The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, October 24, 2026

Saturday: 126 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadMiniMax M3.1 Flash Now Available on SambaCloud

    Frontier Agentic Performance at a Fraction of the Cost.

    SambaNova
  2. NewsContext Engineering with Deep Agents: How To Remember Without Keeping Everything In Context

    Long-running agents degrade as context piles up.

    LangChain
  3. NewsUsage metrics API adds usage from tools like OpenCode

    The Copilot usage metrics API now reports model usage from more of the tools your developers use with Copilot, including tools like OpenCode that weren’t previously captured in yo…

    GitHub Changelog
  4. OutageMMS Delivery Delays from Twilio to WOM Colombia

    Twilio customers may be experiencing MMS delivery delays from Twilio to WOM network subscribers in Colombia.

    Twilio
  5. SecurityOVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found

    An attacker swapped the binaries on five OVHcloud CLI releases, stayed live for 94 minutes, and deleted the evidence.

    StepSecurity
  6. Deadlinezai-glm-5-2 shuts down in 7 days

    Replacement: Z.ai GLM 5.3.

    Mistral AI

News

10 pieces.

  1. PyPI16:05 UTCPyPI now limits versions to 128 characters

    PyPI now rejects new uploads whose version is longer than 128 characters.

  2. Expo15:00 UTCA 30,000-line Rust GPU engine on Expo, and 120,000 installs without ads

    Doodraw wraps a 30,000-line Rust engine in one Expo app for iPhone, iPad, Android and Windows, and passed 120,000 installs in 180+ countries with no ads.

  3. openSUSE12:00 UTCopenSUSE Board Election 2026 Begins

    The openSUSE Election Committee has announced the start of the 2026 openSUSE Board Election.

  4. Google Cloud release notes07:00 UTCOctober 24, 2026

    App Engine flexible environment.NET Security The following runtime language contains important security updates:.NET 6 and later: 6.0.428, 8.0.415, 10.0.100 The following stacks a…

  5. SambaNova03:19 UTCMiniMax M3.1 Flash Now Available on SambaCloud

    Frontier Agentic Performance at a Fraction of the Cost.

  6. Ollama00:00 UTCSpeech models in Ollama

    Ollama now supports speech models, starting with Phonon from Gradium.

  7. Upstash00:00 UTCHow Upsy Uses MCP Tasks to Keep Agents in a Meeting

    Upsy Meet is a meeting room for AI agents.

  8. Apache DataFusion00:00 UTCBest Practices for Single Row Lookups (Point Queries)

    This blog post covers different techniques to improve the performance of point queries in DataFusion.

  9. Determinate Systems (Nix)00:00 UTCEmergency Legacy Extension now available for NixOS 25.05

    Determinate Secure Packages 25.05 (Emergency Legacy Extension) brings critical security support to NixOS 25.05.

  10. Inside Java00:00 UTCCompromised Certificates and OpenJDK Java Runtimes

    As has been widely reported, the private keys of eight eMudhra intermediate CA certificates have been compromised.

Security Desk

10 pieces.

  1. oss-security (Openwall)22:29 UTCCVE-2025-60493: GPAC/MP4Box: NULL Pointer Dereference in check_media_profile via Crafted MP4 Input

    Posted by Alexander A.

  2. oss-security (Openwall)22:27 UTCPHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)

    Posted by Roman Kuligin on Oct 24 Hello, I have developed a backported.patch for EOL versions of PHP (specifically PHP 5.4, 5.5, and 5.6) to mitigate the critical PHP2Shell Out-of…

  3. oss-security (Openwall)22:25 UTCRe: openjpeg 2.4.0 through 2.5.4 and git master: heap buffer overflow in opj_dwt_encode_and_deinterleave_v() (reversible 5/3 forward DWT, encoder)

    Posted by Security @ Red Eagle Tech on Oct 24 Hello, CVE-2026-107080 has been assigned to the issue reported here on 5 October 2026.

  4. oss-security (Openwall)22:23 UTCCVE-2026-111813 etc: Multiple vulnerabilities in Apache Traffic Server prior to 9.2.16/10.1.5/10.2.1

    Posted by Valtteri Vuorikoski on Oct 24 Announcement below was posted to the Apache Traffic Server mailing lists a few days ago.

  5. Aikido Security19:46 UTCAdding Aikido AI pentesting to your existing security stack

    Aikido Security's AI pentesting fits into the stack you already run.

  6. oss-security (Openwall)16:36 UTCRe: Brotli CVE-2026-111497

    Posted by Alan Coopersmith on Oct 24 Yes, https://patchtheplanet.org/brotli reports this as well.

  7. StepSecurity16:21 UTCOVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found

    An attacker swapped the binaries on five OVHcloud CLI releases, stayed live for 94 minutes, and deleted the evidence.

  8. Python Security Announcements14:20 UTC[Security-announce][CVE-2026-115557] Distrust compromised intermediate certificates in ssl module

    Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured.

  9. Qualys02:03 UTCHow to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943)

    Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates.

  10. Debian Security Advisories00:00 UTCDSA-6583-1 libheif - security update

    Multiple security issues were discovered in libheif, a library for reading and writing HEIF and AVIF images.

Technical Guides

4 pieces.

  1. Real Python14:00 UTCAn Intro to Threading in Python

    Learn how to use Python threading to run tasks concurrently, synchronize threads with locks and queues, and avoid race conditions and deadlocks.

  2. Real Python14:00 UTCThree Ways of Storing and Accessing Lots of Images in Python

    Compare three ways of storing images in Python, as PNG files on disk, in LMDB, and in HDF5, with timings for reading and writing lots of images.

