is challenging due to fine-scale detail, self-occlusion and obfuscation, and, unlike human hair, the lack o…
- Telescopic Language Models
One deployed language model must often serve many compute budgets, yet serving each budget still means a separate training or compression run per point.
- PDMD: Projected Distribution Matching Distillation for Video Diffusion Models
Modern video diffusion models require tens of denoising evaluations over long spatiotemporal token sequences.
- Learning Native Reflection in Unified Models with Interleaved Reinforcement Learning
Unified multimodal models can both look at and render images, so in principle they can repair their own generations: diagnose what an image gets wrong, revise it, observe the resu…
- Retrieving Biblical Intertextual References in Karen Blixen's Seven Gothic Tales
Identifying intertextual references is central to literary scholarship, but computationally difficult when source material is transformed through paraphrase, allusion, historical…
- Unifying Distributional Training for One-Step Visual Generation
\emph{Distributional training} provides collective supervision for one-step visual generation by matching real and generated features in frozen representation spaces.
- Scaling Long-Form Story Generation via Narrative State Tracking
LLMs have demonstrated strong capabilities in creative writing.
- TokenCast: Forecasting Token Consumption During LLM Agent Execution
When a large language model (LLM) agent executes the same task, token consumption can vary by over an order of magnitude across runs.
- Statistical Learning of Contractive Dynamical Representations for Composite Adaptive Control
We present a representation-learning framework for composite adaptive tracking control under dynamically coupled disturbances.
- Reliability-Gated Fusion of Consumer Head and Foot IMUs for Lower-Body 3D Pose
Sparse inertial pose estimation promises camera-free motion capture from consumer devices, but consumer sensors are unreliable: firmware-fused orientations are biased, mounting va…
Releases
73 pieces, the newest 12 here.
New Repos & Packages
47 pieces, the newest 8 here.
Watch
22 pieces, the newest 6 here.
Package releases
53 from the most used packages' own repositories, the newest 15 here.
- geventhttpclient 2.5.0 · every release →
- cfn-lint v1.57.1 · every release →
- filelock 4.0.6 · every release →
- rou3 v0.10.0 · every release →
- google-auth-v2.59.0 · every release →
- zbateson/mail-mime-parser 4.0.6 · every release →
- php-amqplib/php-amqplib v3.7.5 · every release →
- isort 9.0.2 · every release →
- claude-agent-sdk v0.2.161 · every release →
- @aws-sdk/types v3.1142.0 · every release →
- phpdocumentor/type-resolver 2.1.0 · every release →
- pyjwt 2.15.1 · every release →
- livewire/livewire v4.4.7 · every release →
- mistralai v3.0.0 · every release →
- aws/aws-sdk-php 3.398.2 · every release →