Tech news, October 20, 2026
Tuesday: 620 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 12:41 UTC, in the sources' own words.
- LeadCoreWeave Direct-to-Expert: Work With the Engineers Who Built CoreWeave Cloud
CoreWeave Direct-to-Expert brings your team expert assistance in minutes from the engineers who built CoreWeave Cloud, via the channels you’re already using.
- Newsllm-d 1.0 hardens open-source AI inference for production
The distributed inference framework makes serving large models on your own infrastructure reliable and affordable for the agentic era.
- NewsEnterprise features October roundup
This month's Enterprise releases help central teams take AI-built apps to production: deploy in your own AWS or Azure account, EU inference, Organizations, workspace policies and…
- OutageIssue in creating new LKE Enterprise cluster across regions.
We are currently investigating an issue affecting the provisioning of new LKE Enterprise (LKE-E) clusters across all regions.
- SecurityCVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service.
- Deadlinegemini-2.5-flash shuts down today
Replacement: gemini-3.8-flash or gemini-3.5-flash-lite.
News
174 pieces, the newest 20 here.
- eMudhra CA compromise fixes available
This blog post was updated with additional information related to libnss3 and Java applications on October 22, 2026.
- Announcing Amazon ECS Gateway, a managed ingress solution for your ECS services
AWS announces Amazon Elastic Container Service (Amazon ECS) Gateway, a new resource that simplifies ingress networking for containerized applications by dynamically provisioning a…
- Khronos Group Welcomes GRENETA as Associate Member
GRENETA is a South Korean deep-tech company developing 3D spatial data infrastructure for Physical AI, robotics, and industrial simulation.
- Amazon DynamoDB global tables now support disassociating replicas
Amazon DynamoDB global tables now support disassociating a replica without deleting its table or data.
- Run Agentic Workloads Safely at Scale with CoreWeave Sandboxes
CoreWeave Sandboxes delivers isolated execution for RL, agent tool use, and model evaluation, on your clusters or as a serverless runtime.
- New CoreWeave SUNK Capabilities Help Teams Build Modern AI Research Clusters
Why SUNK matters for teams building modern AI research clusters: a faster path to productive training, less compute fragmentation, and deeper operational visibility.
- 8 eMudhra certificates are compromised. Here's what you need to know
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates.
- JetBrains Plugin Developer Conf 2026: AI, New APIs, and More
What does the rise of AI agents mean for plugin development?
- The frontier loves feature flags
Two ideas stand out: using classification to drive automation, and treating feature flags as the last line of defense.
- dbt Champions: What we learned from founding members
Six months in, our first 30 dbt Champions show how encouragement, Big Projects, and finding your people help a community grow.
- Upcoming Critical PHP Security Release
The PHP security team would like to give advance notice of an upcoming security release.
- WebSocket support is now generally available
WebSocket support in Vercel Functions is now generally available.
- Horizon Context: Put Business Knowledge to Work for AI
Horizon Context is in public preview with 18 metadata connectors, steward permissions and description propagation to ground AI in business context.
- Liquid Cooling for AI Data Centers: Run Cold, Act Bold
Liquid cooling enables CoreWeave to run AI hardware at peak performance with a significant reduction in water needs.
- Source material: Designer Ben Ganz on pushing the limits of what we can do
From experimental typography and print artifacts to architecture, furniture, and fashion, PIN-UP Magazine’s creative director explores how materials, systems, and unexpected conne…
- Limit agent permissions and spend in AWS Transform custom
AWS Transform custom runs an autonomous agent with shell access over your source code, using your AWS credentials.
- Managed RAG search inside the sovereign perimeter: Gemini on GDC enterprise search
National security agencies and other sovereign and highly regulated organizations handle incredibly sensitive data such as classified reports, field manuals, and sensitive multi-m…
- [In preview] Public Preview: Disable VNet peering route
Announcing the public preview of disable VNet peering route, a route-table capability that gives you more control over traffic between peered virtual networks.
- Kafka Isn’t a Database, But We Gave It a Query Engine Anyway - WarpStream
WarpSteam Events are a built-in observability layer that capture Agent logs, ACL decisions, and pipeline execution logs.
- NVIDIA Cosmos3-H-Dreams: Bringing Clinical Surgery to Life Through Generative Simulation
New Models
3 pieces.
- New model: Mistral: Voxtral TTS 3
Voxtral TTS 3 is Mistral's text-to-speech model.
- New model: Mistral: Voxtral Small Transcribe 3
Voxtral Small Transcribe 3 is Mistral's flagship speech-to-text model.
- New model: Mistral: Voxtral Mini Transcribe 3
Voxtral Mini Transcribe 3 is Mistral's compact speech-to-text model.
Security Desk
88 pieces, the newest 10 here.
- PSA: Upcoming Critical PHP Security Release
PHP has released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities announced in this advance notice.
- Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.
