Tech news, September 30, 2026
Wednesday: 810 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
163 pieces, the newest 20 here.
- Vercel Agent now installs private packages from npm and custom registries
Vercel Agent can install private dependencies from npm and custom registries using credentials stored as shared environment variables on Vercel.
- [Podcast] The October 2026 root KSK roll
In this episode of PING, Verisign's Duane Wessels discusses the transition to the third DNS root KSK key pair, which is scheduled to begin signing the root zone on 11 October 2026.
- Incident Report: September 30, 2026: Domain Routing Disruption
Railway experienced a platform-wide disruption to domain routing on September 30, 2026.
- Amazon S3 Tables now support all Apache Iceberg V3 data types
Amazon S3 Tables now support all data types in the Apache Iceberg V3 spec, along with column default values, deletion vectors, and row lineage.
- AWS and AMD bring 5th generation AMD EPYC processors to Amazon Aurora and Amazon RDS
AWS today announced the general availability of AMD-based R8a and M8a database instances for Amazon Aurora and Amazon RDS, powered by 5th generation AMD EPYC processors.
- SharePoint Framework (SPFx) roadmap update – September 2026
New Copilot UX components heading to Generally Available in October 2026, SPFx 1.24 Beta 5 is now available, React 18 support is coming in 1.24.
- Programmatic comment and suggestion support now available in the Google Docs, Sheets, and Slides APIs
Developers can now programmatically create, read, and manage comments across Google Docs, Sheets, and Slides using their respective developer APIs.
- Opt-in dist-tag permissions for npm trusted publishing
Trusted publishing configurations for npm can now be granted permission to manage dist-tags (e.g., promoting a version to latest, updating next and beta pointers) using short-live…
- AI Gateway adds Browserbase Search and Fetch tools
Browserbase Search and Fetch are now available through AI Gateway.
- Introducing the Dogwood Local Engine: temporal governance for agent actions
In August, we released Dogwood, an open source governance language for agents and their actions.
- AWS CLI now supports bulk skill updates and version checks for the Agent Toolkit for AWS
Today, AWS expanded the AWS Command Line Interface (CLI) commands for the Agent Toolkit for AWS with two new capabilities that make it easier to keep agent skills up to date.
- Amazon S3 Vectors now supports metadata pre-filtering for higher recall on filtered searches
Amazon S3 Vectors now supports metadata pre filtering, delivering up to 5x higher recall on filtered searches.
- Gemini 4 Argon: our next era of frontier intelligence
- Amazon S3 Vectors introduces metadata pre-filtering for up to 5x higher recall on filtered search
Amazon S3 Vectors now supports pre-filtering, which evaluates metadata filters before running similarity search, returning up to 5x more of the matching vectors when your filter i…
- Gemini 4 Argon: our next era of frontier intelligence
Announcing Gemini 4 Argon, our frontier model for real-world coding, enterprise knowledge work, and cyber defense, rolling out soon.
- Edge Requests are now called CDN Requests
CDN Requests is now the name for the usage metric previously called Edge Requests.
- Customize the style of your captions in Google Vids
Captions in Google Vids are now fully customizable.
- New features for RFC-Editor.org
New features implemented on RFC-Editor.org aim to make the site more useful and engaging for RFC consumers.
- Introducing Team Authorizations
Team Authorizations let you create and manage API tokens and OAuth authorizations at the team and team’s resources level instead of tying them to one person’s account.
- Expanding AI Storage Access with NVIDIA cuObject and the NVIDIA SCADA Server SDK
AI infrastructure engineers, storage developers, and cloud service providers need fast and secure access to high-capacity file and object storage to support AI...
New Models
6 pieces.
- New model: HeyGen: HeyGen Video
HeyGen Video is a general-purpose video generation model from HeyGen.
- New model: Together: Tev1 4B Experimental
Tev1 4B Experimental is an experimental decision model from Together AI, a supervised fine-tune of Qwen3.5-4B trained to choose one option from a structured state, question, and l…
- Open model: Cactus-Compute/whistle
Trending on the Hugging Face Hub.