  3. Real Python14:00 UTCDictionaries in Python

    Learn how dictionaries in Python work: create and modify key-value pairs using dict literals, the dict() constructor, built-in methods, and operators.

  4. Real Python14:00 UTCPython String Formatting: Available Tools and Their Features

    Learn how Python string formatting works with f-strings, the.format() method, and the modulo operator, plus the strengths of each tool.

Columns

6 pieces.

  1. Murat Demirbas16:30 UTCWhat Do the Frontier Labs Actually Believe?

    I listened to a recent episode of Cal Newport's "Deep Questions" podcast, where he interviews Emile P.

  2. David Heinemeier Hansson12:53 UTCSeven years from China

    I first went to China in 2011, racing for the Lotus/Jetalliance team at Zhuhai in the Intercontinental Le Mans Cup.

  3. Sebastian Raschka11:14 UTCBuilding Reasoning Models from the Ground Up: A Full Video Course

    Over 11 hours of coding videos on evaluation, inference-time scaling, reinforcement learning, and distillation, with Python and PyTorch.

  4. David Heinemeier Hansson10:16 UTCBe a tech bro

    We should all strive to be our brother’s keeper: to look after each other, inspire each other, and simply enjoy each other’s company.

  5. swyx (Latent Space)07:18 UTC[AINews] Kimi 3.1 Pro 104BA-2.8T: Fable-5.1-Class Open Weights narrows Closed-AI lead to 1 month... and Pro Highspeed API with 2-3× speed

    We have Fable at home...

  6. Dan Luu00:00 UTC“We should be more ambitious with the software we build”

    Since early this year, Michael Malis (of pgrust ) has been showing me interesting things he's done and saying [W]e should be more ambitious 1 with the software we build There is,…

Releases

30 pieces, the newest 12 here.

  1. llama.cpp21:21 UTCb11869
  2. Rust20:21 UTCRust 1.99.0
  3. Rust20:21 UTCRust 1.95.0
  4. Rust20:21 UTCRust 1.98.0
  5. mise20:02 UTCv2026.10.19: Security hardening across trust, installs and provenance; lockfiles now rebuilt completely by default
  6. Apache Airflow19:09 UTCproviders-keycloak/0.11.2
  7. Apache Airflow19:09 UTCproviders-smtp/3.2.0
  8. Apache Airflow19:09 UTCproviders-opensearch/1.15.0
  9. Apache Airflow19:09 UTCproviders-vespa/0.1.3
  10. opencode18:05 UTCgithub-v1.2.28: chore(github): pin actions/cache to commit SHA in GitHub Action (#58769)
  11. AI SDK18:03 UTC@ai-sdk/zai@3.0.40
  12. AI SDK18:03 UTC@ai-sdk/xai@5.0.30

New Repos & Packages

23 pieces, the newest 8 here.

  1. npm #ai-agent23:55 UTCalvin-bot 5.161.1
  2. npm #ai-agent22:54 UTCloki-mode 11.77.0
  3. GitHub #mcp22:34 UTChevnsnt/CVEngine (542 stars)
  4. npm #mcp22:12 UTC@copilotkit/mcp-apps-renderer 1.80.0
  5. GitHub #ai-agents21:00 UTCyjid/kensaku (324 stars)
  6. npm #ai-agent20:59 UTCagent-afk 5.335.1
  7. npm #mcp19:54 UTCeve 0.83.2
  8. npm #mcp17:57 UTC@ai-sdk/mcp 2.0.84

Watch

8 pieces, the newest 6 here.

  1. Big Technology · YouTube22:27 UTCGoogle’s CEO on His Biggest Bets: Anthropic, SpaceX, Space TPUs, and more
  2. 20VC · YouTube14:00 UTCInference Will Be $10TRN Market: What No One Sees | Software Investors are F***ed | Naveen Rao
  3. Cognitive Revolution · YouTube11:45 UTCAI:AM Highlights: Clean Neurons, Black October, the GPU Credit Crunch, and Buying the Supply Chain
  4. NVIDIA · YouTube10:42 UTCNVIDIA GTC Berlin 2026 | Live Keynote Pregame
  5. MongoDB · YouTube10:00 UTCDemo: Build Secure Open Banking Consent Workflows with Agentic AI and MongoDB Atlas
  6. GitHub · YouTube06:31 UTCOpen Source Friday: OpenClaw with Hannes Rudolph

Package releases

35 from the most used packages' own repositories, the newest 15 here.

  1. 23:59 UTCsrsly release-v2.5.5 · every release →
  2. 23:51 UTCreactivex v6.1.0 · every release →
  3. 21:52 UTCdoctrine/doctrine-bundle 3.3.3 · every release →
  4. 21:31 UTCreact-resizable-panels 4.15.0 · every release →
  5. 20:41 UTCjsonpointer v3.5 · every release →
  6. 20:39 UTCmultidict v7.2.1 · every release →
  7. 20:27 UTChttp-proxy-middleware v3.0.10 · every release →
  8. 20:14 UTCpreshed release-v3.0.14 · every release →
  9. 19:54 UTCmurmurhash release-v1.0.16 · every release →
  10. 19:33 UTCapprise v2.1.0 · every release →
  11. 18:44 UTCunist-util-visit 5.2.0 · every release →
  12. 17:51 UTCunist-util-visit-parents 6.1.0 · every release →
  13. 17:43 UTCpyee v16.0.0 · every release →
  14. 17:35 UTCrustc-demangle rustfilt-v0.2.2 · every release →
  15. 15:02 UTCstarlette 1.10.0 · every release →