The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

Tech news, October 7, 2026

Wednesday: 789 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 00:53 UTC, in the sources' own words.

  1. LeadGemini Nano Banana 2.1 generally available (GA)

    Gemini Nano Banana 2.1 generally available (GA): Released Gemini Nano Banana 2.1 (gemini-nano-banana-2.1), the latest high-efficiency image generation and conversational editing m…

    Gemini API Changelog
  2. NewsBeyond the model: Securing the path from intelligence to action in the agentic AI era

    As AI moves from generating answers to taking actions, security must extend beyond the model to protect the complete system that turns intelligent decisions into action.

    Arm Newsroom
  3. NewsAI Gateway adds confidence-based decision fallbacks

    AI Gateway can now escalate a decision request to a fallback model when the primary model's answer trips a confidence condition you set.

    Vercel
  4. OutageGermany SMS - Delivery degradation towards 1&1 Germany

    A fix has been implemented and we are monitoring the results.

    Vonage API
  5. SecurityDependency installation security measure already defeated on npm

    New btree malware bypasses the install script, negating the popular repo's measure barely two months after adoption.

    ReversingLabs
  6. AI in the Field · HealthAgentic AI on Connect Health: An end-to-end telehealth visit

    Healthcare organizations are being asked to widen access, protect increasingly thin margins, and keep clinicians from burning out.

    AWS for Industries

News

121 pieces, the newest 20 here.

  1. Node.js23:56 UTCNode.js 26.11.1 (Current)
  2. CNCF22:38 UTCCiliumCon is back at KubeCon + CloudNativeCon North America 2026

    Mark your calendars.

  3. APNIC Blog22:22 UTC‘Magnifica Humanitas’ and the human future of Artificial Intelligence

    The ‘Magnifica Humanitas’ explores how technological power affects dignity, justice, and social responsibility, and calls for both regulation and deeper public engagement in shapi…

  4. Lambda22:14 UTCReLearn at CVPR 2026: can AI still learn from humans?

    AI has advanced fast by scaling models, data, and compute.

  5. CNCF21:59 UTCBackstageCon comes to KubeCon + CloudNativeCon North America 2026 in Salt Lake City

    BackstageCon takes place all day on Monday, November 9, 2026, the day before KubeCon + CloudNativeCon North America opens in Salt Lake City.

  6. Khronos Group21:25 UTCNOCL Making Progress as Mesa Gallium/OpenCL atop NVIDIA CUDA

    MESA In development the past year has been the Mesa Gallium3D API implemented atop NVIDIA's CUDA driver API.

  7. Google Research20:19 UTCDoes better work always mean better workers?
  8. GitHub Changelog20:12 UTCClaude Haiku 5.5 in GitHub Copilot

    Claude Haiku 5.5, Anthropic’s newest lightweight model, is now generally available in GitHub Copilot.

  9. Akamai Cloud (Linode)19:00 UTCWhy API Security Belongs in ECB Cyber Action Plans

    Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.

  10. AWS Machine Learning18:52 UTCIntroducing Claude Haiku 5.5 on AWS

    Claude Haiku 5.5 is now available on Amazon Bedrock and Claude Platform on AWS.

  11. NVIDIA18:45 UTCNVIDIA, Microsoft Kick Off a New Beginning for Windows PCs With RTX Spark and AI Agents

    At a Microsoft event in San Francisco on Wednesday, NVIDIA founder and CEO Jensen Huang and Microsoft CEO Satya Nadella outlined how NVIDIA and Microsoft are co-engineering hardwa…

  12. Mozilla18:37 UTCJambu Palaniappan and David Parry-Jones join the Mozilla Corporation Board of Directors

    Today, we are very pleased to announce two new additions to the Mozilla Corporation Board of Directors: Jambu Palaniappan and David Parry-Jones.

