Tech news, October 16, 2026
Friday: 395 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 13:53 UTC, in the sources' own words.
- LeadWhat’s new with Google Data Cloud
October 12 - October 16 Looker Data Apps are now in Preview to build and host interactive, agent-generated applications natively inside Looker Generated using natural language pro…
- NewsFrom 10 Million to 10 Billion: Vector Search Built to Grow
LanceDB lets you tune search precision at query time, balance memory and disk caching, and keep new data searchable as your table grows.
- NewsLeRobot Trains on Lance, Mining Robot Fleet Data Demo, Vector Search at 10B Scale
LeRobot trains directly from Lance datasets in object storage, a hybrid scan mines robot fleet data for edge cases, and distributed search reaches 1,066 QPS across 10B vectors, pl…
- OutageProblem with Billing and Account Management in North America 1 (US1), North America 2 (US2), Europe 1 (EU), Europe 2 (DE)
We are currently investigating reports of problems with Billing and Account Management.
- SecurityCisco Meraki Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review.
- Deadlinegemini-2.5-flash shuts down in 4 days
Replacement: gemini-3.8-flash or gemini-3.5-flash-lite or gemini-3.1-flash-lite.
News
115 pieces, the newest 20 here.
- From training to serving: Reflection’s Beam on CoreWeave
Reflection’s open-weight Beam model on CoreWeave spans training with Weights & Biases Models, SFT in partnership with Axolotl, and Day 0 API access on Serverless Inference in Core…
- Transactions are Generally Available, advancing warehousing on the Lakehouse
Multi-Statement Transactions are Generally Available, enabling organizations to run...
- PwnEscape (CVE-2026-99999): Patched kernels available in testing
A new Linux kernel vulnerability, nicknamed PwnEscape ( CVE-2026-99999 ), has been disclosed.
- Updated App Review Guidelines are now available
The App Review Guidelines have been revised to support new features, updated policies, and to provide clarification.
- Amazon CloudWatch log centralization now available in AWS GovCloud and additional commercial Regions
Amazon CloudWatch log centralization is now available in AWS GovCloud (US) and 13 additional commercial Regions.
- TiDB Cloud BYOC Public Preview: Fully Managed Distributed SQL in Your AWS Account
Teams running distributed SQL in production face a trade-off.
- Strengthening App Review Guidelines against nonconsensual intimate imagery and bait-and-switch apps
The App Review Guidelines are a core part of the safe and trusted experience that the App Store strives to offer users around the world — and the foundation of that trust is clear…
- Announcing the 2027 State of Open Source Survey
The OSI has teamed up again with Perforce Zend and OpenLogic, as well as the Eclipse Foundation, for the 2027 State of Open Source Survey.
- MariaDB Foundation: Exploring TidesDB Performance with TAF
TidesDB now exists inside MariaDB as a pluggable storage engine.
- How Itaú is building generative AI for its entire customer base
With ia.i, a conversational interface, and the IARA governance platform, Itaú is applying its AI First strategy to customers and employees — in one of Brazil’s most regulated sect…
- Why the AI Loop Will Test Every Security Assumption
Every turn of the AI loop adds new weights, traces, and access paths.
- Google Workspace Weekly Recap - October 16, 2026
Google Meet now uses post-quantum cryptography Calls in Google Meet will use post-quantum cryptography (PQC) for extra protection, starting now with laptop web clients and meeting…
- AWS Lambda durable functions are now available in AWS GovCloud (US) Regions
AWS Lambda durable functions are now available in the AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions.
- Grounding AI agents in biological reality: Building blocks for autonomous wet labs
General Science
- Nemotron 3.5 Super VL model now available on Amazon SageMaker JumpStart
NVIDIA's Nemotron 3.5 Super VL is now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers.
- Automating secure container registry management for air-gapped AWS workloads
Organizations in regulated industries run container workloads in air-gapped AWS environments, which means migrating hundreds of Helm charts and images into private Amazon ECR with…
- “MongoDB was slow on Thursday”: answering the app team with mongo-health
Monday, 9:00.
- Day 0 support for Reflection’s Beam on Google Cloud: 5x faster perf with llm-d and NVIDIA Dynamo
Today, Reflection released Beam, its first open-weight model built to give developers, researchers, and enterprises open control and customization for frontier software engineerin…
- National Design Studio and Cognition Launch the American Forge Residency
National Design Studio and Cognition are looking for engineers to help modernize America’s federal software infrastructure.
- [In preview] Public Preview: Azure Databricks Private network gateway
Private network gateway for Azure Databricks is now in Public Preview, enabling serverless compute to connect to resources in your virtual network (VNet) and transitively connecte…
New Models
11 pieces, the newest 10 here.
- New model: Qwen: Qwen Image 2.1 Turbo
Qwen Image 2.1 Turbo is the fast, lower-cost tier of the Qwen Image 2.1 series from Qwen, for image generation and editing where throughput and price matter more than peak...
- New model: Qwen: Qwen Image 2.1 Pro
Qwen Image 2.1 Pro is an image generation and editing model from Qwen, the higher-quality tier of the Qwen Image 2.1 series.
