Tech news, October 10, 2026
Saturday: 143 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 01:33 UTC, in the sources' own words.
- LeadGitHub Copilot weekly releases — October 5
This week’s updates make Copilot easier to use across accounts and environments, with more control over what agents can access and how you manage their work.
- NewsIntroducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash
We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline.
- NewsWhat’s new with Google Data Cloud
October 5 - October 9 Data Agent Kit is now generally available to bring Google Data Cloud to any coding agent Data Agent Kit provides a free collection of Model Context Protocol…
- OutageDelays in Drains, Observability, and Workflow in Washington (iad1)
Delayed Drains deliveries, Observability data, and Build logs have been processed now.
- SecurityNew GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.
- Deadlinegemini-2.5-flash shuts down in 10 days
Replacement: gemini-3.8-flash or gemini-3.5-flash-lite or gemini-3.1-flash-lite.
News
10 pieces.
- New controls and chat improvements in Copilot for JetBrains
This update brings more control over default models and MCP server in GitHub Copilot for JetBrains.
- Developer Experience as a Business Strategy: Lessons from the New DevEx Report
A broad look at developer experience research reveals a gap.
- Community Snapshot—September
The Internet Society community works locally, regionally, and globally to keep the Internet a force for good: open, globally connected, secure, and trustworthy.
- Community Snapshot—September
The Internet Society community works locally, regionally, and globally to keep the Internet a force for good: open, globally connected, secure, and trustworthy.
- Apache Flink CDC 3.7.0 Release Announcement
The Apache Flink Community is excited to announce the release of Flink CDC 3.7.0!
- October 10, 2026
Cloud SQL for MySQL Change MySQL 8.0.46 is now the default minor version for Cloud SQL for MySQL 8.0.
- Bun v1.4.3
Fixes 166 issues, addressing 122 .
- Agents - Cloudflare API MCP server serves Cloudflare skills
The Cloudflare API MCP server now serves Cloudflare skills ↗︎ through the Skills over MCP extension ↗︎.
- Use Your Claude Plan in Amp
You can now use your Claude Pro/Max subscription in Amp.
- pnpm 12.12.0
This release shares task results and dependency builds through a remote cache, adds the addMissingPeerTypes setting, and lets pnpm add --config and pnpm update manage configuratio…
New Models
4 pieces.
- Open model: datalab-to/indra-ocr
Trending on the Hugging Face Hub.
- Open model: nvidia/agile_one_s_pick_ssd_n2_1120
New open weights from NVIDIA on the Hugging Face Hub.
- Open model: nvidia/agile_one_s_place_ssd_n2_1260
New open weights from NVIDIA on the Hugging Face Hub.
- Open model: nvidia/agile_one_s_pickplace_ssd_n2_18200
New open weights from NVIDIA on the Hugging Face Hub.
Security Desk
7 pieces.
- CVE-2026-103634: Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 4.1.0 through 5.2.0 Description: Out-of-bounds read and write in the Count-Min sketch de…
- CVE-2026-103513: Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 2.0.0-incubating through 5.2.0 Description: Out-of-bounds read and write in the CPC sket…
- CVE-2026-103501: Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 1.0.0-incubating through 5.2.0 Description: Heap buffer overflow in the HLL sketch deser…
- Why TLP should not replace your internal information classification, (Sat, Oct 10th)
The Traffic Light Protocol (TLP)[ 1 ], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared fur…
- FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunter…
- DSA-6550-1 ghostscript - security update
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary cod…
- DSA-6551-1 tor - security update
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system.
Technical Guides
5 pieces.
- Namespaces in Python
Python namespaces store and organize the symbolic names in your program.
- Python for Loops: The Pythonic Way
Learn how to use Python for loops to iterate over lists, tuples, strings, and dictionaries with Pythonic looping techniques.
- Quiz: How to Get a List of All Files in a Directory With Python
Revisit how to list files and folders in Python with pathlib.
- Case Study: How CodeRabbit Leverages LanceDB for AI-Powered Code Reviews
How CodeRabbit leverages LanceDB-powered context engineering turns every review into a quality breakthrough.
- 4 team rituals that drive AI adoption
Elevating AI’s impact from individual productivity gains to team-wide wins requires meeting people where they are.
AI in the Field
4 pieces.
