The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, October 20, 2026

Tuesday: 620 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 12:41 UTC, in the sources' own words.

  1. LeadCoreWeave Direct-to-Expert: Work With the Engineers Who Built CoreWeave Cloud

    CoreWeave Direct-to-Expert brings your team expert assistance in minutes from the engineers who built CoreWeave Cloud, via the channels you’re already using.

    CoreWeave
  2. Newsllm-d 1.0 hardens open-source AI inference for production

    The distributed inference framework makes serving large models on your own infrastructure reliable and affordable for the agentic era.

    IBM Research
  3. NewsEnterprise features October roundup

    This month's Enterprise releases help central teams take AI-built apps to production: deploy in your own AWS or Azure account, EU inference, Organizations, workspace policies and…

    Lovable
  4. OutageIssue in creating new LKE Enterprise cluster across regions.

    We are currently investigating an issue affecting the provisioning of new LKE Enterprise (LKE-E) clusters across all regions.

    Linode
  5. SecurityCVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

    Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service.

    Horizon3.ai
  6. Deadlinegemini-2.5-flash shuts down today

    Replacement: gemini-3.8-flash or gemini-3.5-flash-lite.

    Google Cloud (Vertex AI)

News

174 pieces, the newest 20 here.

  1. Ubuntu23:45 UTCeMudhra CA compromise fixes available

    This blog post was updated with additional information related to libnss3 and Java applications on October 22, 2026.

  2. What's New with AWS23:26 UTCAnnouncing Amazon ECS Gateway, a managed ingress solution for your ECS services

    AWS announces Amazon Elastic Container Service (Amazon ECS) Gateway, a new resource that simplifies ingress networking for containerized applications by dynamically provisioning a…

  3. Khronos Group23:05 UTCKhronos Group Welcomes GRENETA as Associate Member

    GRENETA is a South Korean deep-tech company developing 3D spatial data infrastructure for Physical AI, robotics, and industrial simulation.

  4. What's New with AWS23:00 UTCAmazon DynamoDB global tables now support disassociating replicas

    Amazon DynamoDB global tables now support disassociating a replica without deleting its table or data.

  5. CoreWeave22:35 UTCRun Agentic Workloads Safely at Scale with CoreWeave Sandboxes

    CoreWeave Sandboxes delivers isolated execution for RL, agent tool use, and model evaluation, on your clusters or as a serverless runtime.

  6. CoreWeave22:24 UTCNew CoreWeave SUNK Capabilities Help Teams Build Modern AI Research Clusters

    Why SUNK matters for teams building modern AI research clusters: a faster path to productive training, less compute fragmentation, and deeper operational visibility.

  7. Cloudflare22:20 UTC8 eMudhra certificates are compromised. Here's what you need to know

    Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates.

  8. JetBrains21:49 UTCJetBrains Plugin Developer Conf 2026: AI, New APIs, and More

    What does the rise of AI agents mean for plugin development?

  9. LaunchDarkly21:32 UTCThe frontier loves feature flags

    Two ideas stand out: using classification to drive automation, and treating feature flags as the last line of defense.

  10. dbt Labs20:46 UTCdbt Champions: What we learned from founding members

    Six months in, our first 30 dbt Champions show how encouragement, Big Projects, and finding your people help a community grow.

  11. PHP20:32 UTCUpcoming Critical PHP Security Release

    The PHP security team would like to give advance notice of an upcoming security release.

  12. Vercel20:00 UTCWebSocket support is now generally available

    WebSocket support in Vercel Functions is now generally available.

  13. Snowflake19:58 UTCHorizon Context: Put Business Knowledge to Work for AI

    Horizon Context is in public preview with 18 metadata connectors, steward permissions and description propagation to ground AI in business context.

  14. CoreWeave19:41 UTCLiquid Cooling for AI Data Centers: Run Cold, Act Bold

    Liquid cooling enables CoreWeave to run AI hardware at peak performance with a significant reduction in water needs.

