Menu
View
Theme
Text size
The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, October 25, 2026

Sunday: 108 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadJEP targeted to JDK 28: 544: Ahead-of-Time Code Compilation

    The following JEP is targeted to JDK 28: 544: Ahead-of-Time Code Compilation

    Inside Java
  2. NewsWAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset

    This emergency release will add two rules related to the Brotli vulnerability CVE-2026-111497 to the Cloudflare Managed Ruleset.

    Cloudflare Changelog
  3. NewsPyPI now limits versions to 128 characters

    PyPI now rejects new uploads whose version is longer than 128 characters.

    PyPI
  4. OutageElevated errors for Claude Fable 5.1

    A fix has been deployed for the issue affecting Claude services and we are monitoring for recovery.

    Claude
  5. SecurityCVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)Palo Alto Networks Security Advisories
  6. Deadlinezai-glm-5-2 shuts down in 6 days

    Replacement: Z.ai GLM 5.3.

    Mistral AI

News

12 pieces.

  1. JetBrains23:20 UTCBusy Plugin Developers Newsletter – Q3 2026

    Your quarterly dose of plugin dev news, tools, and tips from JetBrains JetBrains Plugin Developer Conf 2026 Is Coming!

  2. EDB (EnterpriseDB)21:46 UTCOwn What’s Next: How to Modernize Your Data Foundation Without Trading One Lock-in for Another

    In nearly every conversation we have about data sovereignty, the first word out of someone’s mouth is residency.

  3. MariaDB Foundation19:11 UTCThe Man Who Benchmarks MariaDB Against the World

    Jonathan Miller has spent 27 years in database performance testing.

  4. .NET18:45 UTC.NET October 2026 Out-of-Band Security Updates

    Out-of-band security updates for.NET address the Brotli decoder vulnerability and tarball ownership vulnerability.

  5. Godot Engine12:00 UTCGodot XR Community Game Jam VI

    The sixth Godot XR Community Game Jam ran from 21 September 2026 until 5 October 2026.

  6. Mozilla11:58 UTCFirefox reunites meme royalty to remind you what the internet used to feel like

    A group of familiar faces from the early web just got back together to ask an important question: What happened to the internet?

  7. Azure SQL11:23 UTCThe paper that split the database in four: inside Azure SQL Database Hyperscale, aka Socrates

    Under the Hood: The Research Behind Microsoft SQL, part 1 The Microsoft SQL team is always innovating.

  8. AI21 Labs08:52 UTCWhy we built a benchmark before training for instruction following

    Instruction-following rewards check the rules, not the task.

  9. Google Cloud release notes07:00 UTCOctober 25, 2026

    Agent Platform Workbench Change 20261025-2230-rc0 Release Change 20261025-2230-rc0 Release Change Installed latest packages from upstream dependencies.

  10. Inside Java00:00 UTCJEP targeted to JDK 28: 544: Ahead-of-Time Code Compilation

    The following JEP is targeted to JDK 28: 544: Ahead-of-Time Code Compilation

  11. Cloudflare Changelog00:00 UTCWAF - WAF Release - 2026-10-25 - Emergency - Cloudflare Managed Ruleset

    This emergency release will add two rules related to the Brotli vulnerability CVE-2026-111497 to the Cloudflare Managed Ruleset.

  12. turbopuffer00:00 UTCCan Your AI Analyst Keep a Secret?

New Models

3 pieces.

  1. Microsoft14:35 UTCOpen model: microsoft/CogACT-v2-RoboDojo

    New open weights from Microsoft on the Hugging Face Hub.

  2. BAAI13:50 UTCOpen model: BAAI/MS-Human-700

    New open weights from BAAI on the Hugging Face Hub.

  3. inclusionAI (Ant Group)02:15 UTCOpen model: inclusionAI/Ling-3.1-flash-base

    New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.

Security Desk

13 pieces, the newest 10 here.

  1. Wiz Research17:55 UTCGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

    An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach.

  2. Wiz Research14:46 UTCBroccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability

    Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.

  3. Microsoft Security Update Guide14:00 UTCCVE-2026-70197 .NET and Visual Studio Remote Code Execution Vulnerability

    Updated product information in the Software Update table.

  4. Microsoft Security Update Guide14:00 UTCCVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability

    Updated product information in the Software Update table.

  5. Microsoft Security Update Guide14:00 UTCCVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability

    Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

  6. AWS Security Bulletins03:13 UTCCVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2

    Read this article

  7. AWS Security Bulletins03:13 UTCCVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

    Read this article

  8. AWS Security Bulletins03:13 UTCCVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection

    Read this article

  9. AWS Security Bulletins03:13 UTCCVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

    Read this article

  10. AWS Security Bulletins03:13 UTCCVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

    Read this article

Technical Guides

5 pieces.

