The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

Tech news, September 30, 2026

Wednesday: 810 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

News

163 pieces, the newest 20 here.

  1. Vercel23:22 UTCVercel Agent now installs private packages from npm and custom registries

    Vercel Agent can install private dependencies from npm and custom registries using credentials stored as shared environment variables on Vercel.

  2. APNIC Blog22:44 UTC[Podcast] The October 2026 root KSK roll

    In this episode of PING, Verisign's Duane Wessels discusses the transition to the third DNS root KSK key pair, which is scheduled to begin signing the root zone on 11 October 2026.

  3. Railway22:42 UTCIncident Report: September 30, 2026: Domain Routing Disruption

    Railway experienced a platform-wide disruption to domain routing on September 30, 2026.

  4. AWS News22:10 UTCAmazon S3 Tables now support all Apache Iceberg V3 data types

    Amazon S3 Tables now support all data types in the Apache Iceberg V3 spec, along with column default values, deletion vectors, and row lineage.

  5. AWS Databases22:06 UTCAWS and AMD bring 5th generation AMD EPYC processors to Amazon Aurora and Amazon RDS

    AWS today announced the general availability of AMD-based R8a and M8a database instances for Amazon Aurora and Amazon RDS, powered by 5th generation AMD EPYC processors.

  6. Microsoft 365 Developer21:35 UTCSharePoint Framework (SPFx) roadmap update – September 2026

    New Copilot UX components heading to Generally Available in October 2026, SPFx 1.24 Beta 5 is now available, React 18 support is coming in 1.24.

  7. Google Workspace Updates21:26 UTCProgrammatic comment and suggestion support now available in the Google Docs, Sheets, and Slides APIs

    Developers can now programmatically create, read, and manage comments across Google Docs, Sheets, and Slides using their respective developer APIs.

  8. GitHub Changelog21:03 UTCOpt-in dist-tag permissions for npm trusted publishing

    Trusted publishing configurations for npm can now be granted permission to manage dist-tags (e.g., promoting a version to latest, updating next and beta pointers) using short-live…

  9. Vercel21:00 UTCAI Gateway adds Browserbase Search and Fetch tools

    Browserbase Search and Fetch are now available through AI Gateway.

  10. AWS Open Source20:40 UTCIntroducing the Dogwood Local Engine: temporal governance for agent actions

    In August, we released Dogwood, an open source governance language for agents and their actions.

  11. What's New with AWS20:16 UTCAWS CLI now supports bulk skill updates and version checks for the Agent Toolkit for AWS

    Today, AWS expanded the AWS Command Line Interface (CLI) commands for the Agent Toolkit for AWS with two new capabilities that make it easier to keep agent skills up to date.

  12. AWS News20:03 UTCAmazon S3 Vectors now supports metadata pre-filtering for higher recall on filtered searches

    Amazon S3 Vectors now supports metadata pre filtering, delivering up to 5x higher recall on filtered searches.

  13. Google DeepMind20:01 UTCGemini 4 Argon: our next era of frontier intelligence
  14. What's New with AWS20:00 UTCAmazon S3 Vectors introduces metadata pre-filtering for up to 5x higher recall on filtered search

    Amazon S3 Vectors now supports pre-filtering, which evaluates metadata filters before running similarity search, returning up to 5x more of the matching vectors when your filter i…

  15. Google Gemini20:00 UTCGemini 4 Argon: our next era of frontier intelligence

    Announcing Gemini 4 Argon, our frontier model for real-world coding, enterprise knowledge work, and cyber defense, rolling out soon.

  16. Vercel20:00 UTCEdge Requests are now called CDN Requests

    CDN Requests is now the name for the usage metric previously called Edge Requests.

  17. Google Workspace Updates19:53 UTCCustomize the style of your captions in Google Vids

    Captions in Google Vids are now fully customizable.

  18. IETF19:35 UTCNew features for RFC-Editor.org

    New features implemented on RFC-Editor.org aim to make the site more useful and engaging for RFC consumers.

  19. Heroku19:21 UTCIntroducing Team Authorizations

    Team Authorizations let you create and manage API tokens and OAuth authorizations at the team and team’s resources level instead of tying them to one person’s account.

  20. NVIDIA Developer19:13 UTCExpanding AI Storage Access with NVIDIA cuObject and the NVIDIA SCADA Server SDK

    AI infrastructure engineers, storage developers, and cloud service providers need fast and secure access to high-capacity file and object storage to support AI...

New Models

6 pieces.

  1. OpenRouter20:04 UTCNew model: HeyGen: HeyGen Video

    HeyGen Video is a general-purpose video generation model from HeyGen.