- VOICE-AE: automated CTCAE scoring from ambient clinical audio using speech recognition and large language models
npj Digital Medicine, Published online: 10 October 2026; doi:10.1038/s41746-026-03373-z VOICE-AE: automated CTCAE scoring from ambient clinical audio using speech recognition and…
- FHIR-AgentEval: a modular sandbox for benchmarking clinical LLM agents with memory-augmented configurations
npj Digital Medicine, Published online: 10 October 2026; doi:10.1038/s41746-026-03348-0 FHIR-AgentEval: a modular sandbox for benchmarking clinical LLM agents with memory-augmente…
- Artificial intelligence across the medical education continuum: institutional, learning, readiness and safety systems
npj Digital Medicine, Published online: 10 October 2026; doi:10.1038/s41746-026-03362-2 Artificial intelligence across the medical education continuum: institutional, learning, re…
- Six pragmatic steps to separate medical GenAI’s promise from its inherent dangers
npj Digital Medicine, Published online: 10 October 2026; doi:10.1038/s41746-026-03384-w GenAI and agentic systems in medicine bring real opportunities for better diagnosis and the…
Columns
5 pieces.
- [Subscriber Exclusive] NYC Subscriber Meetups!
Tomorrow and Tuesday.
- Building AI for Reliable Execution: Lessons From Industrial Robotics
Inside Standard Bots’ AI stack, pretrained models learn factory tasks from demonstrations and improve through corrections from real deployments.
- [AINews] TypeSafe/Jev at >$100M ARR, $7.5B valuation 3 weeks after launch
Wow.
- Why AlphaFold Didn't Solve Protein Folding — Pushmeet Kohli, Google DeepMind & Sal Candido, Biohub
From the Bitter Lesson of AI scaling to the unsolved mysteries of protein folding, Google DeepMind’s Pushmeet Kohli and Biohub’s Sal Candido are rethinking what it takes to build…
- Software's centaur age may last decades
We are currently living in the age of centaurs (2022-20??).
Research
2 pieces.
- LSR: Eliminating Loop Control Overhead for Energy-Efficient Processors
Loops constitute a small fraction of static code but dominate dynamic execution time and control overhead, posing significant challenges for energy-efficient mobile and embedded p…
- Privacy Risks and Leakage Pathways in Agentic and Multi-Agent AI Systems
Agentic and multi-agent AI systems are increasingly deployed as part of operational systems, introducing autonomous planning, delegation, persistent memory, tool use, and inter-ag…
Releases
21 pieces, the newest 12 here.
- Open WebUI 0.12.0: Realtime voice calls. Administrators can now switch Call mode in the Voice calls section of Audio…
- @tauri-apps/cli v2.12.2
- b11552
- pnpm 12.12.0
- tauri-cli v2.12.2
- b11551
- b11550
- Release v26.9.15.5-stable
- Release v26.8.23.6-lts
- github-v1.2.26: chore: promote v2 to dev
- Release v26.7.26.8-stable
- b11549: args: add LLAMA_ARG_SLOT_SAVE_PATH env for --slot-save-path (#30272)
New Repos & Packages
28 pieces, the newest 8 here.
Watch
6 pieces.
- MoRI + vLLM: Wide Expert Parallelism and RDMA KV-Cache Transfer for Disaggregated MoE Serving on AMD
- Why Is Google’s AI Lab Behind?
- How Oracle Uses Codex to Help Business Users Get Answers
- Live Coding with Wes Bos, Burke Holland, Pierce Boggan & Friends | GitHub Copilot Day
- TikTok Ads MCP: Run TikTok Ads from Replit (Showcase)
- Black Hat Asia 2026 Highlights
Package releases
51 from the most used packages' own repositories, the newest 15 here.
- eslint-plugin-jest v29.16.11 · every release →
- pytest-env 1.8.0 · every release →
- tightenco/ziggy v2.6.5 · every release →
- numpy v2.5.4 · every release →
- postcss-discard-duplicates cssnano@9.6.0 · every release →
- jsonpointer v3.2.1 · every release →
- eslint-plugin-jest v29.16.7 · every release →
- brianium/paratest v7.26.1 · every release →
- langchain-google-vertexai libs/genai/v4.4.1 · every release →
- tox 4.65.2 · every release →
- parse 1.22.3 · every release →
- soupsieve 3.0.1 · every release →
- serde_json v1.0.152 · every release →
- pyathena v3.39.0 · every release →
- react-resizable-panels 4.14.4 · every release →