  13. Snowflake18:29 UTCSnowflake Completes NZISM Restricted Assessment on AWS in New Zealand

    Snowflake has completed an independent NZISM Restricted assessment on AWS in the Auckland region, helping New Zealand government agencies accelerate certification, unify data and…

  14. What's New with AWS18:26 UTCAmazon EC2 C8gb instances now generally available in additional regions

    Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8gb instances, powered by the latest-generation AWS Graviton4 processors, are available in the US East (Ohio), US West (…

  15. Heroku18:17 UTCOctober 2026 Update: Heroku Innovations and New Features

    Heroku’s continuous platform innovation keeps operational overhead out of your path while delivering our industry-best developer experience.

  16. LangChain18:10 UTCWhat's New in Managed Deep Agents: schedules, per-run configuration, and Slack reactions

    LangChain just released new capabilities in Managed Deep Agents.

  17. Microsoft AI18:05 UTCMAI-Code-1.1-Flash: Better, faster, at a quarter of the cost
  18. Windows Developer18:00 UTCMicrosoft Execution Containers: Policy-driven containment for AI agents

    Agents are unlocking enormous productivity gains for customers, but their ability to work across files, networks, and applications can introduce new security risks.

  19. Windows Experience18:00 UTCBuilding Windows for hybrid intelligence

    Agents are cre The post Building Windows for hybrid intelligence appeared first on Windows Experience Blog.

  20. Warp17:57 UTCWarp Factories now works across Microsoft Teams and Azure DevOps

    Warp Factories now integrates natively with Microsoft Teams and Azure DevOps.

New Models

15 pieces, the newest 10 here.

  1. Hugging Face Hub19:52 UTCOpen model: reflection/Beam-1.0-501B-A23B

    Trending on the Hugging Face Hub.

  2. OpenRouter18:31 UTCNew model: Anthropic: Claude Haiku 5.5

    Claude Haiku 5.5 is Anthropic's small, fast model for high-volume, cost-sensitive work such as summarization, subagents, and browser use.

  3. OpenRouter15:41 UTCNew model: Perplexity: Decider V1.1 27B

    Decider V1.1 27B is a new checkpoint of Perplexity's decision model, succeeding [Decider V1 27B](/perplexity/pplx-decider-v1-27b) with the same API contract.

  4. OpenRouter15:18 UTCNew model: ElevenLabs: Eleven v4

    Eleven v4 is a text-to-speech model from ElevenLabs.

  5. OpenRouter15:18 UTCNew model: ElevenLabs: Eleven v4 Turbo

    Eleven v4 Turbo is a low-latency text-to-speech model from ElevenLabs.

  6. OpenRouter15:17 UTCNew model: ElevenLabs: Eleven v3

    Eleven v3 is a text-to-speech model from ElevenLabs.

  7. OpenRouter15:17 UTCNew model: ElevenLabs: Eleven v3 Conversational

    Eleven v3 Conversational is a text-to-speech model from ElevenLabs, a variant of Eleven v3 optimized for natural dialogue in conversational agents.

  8. OpenRouter15:17 UTCNew model: ElevenLabs: Eleven Flash v2.5

    Eleven Flash v2.5 is an ultra-low-latency text-to-speech model from ElevenLabs.

  9. OpenRouter15:17 UTCNew model: ElevenLabs: Eleven Turbo v2

    Eleven Turbo v2 is an English-only, low-latency text-to-speech model from ElevenLabs.

  10. OpenRouter15:17 UTCNew model: ElevenLabs: Eleven Multilingual v2

    Eleven Multilingual v2 is a text-to-speech model from ElevenLabs.

Security Desk

89 pieces, the newest 10 here.

  1. Chrome Releases22:30 UTCChrome for Android Update

     Hello Everyone!

  2. Unit 4222:00 UTCEvolution of Web3 in Cloud Supply Chain Attacks

    Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments The post Evolution of Web3 in Cloud Sup…

  3. HashiCorp security bulletins22:00 UTCHCSEC-2026-43 - Vault Inconsistent ACL Policy Evaluation May Allow Bypass of Deny Restrictions

    Bulletin ID: HCSEC-2026-43 Affected Products / Versions: Vault Community Edition up to 2.1.1; fixed in Vault Community Edition 2.1.2.

  4. AWS Security21:49 UTCConfiguring your AI vulnerability harness, Part 2: The steering file

    This post shows you how to configure an AI model to perform structured, evidence-based vulnerability triage with the consistency of a seasoned security analyst.