- New model: Perplexity: Decider Flash V1.2
Decider Flash V1.2 is a 4B-parameter decision model from Perplexity, a smaller, lower-cost sibling of [Decider V1.2](/perplexity/pplx-decider-v1.2) with the same API contract.
- New model: Perplexity: Decider V1.2
Decider V1.2 is a new 27B checkpoint of Perplexity's decision model, succeeding [Decider V1.1 27B](/perplexity/pplx-decider-v1.1-27b) with the same API contract.
- Open model: nvidia/NVIDIA-Nemotron-Labs-Dory1.0-4B-NVFP4
New open weights from NVIDIA on the Hugging Face Hub.
- Open model: nvidia/NVIDIA-Nemotron-Labs-Dory1.0-4B-BF16
New open weights from NVIDIA on the Hugging Face Hub.
- New model: Perplexity: Decider Flash Latest
This model always redirects to the latest model in the Decider Flash family.
- Open model: tencent/Qwen3-8B-DSpine-b16
New open weights from Tencent Hunyuan on the Hugging Face Hub.
- New model: Reflection: Beam 1.0 501B A23B
Beam 1.0 is Reflection's open-weight reasoning model for coding and long-horizon agentic workflows.
- Open model: microsoft/scFM-dataselection
New open weights from Microsoft on the Hugging Face Hub.
Security Desk
76 pieces, the newest 10 here.
- ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants.
- Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access
Artificial Intelligence technologies have made a huge impact on the security industry.
- Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
Posted by Solar Designer on Oct 16 Hi, Here's an update: We stayed in the range of 319 to 400 accepted messages per month for June through September.
- Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
Posted by Stig Palmquist on Oct 16 CVE-2026-110752 Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in…
- Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries
Posted by Alan Coopersmith on Oct 16 All five library releases are available now, see https://lists.x.org/archives/xorg-announce/2026-October/thread.html for links to their releas…
- CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (…
- Top Escape.tech alternatives for offensive security in 2026
We compare the top Escape.tech alternatives for offensive security in 2026: Aikido Security, XBOW, RunSybil, Terra, Burp Suite Professional, Invicti, StackHawk, Hadrian, and Pente…
- CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support chayes Oct 16, 2026 Release Date October 16, 2026 Description CISA is aware of critical authentication byp…
- Google security advisory (AV26-1060)
- Critical: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
Affects lmcache.
Technical Guides
9 pieces.
- Know Before You Go: your re:Invent 2026 guide to managing cloud and AI spend
At this year’s re:Invent, we’ve lined up a fantastic set of sessions to get you up to speed on the latest AI cost management frameworks, solutions, and real-life success stories.
- Building trust in AI agents: A production-ready evaluation framework with Amazon Bedrock AgentCore
Autonomous AI agents fail softly: latency stays flat while answer quality quietly erodes.
- Code, Test, and Deploy on One Machine with NVIDIA RTX Spark
AI agents are changing how software gets built.
- Introducing Reflection Beam: an open-weight model for agentic coding on AWS
Reflection AI's Beam is an open-weight model for agentic coding and long-horizon tasks.
- How to Run Your Python Scripts and Code
Learn how to run Python scripts from the command line, REPL, IDEs, and file managers on Windows, Linux, and macOS.
- Python Exceptions: An Introduction
Learn what Python exceptions are, how to raise them, how to handle them with try, except, else, and finally, and how to create custom ones.
- The Real Python Podcast – Episode #315: Python Pitfalls: Common Mistakes and How to Avoid Them
What are common mistakes that Python beginners make, and how do you avoid them?
- Quiz: Profiling in Python: How to Find Performance Bottlenecks
Check how well you can find performance bottlenecks in Python with time, timeit, cProfile, Pyinstrument, and the Linux perf profiler.
- How to Safely Let AI Agents Call Production APIs using DigitalOcean Action Gateway
DigitalOcean Action Gateway lets AI agents call production APIs safely: tool scope, version checks, and approvals cut harmful episodes from 48 in 100 to zero.
AI in the Field
7 pieces, the newest 6 here.
- Multi-KB Retrieval with Amazon Connect Customer AI Agents for Global Contact Centers
How AcmePets unified disparate knowledge sources to deliver accurate, region-specific pet information to contact center agents worldwide Introduction AcmePets is a worldwide pet i…
- Fostering community amid Kendall Square’s innovation
The 18th annual Kendall Square Association Annual Meeting explored how new technologies could be a force for shared prosperity in society.
- Self-Regulatory Organizations; Cboe Exchange, Inc.; Notice of Filing of Amendment No. 1 and Order Granting Accelerated Approval of a Proposed Rule Change, as Modified by Amendment No. 1, To Permit the Listing of Binary Options Overlying Key Performance Indicators Reported by Certain Issuers of Stock
- Large-scale iontronic skins with neural-hierarchical processing architecture
Nature Machine Intelligence, Published online: 16 October 2026; doi:10.1038/s42256-026-01325-6 Li et al.
- Hello Toronto! Waymo is En Route
Waymo is officially heading to Canada!
