The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, October 22, 2026

Thursday: 657 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadLeRobot Trains on Lance, Mining Robot Fleet Data Demo, Vector Search at 10B Scale

    LeRobot trains directly from Lance datasets in object storage, a hybrid scan mines robot fleet data for edge cases, and distributed search reaches 1,066 QPS across 10B vectors, pl…

    LanceDB
  2. NewsBank Model Risk Guidance No Longer Covers Generative AI. Who Owns the Testing?

    SR 26-2 left generative AI and AI agents out of bank model risk guidance.

    Anaconda
  3. NewsPyPI was subpoenaed

    In March and April 2023, the Python Software Foundation (PSF) received three (3) subpoenas for PyPI user data.

    PyPI
  4. OutageBandwidth Local Market Impairment - 521 - Jefferson City, MO

    We are experiencing an impairment on the Bandwidth network which may affect a portion of calls.

    Bandwidth
  5. SecurityRe: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state

    Posted by Christian Fischer on Oct 21 Hello, > On 21.10.2026 16:44 CEST Jakub Zelenka <bukka () php net> wrote: > > Affected versions are PHP 8.2 before 8.2.35, PHP 8.3 before 8.3…

    oss-security (Openwall)
  6. Deadlinegemini-omni-flash-preview shuts down today

    Replacement: gemini-omni-1.1-flash.

    Google (Gemini API)

News

202 pieces, the newest 20 here.

  1. PyTorch23:52 UTCPyTorch Conference North America 2026: Accelerating Open Intelligence Together

    PyTorch Conference North America 2026 brought 3,500+ attendees to San Jose on October 20–21 for two days focused on accelerating open intelligence and exploring the impact of PyTo…

  2. Railway23:31 UTCPreliminary Report: Oct 21st Security Incident

    Preliminary report detailing Railway's October 21st security incident.

  3. Vercel22:28 UTCEight more TLDs now eligible for a free domain with Pro

    Every Pro team can claim a free domain for one year.

  4. Hugging Face22:24 UTCTurning Database Grading into RL Rewards: Post-Training Agents with ThinkingBox
  5. GitHub Changelog22:19 UTCCustom skills, agents, and MCP servers in usage metrics API

    Copilot usage metrics now show the names of the skills, custom agents, Model Context Protocol (MCP) servers, slash commands, and plugins that your organization creates, instead of…

  6. Netflix TechBlog22:19 UTCSingle-tenant Titus: VM-level isolation on a multi-tenant container platform

    Samartha Chandrashekar & Nick Parker You click play on a Friday night, and in the second that follows, dozens of services answer in milliseconds.

  7. Google Workspace Updates22:08 UTCGoogle Vault now supports filtered exports for Gemini in Workspace

    Google Vault now supports eDiscovery filtered exports for Gemini in Workspace.

  8. Snowflake21:59 UTCPublic Sector Data Modernization for AI Readiness

    See how public sector data modernization helps agencies replace legacy systems, unify data and build a secure foundation for AI readiness.

  9. WebKit21:22 UTCRelease Notes for Safari Technology Preview 255

    Safari Technology Preview Release 255 is now available for download for macOS Golden Gate and macOS Tahoe.

  10. What's New with AWS21:10 UTCAmazon Connect Customer now supports customizing the Customer Profiles app on the agent workspace

    Amazon Connect Customer Profiles now allows administrators to customize which customer data that agents see in the agent workspace, and how it is displayed, using layouts they bui…

  11. EDB (EnterpriseDB)21:08 UTCCustomer 0 for Sovereign AI: How EDB Runs Mission Control AI on EDB Postgres AI

    EDB runs its own revenue reviews, renewals, and executive metrics on the same data and AI platform it sells.

  12. Google Cloud21:00 UTCExpanding Claude availability and deployment choice on Google Cloud

    Every organization has unique requirements for building and scaling generative AI.

  13. What's New with AWS21:00 UTCAWS Continuum for code vulnerabilities is now generally available

    Today, AWS announces the general availability of AWS Continuum for code vulnerabilities.