  15. Figma19:18 UTCSource material: Designer Ben Ganz on pushing the limits of what we can do

    From experimental typography and print artifacts to architecture, furniture, and fashion, PIN-UP Magazine’s creative director explores how materials, systems, and unexpected conne…

  16. AWS DevOps19:04 UTCLimit agent permissions and spend in AWS Transform custom

    AWS Transform custom runs an autonomous agent with shell access over your source code, using your AWS credentials.

  17. Google Cloud19:00 UTCManaged RAG search inside the sovereign perimeter: Gemini on GDC enterprise search

    National security agencies and other sovereign and highly regulated organizations handle incredibly sensitive data such as classified reports, field manuals, and sensitive multi-m…

  18. Azure Updates18:55 UTC[In preview] Public Preview: Disable VNet peering route

    Announcing the public preview of disable VNet peering route, a route-table capability that gives you more control over traffic between peered virtual networks.

  19. WarpStream18:30 UTCKafka Isn’t a Database, But We Gave It a Query Engine Anyway - WarpStream

    WarpSteam Events are a built-in observability layer that capture Agent logs, ACL decisions, and pipeline execution logs.

  20. Hugging Face18:17 UTCNVIDIA Cosmos3-H-Dreams: Bringing Clinical Surgery to Life Through Generative Simulation

New Models

3 pieces.

  1. OpenRouter16:13 UTCNew model: Mistral: Voxtral TTS 3

    Voxtral TTS 3 is Mistral's text-to-speech model.

  2. OpenRouter16:13 UTCNew model: Mistral: Voxtral Small Transcribe 3

    Voxtral Small Transcribe 3 is Mistral's flagship speech-to-text model.

  3. OpenRouter16:13 UTCNew model: Mistral: Voxtral Mini Transcribe 3

    Voxtral Mini Transcribe 3 is Mistral's compact speech-to-text model.

Security Desk

88 pieces, the newest 10 here.

  1. Wordfence22:39 UTCPSA: Upcoming Critical PHP Security Release

    PHP has released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities announced in this advance notice.

  2. Wiz Research22:02 UTCWiz Sensor on GKE. 1-Click Runtime Protection, Now Native.

    Enable native runtime protection for GKE in just one click.

  3. Elastic Security Labs22:00 UTCphp2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619

    CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure.

  4. Horizon3.ai21:23 UTCCVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution

    CVE-2026-101767 is a critical (CVSS 9.8) unauthenticated SQL injection vulnerability in Oracle E-Business Suite 12.2.3–12.2.15.

  5. Ubuntu Security Notices21:21 UTCUSN-8944-2: ca-certificates update

    USN-8944-1 updated ca-certificates.

  6. Aikido Security20:56 UTCThe 10 best email security software platforms in 2026

    Compare 10 email security platforms for phishing, BEC and automated response, plus workforce protection across training, devices and AI use.

  7. GitHub Advisories (PyPI)20:40 UTCCritical: Pillow: Heap buffer overflow in ImagingJpegDecode

    Affects Pillow.

  8. AWS Security Bulletins20:39 UTCCVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

    Bulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT Description: CICD-toolchain-for-serverless-applications…

  9. Unit 4220:30 UTCActive Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)

    Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.

  10. Aikido Security20:25 UTCThe 9 best phishing simulation tools in 2026

    Compare nine phishing simulation tools for realistic email, voice, SMS and deepfake exercises, adaptive training and broader workforce protection.

Technical Guides

23 pieces, the newest 10 here.

  1. AWS Machine Learning21:14 UTCBeyond the KV cache: Training and serving i14’s Laplace 3B linear attention model on AWS Trainium2 with native PyTorch

    Learn how i14 trained and served Laplace 3B, a linear attention model, on AWS Trainium2 using native PyTorch.

  2. AWS Machine Learning17:59 UTCWork management context for AI agents with Smartsheet MCP on AWS

    The Smartsheet Model Context Protocol (MCP) Server lets AI agents read, update, and act on live work management data.