- Sycophantic AI, critical-feedback tolerance, and the case for productive friction in medical training
npj Digital Medicine, Published online: 16 October 2026; doi:10.1038/s41746-026-03389-5 Sycophantic AI, critical-feedback tolerance, and the case for productive friction in medica…
Columns
9 pieces, the newest 6 here.
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event.
- Ranking proposals for Interop 2027
The Firefox team are asking us to weigh in on proposals for Interop 2027—what features should browsers be concentrating on implementing or improving.
- 2026.42: Home At Last
The best Stratechery content from the week of October 12, 2026, including what Apple is doing, SpaceX's appetite, and the title, takes, and the Washington Wizards.
- The Tusks Of Extinction by Ray Nayler
Hot on the heels of reading and enjoying The Mountain In The Sea, I picked up Ray Nayler’s next work, this tightly constructed novella.
- C++ futures part 5: std::future and std::shared_future
Getting the results back out.
- Monthly Roundup #47: October 2026
AI might not yet be eating the physical world.
Research
11 pieces, the newest 10 here.
- Designing more efficient quantum circuits with Claude
Working largely on its own, Claude designed quantum circuits that improve on the best published versions, in some cases by an order of magnitude or more.
- AI and Communications of the ACM
- Is Recursive Self-Improvement Really Here?
Frontier labs say their AI models now help build their own successors.
- LLMSA-MC: Bridging LLM Reasoning and Static Analysis for Detecting Missing-Check Bugs in Linux Kernels
Missing security checks on critical variables are an important class of semantic bugs in the Linux kernel and can lead to severe vulnerabilities.
- CodaRAG: Connecting the Dots with Associativity Inspired by Complementary Learning
Large Language Models (LLMs) struggle with knowledge-intensive tasks due to hallucinations and fragmented reasoning over dispersed information.
- Data Optimization for LLMs: A Survey
Large language models (LLMs) have attracted great attention in both academic and industrial communities in recent years.
- Multi-Level Text Alignment for Interpretable and Uncertainty-Aware Time Series Forecasting with LLMs
Adapting large language models (LLMs) for time series forecasting introduces unique challenges due to the mismatch between continuous time series tokens and the discrete word toke…
- Learning Popularity-Aware User Representations for Sequential Recommendation via Retrieval-Augmentation
Sequential recommendation methods are important in recommender systems, as they capture users’ dynamic interests from their historical behavior sequences.
- Imitation Learning of Avoidance Modes for Efficient Multimodal Model Predictive Control
Imitation Learning of Avoidance Modes for Efficient Multimodal Model Predictive Control Multimodal model predictive control (MM-MPC) avoids local minima among moving obstacles by…
- EdgeWise: Bringing Long-Horizon Agents to the Edge via Selective Cloud Delegation
EdgeWise: Bringing Long-Horizon Agents to the Edge via Selective Cloud Delegation Complex and long-horizon agent tasks often rely on frontier models deployed in the cloud to achie…
Releases
64 pieces, the newest 12 here.
- opencode 2.0.32: release, v2.0.32
- langgraph==1.2.16
- langgraph-sdk==0.4.8
- pkg/v3.270.0: Changelog and go.mod updates for v3.270.0 (#25268)
- Claude Code 2.1.302: CLAUDECODEAUTOMODEMODEL to choose the model the client-side auto mode classifier uses; it does not change…
- Pulumi 3.270.0: [cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the…
- OpenAI Python SDK 3.32.0: api, add cache settings and key options [2/2] (#4087) (325da45)
- OpenAI Node SDK 7.35.0: api, add Decisions prompt caching options (#2956) (468b54e)
- @ai-sdk/zai@3.0.33
- @ai-sdk/xai@5.0.24
- @ai-sdk/workflow-harness@1.0.154
- ai 7.0.143
New Repos & Packages
24 pieces, the newest 8 here.
Watch
8 pieces, the newest 6 here.
- Meet Kevin Klues - Speaker at KubeCon + CloudNativeCon North America
- How DPR Construction Delivers Insights Faster With AI In Snowflake
- Why AI Can Write Code But Can’t Keep It Running (Yet)
- Vendor Neutral Governance Tripled OpenSearch Contributors | Bianca Lewis
- JetBrains Pafos Camp 2026: 12 Days of Competitive Programming
- NVIDIA RTX Spark | A New Beginning for Windows PCs
Package releases
61 from the most used packages' own repositories, the newest 15 here.
- browser-use-sdk v3.12.1 · every release →
- libc 0.2.191 · every release →
- pillow 13.0.0 · every release →
- google/cloud-storage v2.6.1 · every release →
- google/gax v1.51.1 · every release →
- google/auth v1.55.2 · every release →
- @tanstack/history release-2026-10-16-2111 · every release →
- sqlalchemy rel_2_1_5 · every release →
- fastmcp v3.4.9 · every release →
- @opentelemetry/instrumentation-mongodb instrumentation-winston-v0.68.1 · every release →
- jsonpath-ng v1.11.0 · every release →
- resend v2.50.0 · every release →
- postcss-discard-duplicates cssnano@9.9.0 · every release →
- openfeature-provider-posthog-v0.1.107 · every release →
- gcloud-aio-auth auth-5.5.3 · every release →