- New model: VoyageAI by MongoDB: rerank-3-lite
rerank-3-lite is a reranker optimized for both latency and quality and a drop-in upgrade to rerank-2.5-lite, improving on it by 0.94% NDCG@10 on average across domain evaluations…
- New model: VoyageAI by MongoDB: rerank-3
rerank-3 is a reranker optimized for quality and a drop-in upgrade to rerank-2.5, improving on it by 0.80% NDCG@10 on average across domain evaluations and by 3.35% on long-docume…
- Open model: RunningHubAI/rh-qwen-image-2.1-lora-2104918997757157378
Trending on the Hugging Face Hub.
Security Desk
67 pieces, the newest 10 here.
- Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
Local privilege escalation in the Cato VPN Client through the split-tunnel upload flow, from named pipe to SYSTEM delete and Windows Installer rollback.
- Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
Unit 42 is aware of possible 0-day activity against NetScaler devices.
- Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the…
- CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
- CVE-2026-31431
- CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
- Ongoing updates on Copy.fail and variants
- Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
- CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog awallace Sep 30, 2026 Release Date September 30, 2026 Description CISA has added one new vulnerability to its Kn…
- Defender Exclusion Abuse: How Attackers Hide Malware from MDAV
See how attackers like GootKit and WhisperGate abuse Windows Defender exclusions to hide malware from AV scans — and how Huntress detects it.
Technical Guides
61 pieces, the newest 10 here.
- Deploying an HSTU Generative Recommender with NVIDIA Dynamo-Triton
Generative recommender (GR) systems are emerging as a powerful new approach for large-scale personalization.
- Running production experiments with AWS AppConfig experimentation
A redesigned checkout button is meant to lift sales.
- What is contextual retrieval? How AI agents find the right context
Most RAG systems today score how semantically similar a new query is to stored text chunks and return a list of the best matches.
- Running multi-day AZ evacuation drills with ARC Zonal Shift
Prove your multi-AZ architecture can sustain a real impairment.
- How Instagram Direct engineers built AI-native UI architecture with Jetpack Compose and reduced token cost per agent session by 33%
Posted by Pavlo Stavytskyi, Software Engineer, Meta and Rebecca Franks, Developer Relations Engineer, Google This blog post is written in collaboration with the Meta team.
- How MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock
MHK built the SmartProminence AI Orchestrator, a HIPAA-eligible agentic workflow framework on AWS using Amazon Bedrock, Amazon ECS, and event-driven patterns.
- Simplify VPC Flow Logs with EC2 resource tags and next-hop metadata
In this post, we show you how to use Amazon Elastic Compute Cloud (Amazon EC2) resource tags and next-hop metadata, two new capabilities in Version 11 of Amazon Virtual Private Cl…
- Building Scalable Real-Time Live Streaming Systems
Synchronizing Video, Audio, Whiteboard Events, and Distributed Backends at Scale What happens when thousands of students join a live classroom, rewind a lecture by 30 seconds, and…
- How to Configure CoreWeave AI Object Storage for Faster Reads and Writes at Lower Cost
In Part 2 of this AI Object Storage series, Learn to configure LOTA, pre-staging, cross-region write acceleration, and the Archive tier with Python examples.
- A practical guide to cost optimization with Lakebase Postgres
Lakebase is a fully managed Postgres database, built for the operational realities...
AI in the Field
12 pieces, the newest 6 here.
- How the bad science of AI doomerism is good for big business
AI Now's Senior Research Scientist, Boyan Milanov, points out how AI doomerism isn't based on any scientific work and that calls for regulation from within the industry are, in re…
- Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17
With the launch of iOS 27, Apple is rolling out a variety of new AI features to its familiar voice assistant, Siri.
- MIT Transit Lab to develop an AI platform for public transit agencies
With $2.1 million funding from Google.org, the open-source Public Transit Intelligence Hub will unify public transit monitoring, operations, and passenger communication.
- Automate email support with Amazon Connect Customer email AI agents
Email is one of the highest-volume support channels in most contact centers, and one of the most manual.
- Voice-Activated AI Agent with Amazon Connect Customer and Amazon Bedrock
A voice-activated AI agent can make contact center management significantly faster when the AI agents handling your calls need urgent changes.
- This game-playing AI is the new champ at Stratego
Able to defeat top-ranked human players and more efficient than other models, the new system could help decision-makers in military maneuvers or business negotiations.
Columns
11 pieces, the newest 6 here.
- Why Dwarkesh is Wrong about Computer Use + How OpenAI shipped its Jev competitor in 1 Week
Our DevDay coverage - the first pod on the DevDay lineup - dives in with the leaders of OpenAI’s CUA team and API platform.