  14. WarpStream20:58 UTCYour WarpStream Questions, Answered - WarpStream

    WarpStream questions answered — architecture, BYOC vs.

  15. WarpStream20:58 UTCCloud Disks are (Really!) Expensive - WarpStream

    Cloud block storage costs 24x or more per GiB than S3.

  16. What's New with AWS20:54 UTCAmazon OpenSearch Service introduces intelligent ingestion for logs and documents in Amazon S3

    Amazon OpenSearch Serverless now offers intelligent ingestion, a fully managed feature that turns logs and documents stored in Amazon S3 into searchable content in Amazon OpenSear…

  17. GitHub Changelog20:44 UTCGlobal default for Copilot features generally available

    In September, we announced a global default policy for generally available GitHub Copilot features and supported client capabilities on Copilot Business and Copilot Enterprise pla…

  18. Cohere20:36 UTCCohere Model Vault: Verifiable Confidential AI Inference

    Explore how Cohere Model Vault secures AI inference with confidential CPU and GPU computing, end-to-end encryption, and remote attestation.

  19. AWS News20:33 UTCAWS Continuum for code vulnerabilities is now generally available

    AWS Continuum for code vulnerabilities is a new security service that uses AI to automatically find, validate, and prioritize code vulnerabilities in your environment, then delive…

  20. Replit20:24 UTCReplit Monitoring Agent: Your very own software engineering team

    Anyone who has published an app knows that dreaded message from a user: “Doesn’t work for me”.

New Models

5 pieces.

  1. NVIDIA18:23 UTCOpen model: nvidia/InternVideo2-CLIP-anomaly-detection

    New open weights from NVIDIA on the Hugging Face Hub.

  2. Tencent Hunyuan09:48 UTCOpen model: tencent/WeVisOne-VL-4B

    New open weights from Tencent Hunyuan on the Hugging Face Hub.

  3. Tencent Hunyuan09:47 UTCOpen model: tencent/WeVisOne-VL-2B

    New open weights from Tencent Hunyuan on the Hugging Face Hub.

  4. Tencent Hunyuan07:44 UTCOpen model: tencent/Hy-SimulMT-30B-A3B-Interleave

    New open weights from Tencent Hunyuan on the Hugging Face Hub.

  5. Tencent Hunyuan07:29 UTCOpen model: tencent/Hy-SimulMT-30B-A3B

    New open weights from Tencent Hunyuan on the Hugging Face Hub.

Security Desk

81 pieces, the newest 10 here.

  1. oss-security (Openwall)23:23 UTCCVE-2026-113873, CVE-2026-113874, CVE-2026-113875, CVE-2026-113876: HAPI FHIR cross-tenant partition override, authorization bypasses and gzip heap exhaustion

    Posted by Abhinav Agarwal on Oct 22 CISA has published four CVE records and CSAF advisory VA-26-294-01 for vulnerabilities in HAPI FHIR, an open-source Java implementation of HL7…

  2. Wiz Research22:51 UTCASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context

    Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime

  3. oss-security (Openwall)22:47 UTCCPython: [CVE-2026-114583] tarfile.tar_filter path traversal bypass allows writing outside the extraction directory

    Posted by Alan Coopersmith on Oct 22 -------- Forwarded Message -------- Subject: [Security-announce][CVE-2026-114583] tarfile.tar_filter path traversal bypass allows writing outs…

  4. oss-security (Openwall)22:26 UTCPlone security fix 20261022: information disclosure

    Posted by Maurits van Rees (Plone) on Oct 22 On behalf of the Plone/Zope Security Team I announce an information disclosure vulnerability in `plone.app.content`.

  5. Wordfence22:24 UTCAttacks on PHP2Shell Continue, But No Known Compromises as a Result Yet

    On October 21st, 2026, the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.

  6. oss-security (Openwall)22:24 UTCRe: Information for Python users regarding eMudhra / emSign CA certificate security incident

    Posted by Valtteri Vuorikoski on Oct 22 Having spent the day whacking this particular molehill, my strong opinion is that these packages (minus certifi) should stop vendoring root…

  7. CERT/CC22:23 UTCVU#763488: Memory corruption vulnerabilities in PHP

    Overview Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12.