  3. AWS Machine Learning17:59 UTCWorkflow context for AI agents with Smartsheet MCP on AWS

    The Smartsheet Model Context Protocol (MCP) Server lets AI agents read, update, and act on live data.

  4. AWS Machine Learning17:52 UTCFrom data to decisions: Conversational supply chain intelligence with Amazon Quick and Amazon Bedrock AgentCore

    Enterprise supply chains are data-rich but insight-poor, with the data to decide scattered across ERP, monitoring, procurement, and email.

  5. AWS Machine Learning17:48 UTCFine-tuning GPT-OSS-20B for multilingual reasoning on Amazon SageMaker HyperPod

    Learn how we fine-tuned GPT-OSS-20B for multilingual reasoning on Amazon SageMaker HyperPod, and how to decide between supervised fine-tuning (SFT) and reinforcement learning with…

  6. AWS Machine Learning17:34 UTCHow Octave built a secure multi-tenant AI foundation on Amazon Bedrock

    Octave built a secure, multi-tenant AI foundation on Amazon Bedrock, using Cohere Embed v4 for embeddings and Amazon Bedrock AgentCore for isolated agent execution, to power a Com…

  7. AWS Machine Learning16:42 UTCAccess OpenAI GPT models on Amazon Bedrock from Canada with cross-Region inference

    Canadian organizations can now access OpenAI GPT-5.6, GPT-6, and GPT-6.1 models on Amazon Bedrock from the Canada (Central) and Canada West (Calgary) Regions using cross-Region in…

  8. AWS Machine Learning16:22 UTCDiscover tools at runtime with AWS Agent Registry

    Hardcoded tool wiring breaks down as an agent's catalog grows from a handful of tools to hundreds.

  9. AWS Machine Learning16:03 UTCSecuring AI agent identity with X.509 PKI on AWS

    Learn how to secure multi-agent AI systems with cryptographic identity using Keyfactor EJBCA and AWS services.

  10. AWS Machine Learning15:57 UTCHow Eon built multi-cloud investigation with an MCP Gateway on Amazon Bedrock AgentCore

    Learn how Eon replaced per-tool credentials and local MCP processes across AWS, GCP, and Azure with a single authenticated Amazon Bedrock AgentCore gateway, giving more than 100 d…

AI in the Field

9 pieces, the newest 6 here.

  1. AI Now Institute16:02 UTCZohran Mamdani Backs Major Expansion of New York’s Data Center Moratorium

    At the People's AI Assembly, hosted by AI Now and More Perfect Union, NYC Mayor Zohran Mamdani and comedian Ilana Glazer discuss data center expansion and how the public can reass…

  2. Federal Register (AI)04:00 UTCNotice of Order Regarding Exclusion and Removal of DeepSeek Products From Federal Civilian Executive Branch Information Technology Systems and Procurements

    The Department of Homeland Security is publishing notice of the Secretary of Homeland Security's issuance of an order (1) excluding information technology products and services de…

  3. Federal Register (AI)04:00 UTCMedicare Program; Implementation of Sections 6219, 6220, and 6224 of the Consolidated Appropriations Act, 2026

    This proposed rule would implement section 6219 (Adjustments to Medicare Part D Cost-Sharing Reductions for Low-Income Individuals), section 6220 (Requiring Enhanced and Accurate…

  4. Nature Machine Intelligence00:00 UTCPhysics-informed machine learning: a hybrid lens for fluid dynamics

    Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01319-4 A neural network approach bridging Lagrangian and Eulerian perspectives transforms s…

  5. Nature Machine Intelligence00:00 UTCAgentic inequality

    Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01318-5 Sharp et al.

  6. Nature Machine Intelligence00:00 UTCLagrangian–Eulerian learning of flow field and trajectories with TrajectoryFlowNet

    Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01316-7 Wan et al.