  2. OpenRouter19:10 UTCNew model: Together: Tev1 4B Experimental

    Tev1 4B Experimental is an experimental decision model from Together AI, a supervised fine-tune of Qwen3.5-4B trained to choose one option from a structured state, question, and l…

  3. Hugging Face Hub17:13 UTCOpen model: Cactus-Compute/whistle

    Trending on the Hugging Face Hub.

  4. OpenRouter16:26 UTCNew model: VoyageAI by MongoDB: rerank-3-lite

    rerank-3-lite is a reranker optimized for both latency and quality and a drop-in upgrade to rerank-2.5-lite, improving on it by 0.94% NDCG@10 on average across domain evaluations…

  5. OpenRouter16:25 UTCNew model: VoyageAI by MongoDB: rerank-3

    rerank-3 is a reranker optimized for quality and a drop-in upgrade to rerank-2.5, improving on it by 0.80% NDCG@10 on average across domain evaluations and by 3.35% on long-docume…

  6. Hugging Face Hub09:35 UTCOpen model: RunningHubAI/rh-qwen-image-2.1-lora-2104918997757157378

    Trending on the Hugging Face Hub.

Security Desk

67 pieces, the newest 10 here.

  1. Quarkslab22:00 UTCCato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)

    Local privilege escalation in the Cato VPN Client through the split-tunnel upload flow, from named pipe to SYSTEM delete and Windows Installer rollback.

  2. Unit 4220:00 UTCThreat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

    Unit 42 is aware of possible 0-day activity against NetScaler devices.

  3. Microsoft Security19:31 UTC​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

    This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the…

  4. AWS Security Bulletins19:21 UTCCVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
  5. AWS Security Bulletins19:21 UTCCVE-2026-31431
  6. AWS Security Bulletins19:21 UTCCVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
  7. AWS Security Bulletins19:21 UTCOngoing updates on Copy.fail and variants
  8. AWS Security Bulletins19:21 UTCFragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
  9. CISA18:09 UTCCISA Adds One Known Exploited Vulnerability to Catalog

    CISA Adds One Known Exploited Vulnerability to Catalog   awallace Sep 30, 2026 Release Date September 30, 2026 Description CISA has added one new vulnerability to its Kn…

  10. Huntress17:30 UTCDefender Exclusion Abuse: How Attackers Hide Malware from MDAV

    See how attackers like GootKit and WhisperGate abuse Windows Defender exclusions to hide malware from AV scans — and how Huntress detects it.

Technical Guides

61 pieces, the newest 10 here.

  1. NVIDIA Developer20:54 UTCDeploying an HSTU Generative Recommender with NVIDIA Dynamo-Triton

    Generative recommender (GR) systems are emerging as a powerful new approach for large-scale personalization.

  2. AWS DevOps19:45 UTCRunning production experiments with AWS AppConfig experimentation

    A redesigned checkout button is meant to lift sales.

  3. Neo4j19:14 UTCWhat is contextual retrieval? How AI agents find the right context

    Most RAG systems today score how semantically similar a new query is to stored text chunks and return a list of the best matches.

  4. AWS Architecture Blog19:01 UTCRunning multi-day AZ evacuation drills with ARC Zonal Shift

    Prove your multi-AZ architecture can sustain a real impairment.

  5. Android Developers19:00 UTCHow Instagram Direct engineers built AI-native UI architecture with Jetpack Compose and reduced token cost per agent session by 33%

    Posted by Pavlo Stavytskyi, Software Engineer, Meta and Rebecca Franks, Developer Relations Engineer, Google This blog post is written in collaboration with the Meta team.

  6. AWS Architecture Blog18:30 UTCHow MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock

    MHK built the SmartProminence AI Orchestrator, a HIPAA-eligible agentic workflow framework on AWS using Amazon Bedrock, Amazon ECS, and event-driven patterns.

  7. AWS Networking & Content Delivery18:11 UTCSimplify VPC Flow Logs with EC2 resource tags and next-hop metadata

    In this post, we show you how to use Amazon Elastic Compute Cloud (Amazon EC2) resource tags and next-hop metadata, two new capabilities in Version 11 of Amazon Virtual Private Cl…

  8. Walmart Global Tech18:09 UTCBuilding Scalable Real-Time Live Streaming Systems

    Synchronizing Video, Audio, Whiteboard Events, and Distributed Backends at Scale What happens when thousands of students join a live classroom, rewind a lecture by 30 seconds, and…

  9. CoreWeave17:17 UTCHow to Configure CoreWeave AI Object Storage for Faster Reads and Writes at Lower Cost

    In Part 2 of this AI Object Storage series, Learn to configure LOTA, pre-staging, cross-region write acceleration, and the Archive tier with Python examples.