Enable native runtime protection for GKE in just one click.
- php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure.
- CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution
CVE-2026-101767 is a critical (CVSS 9.8) unauthenticated SQL injection vulnerability in Oracle E-Business Suite 12.2.3–12.2.15.
- USN-8944-2: ca-certificates update
USN-8944-1 updated ca-certificates.
- The 10 best email security software platforms in 2026
Compare 10 email security platforms for phishing, BEC and automated response, plus workforce protection across training, devices and AI use.
- Critical: Pillow: Heap buffer overflow in ImagingJpegDecode
Affects Pillow.
- CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
Bulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT Description: CICD-toolchain-for-serverless-applications…
- Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
- The 9 best phishing simulation tools in 2026
Compare nine phishing simulation tools for realistic email, voice, SMS and deepfake exercises, adaptive training and broader workforce protection.
Technical Guides
23 pieces, the newest 10 here.
- Beyond the KV cache: Training and serving i14’s Laplace 3B linear attention model on AWS Trainium2 with native PyTorch
Learn how i14 trained and served Laplace 3B, a linear attention model, on AWS Trainium2 using native PyTorch.
- Work management context for AI agents with Smartsheet MCP on AWS
The Smartsheet Model Context Protocol (MCP) Server lets AI agents read, update, and act on live work management data.
- Workflow context for AI agents with Smartsheet MCP on AWS
The Smartsheet Model Context Protocol (MCP) Server lets AI agents read, update, and act on live data.
- From data to decisions: Conversational supply chain intelligence with Amazon Quick and Amazon Bedrock AgentCore
Enterprise supply chains are data-rich but insight-poor, with the data to decide scattered across ERP, monitoring, procurement, and email.
- Fine-tuning GPT-OSS-20B for multilingual reasoning on Amazon SageMaker HyperPod
Learn how we fine-tuned GPT-OSS-20B for multilingual reasoning on Amazon SageMaker HyperPod, and how to decide between supervised fine-tuning (SFT) and reinforcement learning with…
- How Octave built a secure multi-tenant AI foundation on Amazon Bedrock
Octave built a secure, multi-tenant AI foundation on Amazon Bedrock, using Cohere Embed v4 for embeddings and Amazon Bedrock AgentCore for isolated agent execution, to power a Com…
- Access OpenAI GPT models on Amazon Bedrock from Canada with cross-Region inference
Canadian organizations can now access OpenAI GPT-5.6, GPT-6, and GPT-6.1 models on Amazon Bedrock from the Canada (Central) and Canada West (Calgary) Regions using cross-Region in…
- Discover tools at runtime with AWS Agent Registry
Hardcoded tool wiring breaks down as an agent's catalog grows from a handful of tools to hundreds.
- Securing AI agent identity with X.509 PKI on AWS
Learn how to secure multi-agent AI systems with cryptographic identity using Keyfactor EJBCA and AWS services.
- How Eon built multi-cloud investigation with an MCP Gateway on Amazon Bedrock AgentCore
Learn how Eon replaced per-tool credentials and local MCP processes across AWS, GCP, and Azure with a single authenticated Amazon Bedrock AgentCore gateway, giving more than 100 d…
AI in the Field
9 pieces, the newest 6 here.
- Zohran Mamdani Backs Major Expansion of New York’s Data Center Moratorium
At the People's AI Assembly, hosted by AI Now and More Perfect Union, NYC Mayor Zohran Mamdani and comedian Ilana Glazer discuss data center expansion and how the public can reass…
- Notice of Order Regarding Exclusion and Removal of DeepSeek Products From Federal Civilian Executive Branch Information Technology Systems and Procurements
The Department of Homeland Security is publishing notice of the Secretary of Homeland Security's issuance of an order (1) excluding information technology products and services de…
- Medicare Program; Implementation of Sections 6219, 6220, and 6224 of the Consolidated Appropriations Act, 2026
This proposed rule would implement section 6219 (Adjustments to Medicare Part D Cost-Sharing Reductions for Low-Income Individuals), section 6220 (Requiring Enhanced and Accurate…
- Physics-informed machine learning: a hybrid lens for fluid dynamics
Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01319-4 A neural network approach bridging Lagrangian and Eulerian perspectives transforms s…
- Agentic inequality
Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01318-5 Sharp et al.
- Lagrangian–Eulerian learning of flow field and trajectories with TrajectoryFlowNet
Nature Machine Intelligence, Published online: 20 October 2026; doi:10.1038/s42256-026-01316-7 Wan et al.
Columns
14 pieces, the newest 6 here.
- Anthropic Does Not Understand Why Its Draft Bill Was Unacceptable and Troubling
Anthony Cimino offered the closest thing to an official response we have seen on the leaked Anthropic draft bill I covered on Saturday.
- Battle Drones - a vibe coded RTS with audio-based multiplayer
My latest vibe coded game experiment is a Command & Conquer style RTS (Real Time Strategy) game called Battle Drones ( play it here ).