  5. AWS Security21:49 UTCBuilding your AI vulnerability harness, Part 1

    Vulnerability scanners produce findings faster than manual triage can process them.

  6. HashiCorp security bulletins21:46 UTCHCSEC-2026-42 - Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

    Bulletin ID: HCSEC-2026-42 Affected Products / Versions: Vault Enterprise up to 2.1.1; fixed in Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23.

  7. HashiCorp security bulletins21:34 UTCHCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

    Bulletin ID: HCSEC-2026-41 Affected Products / Versions: Vault Community Edition and Vault Enterprise up to 2.1.1; fixed in Vault Community Edition 2.1.2, and Vault Enterprise 2.1…

  8. HashiCorp security bulletins21:18 UTCHCSEC-2026-40 - Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities

    Bulletin ID: HCSEC-2026-40 Affected Products / Versions: Vault Community Edition 1.14.0 up to 2.1.1; fixed in Vault Community Edition 2.1.2.

  9. GitHub Advisories (PyPI)20:36 UTCCritical: Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

    Affects langflow, langflow-base, lfx.

  10. GitHub Advisories (npm)20:28 UTCCritical: Payload Form Builder has an RCE issue

    Affects @payloadcms/plugin-form-builder.

Technical Guides

31 pieces, the newest 10 here.

  1. Zalando Engineering22:00 UTCThundering herd of circuit breakers

    A client-side circuit breaker stays open for hours, blocking 95% of traffic, and won't close.

  2. Stack Overflow Blog20:48 UTCPart 4: Safety and governance for LLM systems: guardrails, PII, audit, and memory
  3. Stack Overflow Blog20:40 UTCPart 3: Knowing when your agent doesn’t know: the confidence layer
  4. Stack Overflow Blog20:31 UTCPart 2: Evals as a deployment gate — and how to know when they drift
  5. Stack Overflow Blog20:14 UTCPart 1: Make your AI agents boring: the determinism layer
  6. AWS Networking & Content Delivery19:16 UTCCross-account canary routing with Amazon VPC Lattice and Amazon API Gateway

    Modernizing a monolith into microservices may require placing each new service in its own AWS account for isolation, independent scaling, and clear ownership.

  7. Microsoft Foundry18:45 UTCAzure Document Intelligence and Azure Content Understanding: a practical guide

    Compare Azure Document Intelligence and Azure Content Understanding across extraction architectures, workload fit, Layout capabilities, deployment options, and practical evaluatio…

  8. AWS Machine Learning18:34 UTCRethinking access control for RAG with Amazon Quick and Amazon Bedrock

    Enterprise RAG unlocks insights from knowledge sources like SharePoint, Google Drive, and Confluence, but those sources carry complex permissions.

  9. NVIDIA Developer18:21 UTCThe Machines that Make the Machines

    How we taught robots to assemble GB300 tester trays and what it taught us about robot learning, mechanical intelligence, and good old-fashioned engineering The...

  10. NVIDIA Developer16:00 UTCValidate AI Factory Changes with Digital Twins and AI Agents

    AI factories are some of the most complex operations in the world, combining GPUs, CPUs, switches, DPUs, and SuperNICs alongside schedulers, orchestration...

AI in the Field

16 pieces, the newest 6 here.

  1. AWS for Media & Entertainment20:45 UTCAWS AI shines at IBC 2026

    From the halls of the RAI to local gatherings in Amsterdam, conversations around this year’s International Broadcasting Convention (IBC Show) centered on AI and collaboration.

  2. AI Now Institute20:20 UTCAI Now’s Aashna Agarwal Testifies before NYC Council Committee of the Whole

    On Monday, October 5th, 2026, AI Now Program Associate Aashna Agarwal testified before the New York City Council at a Committee of the Whole hearing on the concrete risks of AI ac…

  3. MIT News20:10 UTCDiscovering the value of humanistic inquiry

    Students in MIT’s Concourse program delve deeply into the human condition, debate challenging questions, and learn to develop judgment about issues that can’t be quantified.