  10. Databricks16:53 UTCA practical guide to cost optimization with Lakebase Postgres

    Lakebase is a fully managed Postgres database, built for the operational realities...

AI in the Field

12 pieces, the newest 6 here.

  1. AI Now Institute18:36 UTCHow the bad science of AI doomerism is good for big business

    AI Now's Senior Research Scientist, Boyan Milanov, points out how AI doomerism isn't based on any scientific work and that calls for regulation from within the industry are, in re…

  2. EFF16:45 UTCHey Siri, How Do I Limit AI Data Access? | EFFector 38.17

    With the launch of iOS 27, Apple is rolling out a variety of new AI features to its familiar voice assistant, Siri.

  3. MIT News15:15 UTCMIT Transit Lab to develop an AI platform for public transit agencies

    With $2.1 million funding from Google.org, the open-source Public Transit Intelligence Hub will unify public transit monitoring, operations, and passenger communication.

  4. AWS Contact Center15:05 UTCAutomate email support with Amazon Connect Customer email AI agents

    Email is one of the highest-volume support channels in most contact centers, and one of the most manual.

  5. AWS Contact Center15:02 UTCVoice-Activated AI Agent with Amazon Connect Customer and Amazon Bedrock

    A voice-activated AI agent can make contact center management significantly faster when the AI agents handling your calls need urgent changes.

  6. MIT News15:00 UTCThis game-playing AI is the new champ at Stratego

    Able to defeat top-ranked human players and more efficient than other models, the new system could help decision-makers in military maneuvers or business negotiations.

Columns

11 pieces, the newest 6 here.

  1. swyx (Latent Space)22:23 UTCWhy Dwarkesh is Wrong about Computer Use + How OpenAI shipped its Jev competitor in 1 Week

    Our DevDay coverage - the first pod on the DevDay lineup - dives in with the leaders of OpenAI’s CUA team and API platform.

  2. Gergely Orosz (The Pragmatic Engineer)16:30 UTCDistributed databases with Peter Mattis

    Cockroach Labs co-founder Peter Mattis discusses building reliable distributed systems and how AI helps him write more code without sacrificing quality.

  3. George Hotz16:00 UTCWhy do you need freedom?

    They will come for your thoughts, and I’m not sure what your defense will be.

  4. Zvi Mowshowitz15:51 UTCA ‘Morally Binding’ White House Accord on AI Safety

    The leaders in AI were invited to the White House.

  5. Martin Fowler14:14 UTCPrinciples for effective slides

    Not every presentation needs slides, but when they earn their place, they work as a visual channel that complements the speaker rather than replacing them.

  6. Raymond Chen14:00 UTCWindows on AArch64 also provides for hot-patching, but it’s much simpler than on x86

    Fixed-length instructions makes it a much easier task.

Research

244 pieces, the newest 10 here.

  1. arXiv (systems & security) cs.CR23:51 UTCDo Defenses Against LLM Extraction Work Across Attacks? A Lifecycle Benchmark of Black-Box Model Extraction

    Large language models (LLMs) deployed through text-only APIs face model extraction risks, as adversaries can collect their responses to train surrogates that reproduce their capab…

  2. arXiv (systems & security) cs.DB23:22 UTCTabJoinBench: A Benchmark for Joinable Table Discovery

    Join discovery aims to identify tables from large data repositories that can augment a query table with complementary information, enabling downstream tasks such as data explorati…

  3. arXiv (systems & security) cs.CR23:18 UTCSafeDepth: Safety-Aware Token-Level Adaptive Computation

    Recent studies suggest that not every token needs to pass through all Transformer layers, motivating token-level adaptive models that selectively skip layers to reduce computation.

  4. arXiv (systems & security) cs.AI22:40 UTCSapien: A Stateful Policy Engine for Autonomous AI Agents

    Contextual security defenses prevent AI agents from taking rogue actions by synthesizing a task-specific policy and enforcing it on the agent's tool calls.

  5. arXiv (systems & security) cs.CR22:22 UTCIdentity-Bound Governance Under Execution Uncertainty: An Accountability Proof Block for LLM Agent Persistent Halts, with Cryptographic Implementation and Cross-Model Calibration

    A correctly governed LLM agent can reach a state in which neither continuing execution nor automatically halting is admissible: the system has detected a persistent failure of its…

  6. arXiv (systems & security) cs.CR22:17 UTCMade to Measure: Designing Image Watermarks to Specification

    Image watermarking supports provenance and attribution by embedding verifiable identity information into images.