- Distributed databases with Peter Mattis
Cockroach Labs co-founder Peter Mattis discusses building reliable distributed systems and how AI helps him write more code without sacrificing quality.
- Why do you need freedom?
They will come for your thoughts, and I’m not sure what your defense will be.
- A ‘Morally Binding’ White House Accord on AI Safety
The leaders in AI were invited to the White House.
- Principles for effective slides
Not every presentation needs slides, but when they earn their place, they work as a visual channel that complements the speaker rather than replacing them.
- Windows on AArch64 also provides for hot-patching, but it’s much simpler than on x86
Fixed-length instructions makes it a much easier task.
Research
244 pieces, the newest 10 here.
- Do Defenses Against LLM Extraction Work Across Attacks? A Lifecycle Benchmark of Black-Box Model Extraction
Large language models (LLMs) deployed through text-only APIs face model extraction risks, as adversaries can collect their responses to train surrogates that reproduce their capab…
- TabJoinBench: A Benchmark for Joinable Table Discovery
Join discovery aims to identify tables from large data repositories that can augment a query table with complementary information, enabling downstream tasks such as data explorati…
- SafeDepth: Safety-Aware Token-Level Adaptive Computation
Recent studies suggest that not every token needs to pass through all Transformer layers, motivating token-level adaptive models that selectively skip layers to reduce computation.
- Sapien: A Stateful Policy Engine for Autonomous AI Agents
Contextual security defenses prevent AI agents from taking rogue actions by synthesizing a task-specific policy and enforcing it on the agent's tool calls.
- Identity-Bound Governance Under Execution Uncertainty: An Accountability Proof Block for LLM Agent Persistent Halts, with Cryptographic Implementation and Cross-Model Calibration
A correctly governed LLM agent can reach a state in which neither continuing execution nor automatically halting is admissible: the system has detected a persistent failure of its…
- Made to Measure: Designing Image Watermarks to Specification
Image watermarking supports provenance and attribution by embedding verifiable identity information into images.
- Crossing the Cyber Divide: Sim-to-Sim and Sim-to-Real Transfer for RL Agents
Cyber attack agents are typically trained and evaluated within a single simulator, making it unclear whether learned policies transfer beyond the environments in which they were d…
- MANTA: Machine Learning Augmented Tiering Advisor
Memory tiering has been used to expand memory capacity, particularly in datacenters, by combining fast DRAM with slower tiers, including CXL-attached memory.
- Will the AI accord have any meaningful impact? Panel weighs in
CSET’s Helen Toner shared her expert insight in an interview with NewsNation’s On Balance.
- Triumph or Procrastination? Experts Split on the Trump-Xi Summit
CSET’s Sam Bresnick shared his expert insight in an op-ed published by War on the Rocks.
Releases
104 pieces, the newest 12 here.
New Repos & Packages
53 pieces, the newest 8 here.
Watch
21 pieces, the newest 6 here.
- Context engineering fundamentals: How AI agents find what they need (The Context Window #6)
- Mercor takes Cursor from Cmd+K to company-wide workflows
- Snowflake Cortex AI for Cybersecurity: How Sophos Built Real-Time Threat Monitoring
- What You Cannot Profile, You Cannot Optimize: Learning to Read PyTorch Traces
- DO NOT USE The Developer Show: Transcend Edition
- The Developer Show: Transcend Edition
Package releases
68 from the most used packages' own repositories, the newest 15 here.
- cyclopts v5.1.1 · every release →
- checkov 3.3.21 · every release →
- rpds-py v2026.9.1 · every release →
- azure-core azure-storage-file-datalake_12.26.0 · every release →
- @smithy/util-utf8 @smithy/server-common@0.4.3 · every release →
- google-api-python-client v2.201.0 · every release →
- fastcore 2.2.32 · every release →
- azure-core azure-storage-blob_12.31.0 · every release →
- temporalio 1.34.0 · every release →
- mashumaro v3.23 · every release →
- claude-agent-sdk v0.2.163 · every release →
- torchvision v0.29.1 · every release →
- uvloop v0.23.0 · every release →
- openfeature-provider-posthog-v0.1.92 · every release →
- @aws-sdk/types v3.1144.0 · every release →