  4. Federal Register (AI)04:00 UTCMusic Streaming Fraud

    Pursuant to a congressional request, the United States Copyright Office is soliciting information from the public regarding issues related to music streaming fraud.

  5. npj Digital Medicine00:00 UTCFrom quantitative features to imaging signs: agentic AI-driven autonomous discovery in glioblastoma

    npj Digital Medicine, Published online: 07 October 2026; doi:10.1038/s41746-026-03331-9 From quantitative features to imaging signs: agentic AI-driven autonomous discovery in glio…

  6. npj Digital Medicine00:00 UTCAI-assisted telerehabilitation in early Parkinson’s disease: a multicenter, randomized, multi-arm comparative trial

    npj Digital Medicine, Published online: 07 October 2026; doi:10.1038/s41746-026-03339-1 AI-assisted telerehabilitation in early Parkinson’s disease: a multicenter, randomized, mul…

Columns

12 pieces, the newest 6 here.

  1. Simon Willison20:56 UTCClaude Haiku 5.5

    As previously promised, here's Anthropic's new fast, low cost model: Introducing Claude Haiku 5.5.

  2. Zvi Mowshowitz20:31 UTCThe Curve Bends You

    The plan is no plan.

  3. Gergely Orosz (The Pragmatic Engineer)17:19 UTCBuilding resilient systems with Sam Newman

    Sam Newman joins me to discuss when to use microservices, how to build resilient distributed systems, and how AI is changing software development.

  4. swyx (Latent Space)14:10 UTCCan a Cloud-Native Harness Make Agents Reliable Beyond the Desktop?

    Kubernetes co-creators Craig McLuckie and Joe Beda aim to bring agent harnesses fully into the cloud.

  5. Raymond Chen14:00 UTCHow can undefined opcodes ud0 and ud1 have parameters? How undefined were they?

    They weren't defined, not even as undefined.

  6. Bruce Schneier11:07 UTCApple’s Verified Photography System

    Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photograph…

Research

280 pieces, the newest 10 here.

  1. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCTetris3D: 3D Scene Generation With Objects That Fit Together

    We propose Tetris3D, a generative framework for single-image 3D scene reconstruction that recovers objects which are physically and geometrically coherent as a scene.

  2. arXiv cs.CV17:59 UTCNever Look Back: Understanding Persistence in 3D Object Memory from Egocentric Videos

    As we move through the world and carry out everyday tasks, we encounter objects that may become relevant only later.

  3. arXiv cs.LG17:59 UTCDecoupling Exploration from Optimization in RLVR

    Modern language models undergo reinforcement learning with verifiable rewards (RLVR) on top of already-trained checkpoints.

  4. arXiv cs.CL17:58 UTCEngramEdit: Decoupled Knowledge Updates in LLMs through Conditional Memory

    Conditional memory architectures such as DeepSeek Engram use input n-grams to look up learned embeddings, expanding the capacity of large language models (LLMs) with limited addit…

  5. arXiv cs.RO17:58 UTCLong-WAM: Scaling the Context of World-Action Models

    Real-time robot control demands enough visual history to infer motion and task progress, but processing that history can delay action.

  6. arXiv math.OC17:57 UTCDecentralized SGD under Heavy-Tailed Noise: Optimal Convergence Rates and the Role of Gradient Clipping

    Heavy-tailed noise has been widely observed in modern machine learning, motivating the use of methods like gradient clipping and normalization.

  7. arXiv cs.RO17:57 UTCRephrase Before You Act: Characterizing and Mitigating Language Sensitivity in Vision-Language-Action Models

    Vision-language-action models (VLAs) are strikingly sensitive to instruction phrasing and do not inherit the language robustness of the vision-language models they are built on.

  8. arXiv (vision, retrieval & HCI) cs.CV17:57 UTCGRACE: Generation-aware latent compression for efficient video generation

    Highly compressed video autoencoders offer an effective way to accelerate video diffusion models, as the Diffusion Transformer (DiT) operates on far fewer tokens.