  8. Chrome Releases20:43 UTCChrome Beta for Desktop Update

    The Beta channel has been updated to 157.0.8103.15 for Windows, Mac and Linux.

  9. AWS Security Bulletins20:40 UTCCVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

    Bulletin ID: 2026-147-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:30 PM PDT Description: aws-c-mqtt is a C99 implementation of the…

  10. Python Security Announcements20:35 UTC[Security-announce][CVE-2026-114583] tarfile.tar_filter path traversal bypass allows writing outside the extraction directory

    There is a MEDIUM severity vulnerability affecting CPython.

Technical Guides

23 pieces, the newest 10 here.

  1. Microsoft Source21:12 UTCMicrosoft and the Public Library Association expand free AI literacy training

    The post Microsoft and the Public Library Association expand free AI literacy training appeared first on Source.

  2. AWS Cloud Operations18:43 UTCControlled self-healing Amazon EKS Clusters with AWS DevOps Agent and A2A remote agents

    1.

  3. AWS Machine Learning18:06 UTCAmazon Polly delivers a major upgrade to its Generative engine

    The Amazon Polly Generative engine gets a major upgrade: more expressive, more accurate speech with low latency, plus 14 new voices across 9 locales and general availability of Hi…

  4. AWS Machine Learning18:01 UTCHow IskayPet unified corporate knowledge with Amazon Bedrock Managed Knowledge Bases

    Learn how IskayPet, a leading pet care company in Iberia, built a multilingual corporate knowledge assistant on Amazon Bedrock Managed Knowledge Bases.

  5. AWS Machine Learning18:00 UTCAnnouncing new ways to customize models with SageMaker AI, without managing GPUs

    Amazon SageMaker AI serverless model customization now includes training sessions, generally available today.

  6. AWS Machine Learning18:00 UTCWrite your own training loop — without managing GPUs — with Amazon SageMaker training session APIs

    Amazon SageMaker AI training session APIs let you write your own LLM training loop (SFT, RL, or custom objectives) in a Python script while the service runs the GPUs.

  7. AWS Machine Learning17:48 UTCDeploy AI in a HIPAA-eligible environment with Amazon Quick

    Amazon Quick is a HIPAA-eligible service, but eligibility is not the same as compliance.

  8. AWS Machine Learning17:45 UTCStream low-latency speech from AI agents using Kokoro TTS on Amazon SageMaker AI

    Voice agents often wait for an agent's full response before starting speech synthesis, adding latency users feel directly.

  9. NVIDIA Developer16:39 UTCHow to Read Data into GPU Memory in Python with NVIDIA GPUDirect Storage

    GPU applications are processing ever-growing datasets with increasingly powerful accelerators.

  10. AWS Machine Learning16:30 UTCStop guessing auto scaling targets for TTS on Amazon SageMaker AI

    Teams deploying custom text-to-speech models on Amazon SageMaker AI often guess at autoscaling thresholds, and a wrong guess either wastes GPU spend or breaches a latency SLO.

AI in the Field

5 pieces.

  1. MIT News20:45 UTCThis design software reimagines everyday objects as self-aware devices

    “X-Hinges” helps design and 3D print items like lamps and gloves with an interactive twist: automatically embedded sensors that perceive and adaptively respond to human contact.

  2. AI Now Institute17:54 UTC“Apocalypse Now and Then”: Author Arundhati Roy on Artificial Intelligence, Capitalism & More

    Following the People's AI Assembly, acclaimed author Arundhati Roy joins Amy Goodman and Nermeen Shaikh to discuss the rise of artificial intelligence, which she calls "capitalism…

  3. AWS for SAP17:45 UTCYour CFO wants SAP AI results next quarter – here’s where to start

    The challenge Last month, I sat down with a CIO for a manufacturing company in Johannesburg.