- The Programmable Data Center — Evan Conrad, SF Compute
From GPU trading to physical settlement, independent markets, and programmable compute
- What’s the ROI of software engineers’ spending on AI?
AI spending has greatly increased at most companies this year, but has it actually changed shipping velocity and PR output?
- Latest open artifacts (#25): DeepSeek V4.1 Flash 1017, American-made models, and new regulatory controls in the US & China
Western open models strike back
- 30 Months on the Exponential (in Charts)
My new book is out today...
Research
148 pieces, the newest 10 here.
- Diffusion Sensitivity Geometry and Strong Duality for Optimal Privacy-Utility Tradeoffs
Existing approaches to differential privacy in diffusion models rely on loose sensitivity bounds and isotropic Gaussian noise, leading to unnecessary estimation error.
- AgentPolicyForge: From Executable Environments to Policy Benchmarks and Adaptive Guards
Customized agent deployments define policies over tools, resources, and execution conditions.
- PerMIT: Securing Persistent Memory for LLM Agents via Machine-Checked Integrity Theorems and Scalable Community Trust
Persistent memory is a largely undefended surface for injection and poisoning, and the same risk limits memory sharing among agents.
- Joints, Camera, Action! Co-Generating 3D Motion and Video for Arbitrary Rigs
Video generation models can now depict remarkably realistic motion.
- AEON: Unifying Video and 3D World Models
Current world models for explicit world simulation typically follow two distinct pathways: (1) video generative models (e.g., Sora), which simulate realistic appearances but fail…
- SolarRenderer: Few-Step Generative Reference Rendering
Game engines and coding agents can specify the layout, motion, and camera of a scene, yet turning such coarse structure into realistic video requires a renderer that follows the s…
- GBClaw: An agentic AI framework for atomistic grain boundary research and mechanistic discovery
Agentic artificial intelligence (AI) systems hold immense potential for automating complex workflows in materials discovery and design, but extending them to domain-intensive mech…
- Learning Adaptable Dexterous Skills via Hybrid Dexterous Mimicking
Dexterous multi-finger hands hold promise to unlock diverse skills like functional grasps, in-hand reorientation, and dynamic handover that the human-designed world assumes, yet e…
- UniWALM: Unified World Action Language Model for Embodied Robot Control
Motivated by the human ability to integrate experience across language, perception, and action, we introduce UniWALM, a unified world-action-language model that learns video, acti…
- PsycheMME: A Psychology-Informed Benchmark for Social Understanding and Interaction in Videos
Understanding human needs and selecting responses require distinct judgments that aggregate accuracy can obscure.
Releases
48 pieces, the newest 12 here.
- App Store Connect Update
- ComfyUI 0.42.3: ComfyUI v0.42.3
- @anthropic-ai/sdk 0.137.0
- sdk-v0.137.0
- Anthropic Python SDK 1.17.0: api, add org webhook endpoints and user profile enforcement events
- mise-system-v2026.10.4
- Release v0.65.0
- Claude Code 2.1.305: CLAUDECODERETRYWATCHDOGUSAGELIMITRECHECKMS so unattended retry mode (CLAUDECODERETRYWATCHDOG) notices a…
- Turborepo v2.11.10
- ComfyUI 0.42.2: ComfyUI v0.42.2
- GitHub CLI 2.102.1
- aws-sdk-v0.9.0
New Repos & Packages
30 pieces, the newest 8 here.
Watch
28 pieces, the newest 6 here.
- Build a Better Shopping Experience with OpenAI | Shopping Agent Demo
- Google Cloud A5X instances: Powering next-gen AI with NVIDIA Vera Rubin platform
- SQL Meets Fabric: Migrate, Mirror, Build
- Ground to Cloud to Fabric: The State of Microsoft SQL
- ObservabilityCON 2026 Keynote
- Black Hat Europe 2026 | Hear From Our Sponsors
Package releases
55 from the most used packages' own repositories, the newest 15 here.
- cfn-lint v1.58.0 · every release →
- checkov 3.3.30 · every release →
- zircote/swagger-php 6.18.0 · every release →
- react-resizable-panels 4.14.8 · every release →
- fastmcp v3.4.11 · every release →
- google-cloud-aiplatform v2.6.0 · every release →
- jsonpath-ng v1.12.0 · every release →
- openfeature-provider-posthog-v0.1.111 · every release →
- @smithy/util-utf8 @smithy/core@3.36.1 · every release →
- parse 1.22.4 · every release →
- zbateson/mail-mime-parser 4.0.7 · every release →
- azure-core azure-storage-queue_12.18.1 · every release →
- @azure/abort-controller @azure/arm-storage_21.0.0 · every release →
- @opentelemetry/instrumentation-mongodb instrumentation-browser-navigation-v0.17.0 · every release →
- pydocket rust/v0.4.0 · every release →