Columns

14 pieces, the newest 6 here.

  1. Zvi Mowshowitz23:03 UTCAnthropic Does Not Understand Why Its Draft Bill Was Unacceptable and Troubling

    Anthony Cimino offered the closest thing to an official response we have seen on the leaked Anthropic draft bill I covered on Saturday.

  2. Simon Willison19:34 UTCBattle Drones - a vibe coded RTS with audio-based multiplayer

    My latest vibe coded game experiment is a Command & Conquer style RTS (Real Time Strategy) game called Battle Drones ( play it here ).

  3. swyx (Latent Space)19:31 UTCThe Programmable Data Center — Evan Conrad, SF Compute

    From GPU trading to physical settlement, independent markets, and programmable compute

  4. Gergely Orosz (The Pragmatic Engineer)17:34 UTCWhat’s the ROI of software engineers’ spending on AI?

    AI spending has greatly increased at most companies this year, but has it actually changed shipping velocity and PR output?

  5. Nathan Lambert17:04 UTCLatest open artifacts (#25): DeepSeek V4.1 Flash 1017, American-made models, and new regulatory controls in the US & China

    Western open models strike back

  6. Ethan Mollick15:57 UTC30 Months on the Exponential (in Charts)

    My new book is out today...

Research

148 pieces, the newest 10 here.

  1. arXiv (systems & security) cs.IT23:37 UTCDiffusion Sensitivity Geometry and Strong Duality for Optimal Privacy-Utility Tradeoffs

    Existing approaches to differential privacy in diffusion models rely on loose sensitivity bounds and isotropic Gaussian noise, leading to unnecessary estimation error.

  2. arXiv (systems & security) cs.AI23:31 UTCAgentPolicyForge: From Executable Environments to Policy Benchmarks and Adaptive Guards

    Customized agent deployments define policies over tools, resources, and execution conditions.

  3. arXiv (systems & security) cs.AI23:31 UTCPerMIT: Securing Persistent Memory for LLM Agents via Machine-Checked Integrity Theorems and Scalable Community Trust

    Persistent memory is a largely undefended surface for injection and poisoning, and the same risk limits memory sharing among agents.

  4. arXiv cs.CV17:59 UTCJoints, Camera, Action! Co-Generating 3D Motion and Video for Arbitrary Rigs

    Video generation models can now depict remarkably realistic motion.

  5. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCAEON: Unifying Video and 3D World Models

    Current world models for explicit world simulation typically follow two distinct pathways: (1) video generative models (e.g., Sora), which simulate realistic appearances but fail…

  6. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCSolarRenderer: Few-Step Generative Reference Rendering

    Game engines and coding agents can specify the layout, motion, and camera of a scene, yet turning such coarse structure into realistic video requires a renderer that follows the s…

  7. arXiv cond-mat.mtrl-sci17:59 UTCGBClaw: An agentic AI framework for atomistic grain boundary research and mechanistic discovery

    Agentic artificial intelligence (AI) systems hold immense potential for automating complex workflows in materials discovery and design, but extending them to domain-intensive mech…

  8. arXiv cs.RO17:59 UTCLearning Adaptable Dexterous Skills via Hybrid Dexterous Mimicking

    Dexterous multi-finger hands hold promise to unlock diverse skills like functional grasps, in-hand reorientation, and dynamic handover that the human-designed world assumes, yet e…

  9. arXiv cs.RO17:59 UTCUniWALM: Unified World Action Language Model for Embodied Robot Control

    Motivated by the human ability to integrate experience across language, perception, and action, we introduce UniWALM, a unified world-action-language model that learns video, acti…

  10. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCPsycheMME: A Psychology-Informed Benchmark for Social Understanding and Interaction in Videos

    Understanding human needs and selecting responses require distinct judgments that aggregate accuracy can obscure.

Releases

48 pieces, the newest 12 here.