  4. Federal Register (AI)04:00 UTCAgency Information Collection Activities; Proposed Collection; Comment Request; Fraud.gov Tip Intake and Referral Form

    The Department of the Treasury, as part of its continuing effort to reduce paperwork and respondent burden, invites the general public and other federal agencies to comment on the…

  5. npj Digital Medicine00:00 UTCLarge language models for multimodal clinical predictive modeling: a systematic review

    npj Digital Medicine, Published online: 22 October 2026; doi:10.1038/s41746-026-03349-z Large language models for multimodal clinical predictive modeling: a systematic review

Columns

12 pieces, the newest 6 here.

  1. swyx (Latent Space)17:40 UTCWhy AI Compute Comes in Rectangles — Erik Bernhardsson, Modal CEO

    Elastic GPUs, sandbox growth, and the economics of the agent cloud

  2. Zvi Mowshowitz15:13 UTCAI #191: The Hackening Begins

    It was the probably worst day in cybersecurity history.

  3. Dwarkesh Patel15:02 UTCWhat will computer chips look like in 2045?

    What I learned from touring Intel’s most advanced fab and talking to its leadership.

  4. Gergely Orosz (The Pragmatic Engineer)14:08 UTCThe Pulse: Time to rethink software security because of AI?

    A month’s worth of security breaches in a single day – will things get worse before they improve?

  5. swyx (Latent Space)14:03 UTCYou are the Team — Anekha Sokhal, Moshi

    How Moshi turns market data into actionable insights, and why AI tools have to fit the trader’s workflow.

  6. Raymond Chen14:00 UTCWhy didn’t we use Co­Register­Initialize­Spy to clean up the unmarshalable delegate?

    Looking more closely at the function's behavior and requirements.

Research

154 pieces, the newest 10 here.

  1. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCA Unified Framework for Image-to-3D Part Generation via Variable Granularity

    Controllable 3D part generation is pivotal for digital asset creation, yet existing methods lack the flexibility to accommodate diverse user workflows requiring varying levels of…

  2. arXiv cs.CV17:59 UTCSensorimotor Alignment: A Platonic Proxy for Embodied Policy Success

    Robotic foundation models are typically evaluated through costly closed-loop rollouts, which motivates cheap offline proxies for model capability.

  3. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCReading, Writing, Sharing, and Interacting with the World through Video

    Video foundation models have advanced rapidly in understanding and generating visual sequences, while video world models seek to capture the underlying dynamics of the world they…

  4. arXiv cs.AI17:59 UTCDirect Pass@$k$ Optimization for Thought Pruning: Balancing Quality and Diversity in Test-Time Reasoning

    Test-time scaling has emerged as a key inference strategy for reasoning models, where a model generates a large number of candidate solutions in the hope of finding at least one c…

  5. arXiv math.NA17:59 UTCPhase Transition from Random Features to Fully Trainable Networks

    Constructing accurate and computationally tractable approximation spaces is a fundamental task in scientific computing.

  6. arXiv stat.ML17:59 UTCReliable AI-Assisted Decisions via Selective Auditing

    We consider online monitoring of an AI system that produces a sequence of decisions.

  7. arXiv cs.CV17:59 UTCSpectralCanary: Embarrassingly Simple Low-Frequency Traces for T2I Dataset-Use Auditing

    Auditing whether a text-to-image (T2I) model was fine-tuned on a particular image collection is difficult: a model can absorb collection-level visual characteristics without repro…

  8. arXiv cs.LG17:58 UTCCost-Aware Abstention for LLM-Based IT Ticket Classification

    Wrong automatic routing of an IT support ticket can cost more than human triage.

  9. arXiv cs.LG17:58 UTCMETTA: Memory-Enhanced Test-Time Adaptation for Meta-Reinforcement Learning

    Meta-reinforcement learning aims to train agents that adapt quickly to unseen tasks from limited interaction, but this requires representing task evidence over long interaction hi…

  10. arXiv (vision, retrieval & HCI) cs.CV17:57 UTCBrickWright: Agentic Creation of Physically Feasible Brick Builds

    Frontier coding agents are becoming increasingly adept at 3D modeling.