  9. arXiv cs.LG17:56 UTCDistilling Graph Geometry: Knowledge Gap from GNNs to MLPs

    GNN-to-MLP distillation aims to retain the predictive accuracy of a message-passing teacher while deploying a graph-free MLP at inference.

  10. arXiv cs.LG17:55 UTCWhy Forget-Only Unlearning Needs Memorization

    Machine unlearning asks for a deletion algorithm whose output is close to retraining from scratch without the selected forget examples.

Releases

81 pieces, the newest 12 here.

  1. AI SDK23:56 UTC@ai-sdk/workflow-harness@1.0.143
  2. AI SDK23:55 UTC@ai-sdk/workflow@2.0.64
  3. AI SDK23:55 UTC@ai-sdk/vue@4.0.132
  4. Node.js23:55 UTC2026-10-07, Version 26.11.1 (Current), @aduh95
  5. npm releases23:52 UTCai 7.0.132
  6. CrewAI23:52 UTCCrewAI 1.15.25: Documentation
  7. Ollama23:22 UTCv0.40.1
  8. npm releases22:06 UTC@google/genai 2.28.0
  9. ComfyUI21:58 UTCComfyUI 0.39.2: ComfyUI v0.39.2
  10. Google Gen AI SDK21:40 UTCGoogle Gen AI SDK 2.29.0: Support "allowlist", "disabled" in environment network config. (fa4acc7)
  11. Astro21:35 UTC@astrojs/netlify@8.2.8
  12. Astro21:35 UTC@astrojs/language-server@2.17.2

New Repos & Packages

48 pieces, the newest 8 here.

  1. npm #mcp23:52 UTC@ai-sdk/mcp 2.0.70
  2. GitHub #mcp23:43 UTCscarletkc/Hatoba (46 stars)
  3. npm #ai-agent23:38 UTCagent-afk 5.303.10
  4. npm #llm23:25 UTC@scalar/openapi-to-markdown 1.5.3
  5. GitHub #developer-tools23:23 UTCfidipro/gluon (54 stars)
  6. npm #ai-agent23:05 UTCagent-afk 5.303.9
  7. npm #ai-agent22:53 UTC@plannotator/pi-extension 0.28.8
  8. npm #mcp22:50 UTCclerk 3.4.1

Watch

40 pieces, the newest 6 here.

  1. Google Cloud Tech · YouTube23:00 UTCBuild & connect an incident investigation agent with Elastic Agent Builder and Gemini Enterprise
  2. Databricks · YouTube22:09 UTCHow Genie Ontology Enhances AI Cowork | Databricks Genie One Demo
  3. OpenAI · YouTube21:55 UTCIntroducing GPT-6 in ChatGPT with Intelligent UI
  4. OpenAI · YouTube21:34 UTCBuild Plugins for ChatGPT
  5. Apple Developer · YouTube21:25 UTCIETF HLS Interest Day
  6. Black Hat · YouTube21:25 UTCBlack Hat Stories | Taylor Margot, Lytical Ventures

Package releases

56 from the most used packages' own repositories, the newest 15 here.

  1. 23:30 UTCplatformdirs 4.12.4 · every release →
  2. 23:26 UTCsagemaker v3.24.0 · every release →
  3. 23:23 UTCpyproject-api 1.11.4 · every release →
  4. 23:18 UTCsagemaker v2.257.7 · every release →
  5. 23:17 UTCsemgrep v1.180.0 · every release →
  6. 23:03 UTCcheckov 3.3.26 · every release →
  7. 22:47 UTCazure-core azure-monitor-opentelemetry_1.8.11 · every release →
  8. 22:39 UTCtldts-core v7.4.18 · every release →
  9. 22:37 UTCreact-resizable-panels 4.14.3 · every release →
  10. 22:33 UTCnest-asyncio2 v1.7.4 · every release →
  11. 20:49 UTCsynckit v0.12.1 · every release →
  12. 20:14 UTCpestphp/pest v5.3.1 · every release →
  13. 20:08 UTCupdate-browserslist-db 1.3.4 · every release →
  14. 20:00 UTCfastavro 1.13.1 · every release →
  15. 19:56 UTCphpseclib/phpseclib 4.0.2 · every release →