  1. Apple Developer releases23:00 UTCApp Store Connect Update
  2. ComfyUI22:44 UTCComfyUI 0.42.3: ComfyUI v0.42.3
  3. npm releases22:23 UTC@anthropic-ai/sdk 0.137.0
  4. Anthropic TypeScript SDK22:16 UTCsdk-v0.137.0
  5. Anthropic Python SDK22:13 UTCAnthropic Python SDK 1.17.0: api, add org webhook endpoints and user profile enforcement events
  6. mise21:53 UTCmise-system-v2026.10.4
  7. Gemini CLI21:17 UTCRelease v0.65.0
  8. Claude Code20:46 UTCClaude Code 2.1.305: CLAUDECODERETRYWATCHDOGUSAGELIMITRECHECKMS so unattended retry mode (CLAUDECODERETRYWATCHDOG) notices a…
  9. Turborepo20:36 UTCTurborepo v2.11.10
  10. ComfyUI20:34 UTCComfyUI 0.42.2: ComfyUI v0.42.2
  11. GitHub CLI19:42 UTCGitHub CLI 2.102.1
  12. Anthropic TypeScript SDK18:46 UTCaws-sdk-v0.9.0

New Repos & Packages

30 pieces, the newest 8 here.

  1. npm #ai-agent23:27 UTCpi-mcp-extension 1.10.0
  2. npm #llm22:07 UTC@langchain/classic 1.0.54
  3. npm #llm22:04 UTC@langchain/anthropic 1.5.13
  4. npm #llm22:04 UTC@langchain/core 1.2.20
  5. npm #llm22:03 UTC@langchain/openai 1.6.3
  6. npm #ai-agent21:38 UTCagent-afk 5.328.2
  7. npm #llm21:32 UTC@opentelemetry/instrumentation-openai 0.22.0
  8. npm #mcp21:16 UTCmcporter 0.16.0

Watch

28 pieces, the newest 6 here.

  1. OpenAI · YouTube22:57 UTCBuild a Better Shopping Experience with OpenAI | Shopping Agent Demo
  2. Google Cloud · YouTube21:51 UTCGoogle Cloud A5X instances: Powering next-gen AI with NVIDIA Vera Rubin platform
  3. Microsoft Developer · YouTube21:00 UTCSQL Meets Fabric: Migrate, Mirror, Build
  4. Microsoft Developer · YouTube21:00 UTCGround to Cloud to Fabric: The State of Microsoft SQL
  5. Grafana · YouTube19:40 UTCObservabilityCON 2026 Keynote
  6. Black Hat · YouTube19:07 UTCBlack Hat Europe 2026 | Hear From Our Sponsors

Package releases

55 from the most used packages' own repositories, the newest 15 here.

  1. 23:47 UTCcfn-lint v1.58.0 · every release →
  2. 23:03 UTCcheckov 3.3.30 · every release →
  3. 22:57 UTCzircote/swagger-php 6.18.0 · every release →
  4. 22:53 UTCreact-resizable-panels 4.14.8 · every release →
  5. 22:43 UTCfastmcp v3.4.11 · every release →
  6. 22:35 UTCgoogle-cloud-aiplatform v2.6.0 · every release →
  7. 22:16 UTCjsonpath-ng v1.12.0 · every release →
  8. 22:01 UTCopenfeature-provider-posthog-v0.1.111 · every release →
  9. 21:48 UTC@smithy/util-utf8 @smithy/core@3.36.1 · every release →
  10. 21:15 UTCparse 1.22.4 · every release →
  11. 21:06 UTCzbateson/mail-mime-parser 4.0.7 · every release →
  12. 21:06 UTCazure-core azure-storage-queue_12.18.1 · every release →
  13. 20:57 UTC@azure/abort-controller @azure/arm-storage_21.0.0 · every release →
  14. 20:53 UTC@opentelemetry/instrumentation-mongodb instrumentation-browser-navigation-v0.17.0 · every release →
  15. 20:37 UTCpydocket rust/v0.4.0 · every release →