Releases

53 pieces, the newest 12 here.

  1. webpack23:45 UTCwebpack 5.112.1: Patch Changes
  2. VS Code23:04 UTC1.143.1
  3. FastAPI22:21 UTCFastAPI 0.161.1: Fix OpenAPI schemas for standalone nullable form unions. PR #16598 by @tiangolo
  4. Claude Code22:18 UTCClaude Code 2.1.309: Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox…
  5. pnpm22:08 UTCpnpm 11.28.8
  6. Pulumi22:07 UTCpkg/v3.272.0: Changelog and go.mod updates for v3.272.0 (#25352)
  7. npm releases21:54 UTCopenai 7.43.0
  8. Bun21:44 UTCBun v1.4.4
  9. Spring Boot21:33 UTCSpring Boot 4.1.2: New Features
  10. OpenAI Node SDK21:31 UTCOpenAI Node SDK 7.43.0: api, Breaking change in a minor release. A Live response's Decisions question instructions can now be a…
  11. Pulumi21:29 UTCPulumi 3.272.0: [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy…
  12. AI SDK21:26 UTC@ai-sdk/zai@3.0.39

New Repos & Packages

26 pieces, the newest 8 here.

  1. npm #llm22:48 UTC@posthog/ai 8.16.1
  2. npm #mcp21:58 UTC@bike4mind/cli 4.0.0
  3. npm #mcp21:19 UTC@ai-sdk/mcp 2.0.83
  4. npm #llm20:46 UTCassistant-stream 0.3.54
  5. npm #mcp20:43 UTC@assistant-ui/react 0.15.31
  6. npm #mcp20:42 UTCpi-mcp-adapter 6.0.0
  7. npm #ai-agent20:09 UTCagent-afk 5.332.0
  8. GitHub #developer-tools18:35 UTCAnubis-Security-Tool/anubis (74 stars)

Watch

33 pieces, the newest 6 here.

  1. Kubernetes · YouTube23:09 UTCSIG Autoscaling Bi-Weekly Karpenter Working Group for 2026-10-22T22:00:07Z.mp4
  2. Cognitive Revolution · YouTube19:41 UTCAI’s Physical Bottlenecks: GPU Markets and the Chip Investment Thesis
  3. Google Cloud Tech · YouTube19:00 UTCPlan your app’s system spec (No code)
  4. Kubernetes · YouTube18:55 UTCSIG Scalability Meeting for 2026-10-22
  5. CNCF · YouTube18:01 UTCMeet William Morgan - Speaker at KubeCon + CloudNativeCon North America
  6. OpenAI · YouTube18:00 UTCUber rolls out ChatGPT Work to 30,000+ employees

Package releases

63 from the most used packages' own repositories, the newest 15 here.

  1. 23:22 UTCimportlib-metadata v9.1.0 · every release →
  2. 23:15 UTCclaude-agent-sdk v0.2.173 · every release →
  3. 23:01 UTChypothesis v6.170.8 · every release →
  4. 22:45 UTCgcp-metadata firestore-v9.4.0 · every release →
  5. 22:09 UTCgreat-expectations 1.24.1 · every release →
  6. 21:49 UTCcuda-bindings cuda-pathfinder-v1.8.4 · every release →
  7. 21:30 UTCcaio 0.12.10 · every release →
  8. 21:24 UTCserialize-javascript v7.1.3 · every release →
  9. 20:33 UTC@effect/sql-drizzle@0.51.1 · every release →
  10. 20:11 UTC@tanstack/history release-2026-10-22-2011 · every release →
  11. 20:10 UTCvirtualenv 21.14.13 · every release →
  12. 19:33 UTCgiggsey/locale 2.10.0 · every release →
  13. 18:49 UTCstrands-agents harness-cli/v0.2.2 · every release →
  14. 18:43 UTC@aws-sdk/types v3.1156.0 · every release →
  15. 18:40 UTCsnowflake-snowpark-python v1.55.3 · every release →