  7. arXiv (systems & security) cs.CR21:54 UTCCrossing the Cyber Divide: Sim-to-Sim and Sim-to-Real Transfer for RL Agents

    Cyber attack agents are typically trained and evaluated within a single simulator, making it unclear whether learned policies transfer beyond the environments in which they were d…

  8. arXiv (systems & security) cs.DC21:03 UTCMANTA: Machine Learning Augmented Tiering Advisor

    Memory tiering has been used to expand memory capacity, particularly in datacenters, by combining fast DRAM with slower tiers, including CXL-attached memory.

  9. Georgetown CSET21:00 UTCWill the AI accord have any meaningful impact? Panel weighs in

    CSET’s Helen Toner shared her expert insight in an interview with NewsNation’s On Balance.

  10. Georgetown CSET21:00 UTCTriumph or Procrastination? Experts Split on the Trump-Xi Summit

    CSET’s Sam Bresnick shared his expert insight in an op-ed published by War on the Rocks.

Releases

104 pieces, the newest 12 here.

  1. k3s23:42 UTCv1.34.12+k3s1
  2. k3s23:42 UTCv1.35.9+k3s1
  3. Cline23:34 UTCSDK v0.0.89
  4. Cline23:34 UTCsdk/core/v0.0.89
  5. npm releases23:03 UTC@anthropic-ai/sdk 0.131.0
  6. AI SDK23:03 UTC@ai-sdk/zai@3.0.24
  7. AI SDK23:03 UTC@ai-sdk/workflow-harness@1.0.137
  8. opencode23:02 UTCv2.0.21
  9. npm releases23:00 UTCai 7.0.126
  10. OpenAI Codex22:59 UTC0.159.3
  11. Anthropic TypeScript SDK22:58 UTCgoogle-cloud-sdk: v0.0.17
  12. Anthropic TypeScript SDK22:58 UTCfoundry-sdk: v0.5.2

New Repos & Packages

53 pieces, the newest 8 here.

  1. npm #mcp22:58 UTC@ai-sdk/mcp 2.0.65
  2. npm #ai-agent22:29 UTCinstar 1.3.1307
  3. npm #ai-agent22:08 UTCagent-afk 5.278.0
  4. npm #ai-agent21:41 UTC@plannotator/pi-extension 0.27.23
  5. npm #llm21:39 UTC@posthog/ai 8.13.4
  6. npm #mcp21:38 UTC@posthog/mcp 0.21.2
  7. npm #mcp21:30 UTC@better-auth/cimd 1.7.7
  8. npm #mcp21:29 UTC@better-auth/mcp 1.7.7

Watch

21 pieces, the newest 6 here.

  1. Grafana · YouTube23:41 UTCContext engineering fundamentals: How AI agents find what they need (The Context Window #6)
  2. Cursor · YouTube22:51 UTCMercor takes Cursor from Cmd+K to company-wide workflows
  3. Snowflake · YouTube21:00 UTCSnowflake Cortex AI for Cybersecurity: How Sophos Built Real-Time Threat Monitoring
  4. PyTorch · YouTube21:00 UTCWhat You Cannot Profile, You Cannot Optimize: Learning to Read PyTorch Traces
  5. GitLab · YouTube20:50 UTCDO NOT USE The Developer Show: Transcend Edition
  6. GitLab · YouTube20:47 UTCThe Developer Show: Transcend Edition

Package releases

68 from the most used packages' own repositories, the newest 15 here.

  1. 23:57 UTCcyclopts v5.1.1 · every release →
  2. 23:04 UTCcheckov 3.3.21 · every release →
  3. 22:42 UTCrpds-py v2026.9.1 · every release →
  4. 22:35 UTCazure-core azure-storage-file-datalake_12.26.0 · every release →
  5. 21:45 UTC@smithy/util-utf8 @smithy/server-common@0.4.3 · every release →
  6. 21:29 UTCgoogle-api-python-client v2.201.0 · every release →
  7. 20:35 UTCfastcore 2.2.32 · every release →
  8. 20:29 UTCazure-core azure-storage-blob_12.31.0 · every release →
  9. 20:25 UTCtemporalio 1.34.0 · every release →
  10. 20:20 UTCmashumaro v3.23 · every release →
  11. 19:47 UTCclaude-agent-sdk v0.2.163 · every release →
  12. 19:42 UTCtorchvision v0.29.1 · every release →
  13. 19:27 UTCuvloop v0.23.0 · every release →
  14. 19:05 UTCopenfeature-provider-posthog-v0.1.92 · every release →
  15. 18:58 UTC@aws-sdk/types v3.1144.0 · every release →