  1. AWS Cloud Financial Management22:52 UTCUnderstanding AWS Savings Plans Recommendations: Management vs. Member Account Views

    If you are managing a multi-account AWS Organization, you might have noticed that Savings Plan recommendations differ between management account (also known as payer account) and…

  2. Real Python14:00 UTCLogging in Python

    Go beyond print() with Python logging.

  3. Real Python14:00 UTCPython Modules and Packages – An Introduction

    Explore Python modules and packages, the two mechanisms that make modular programming possible, and learn how imports find your code.

  4. Real Python14:00 UTCPython REST APIs With Flask, Connexion, and SQLAlchemy – Part 3

    Extend your Flask REST API with a SQLAlchemy one-to-many relationship that adds notes to people, and serve them through new API endpoints.

  5. Real Python14:00 UTCPython's with Statement: Manage External Resources Safely

    Understand Python's with statement and context managers to streamline the setup and teardown phases in resource management.

AI in the Field

2 pieces.

  1. AWS Public Sector22:36 UTCAI-enabled genomic pattern discovery in Epstein-Barr virus on Amazon EC2

    This post, which details a collaboration between a national genomics research institute and Temus using Amazon Web Services (AWS), demonstrates the power of combining deep bioinfo…

  2. AWS Public Sector14:55 UTCAI as force multiplier: Practical AI governance for HCLS security teams

    AI handles triage while analysts handle judgment.

Columns

4 pieces.

  1. Max Woolf21:00 UTCOpenAI and Anthropic cut their LLM prices by up to 80% within a few months. Why?

    What is “the true cost of a token”?

  2. Nathan Lambert11:49 UTCPodcast: Kimi K3.1 Pro, the new cyber reality, and Muse musings

    #20

  3. Thorsten Ball07:11 UTCJoy & Curiosity #103

    Interesting & joyful things from the previous week

  4. Sean Goedecke00:00 UTCDon't anthropomorphize big tech companies

    Bryan Cantrill has a great line from a talk where he cautions against anthropomorphizing 1 Oracle CEO Larry Ellison.

Research

2 pieces.

  1. EleutherAI12:00 UTCTracing Subliminal Learning Through Pretraining

    Cross-model distillation shows subliminal learning survives differences in initialization, data order, corpus, size, and architecture — and that transmitting and acquiring a prefe…

  2. Nature: Computer Science00:00 UTCEmergence of diffusion models from associative memory through memorization and generalization

Releases

15 pieces, the newest 12 here.

  1. llama.cpp23:48 UTCb11889
  2. llama.cpp23:31 UTCb11888
  3. CPython19:41 UTCCPython 3.11.18: Python 3.11.18
  4. CPython18:31 UTCCPython 3.13.18: Python 3.13.18
  5. Ollama18:06 UTCOllama 0.40.11: Ollama can now generate speech on macOS. ollama run plays text or a chat model's reply aloud as the audio is…
  6. pnpm17:54 UTCpnpm 10.34.8
  7. pnpm17:54 UTCpnpm 10.34.9
  8. Qwik17:48 UTCeslint-plugin-qwik@1.20.3
  9. Weaviate14:41 UTCv1.37.18 - eMudhra intermediate certificates security patch
  10. LiteLLM09:41 UTCLiteLLM 1.105.5: Verify this release
  11. LiteLLM09:41 UTCLiteLLM 1.104.7: Verify this release
  12. Open WebUI08:07 UTCOpen WebUI 0.12.4: Load selected skills on demand. Administrators can turn on "Load selected skills on demand" under Admin…

New Repos & Packages

17 pieces, the newest 8 here.

  1. npm #ai-agent23:38 UTCagent-afk 5.337.0
  2. GitHub #mcp20:12 UTCboyuchengz/canvas-mcp (119 stars)
  3. GitHub #generative-ai19:14 UTCharlixay7/Kinoloom (21 stars)
  4. npm #mcp18:44 UTCblume 2.2.6
  5. npm #mcp15:34 UTC@better-auth/mcp 1.7.13
  6. npm #mcp15:34 UTC@better-auth/cimd 1.7.13
  7. GitHub #generative-ai15:24 UTCsiri2moon/moonreel (19 stars)
  8. npm #llm15:23 UTCgitlab-ai-provider 6.23.1

Watch

5 pieces.

  1. CNCF · YouTube20:00 UTCMeet Rani Chowdary Mandepudi - Speaker at KubeCon + CloudNativeCon North America
  2. NVIDIA · YouTube17:10 UTCJensen Huang’s Keynote Highlights at NVIDIA GTC Berlin 2026
  3. CNCF · YouTube00:01 UTCBeyond Software Estimates: Measured Per-Pod... - Jedrzej Wasiukiewicz & Markus Lehtonen, Intel
  4. CNCF · YouTube00:01 UTCWelcome + Opening Remarks - Henrik Rexed, Dynatrace & Iris Dyrmishi, Miro
  5. CNCF · YouTube00:01 UTCOpenTelemetry Beyond Observability: Security, CI/CD, and Network Management - Antoine Toulme, Cisco

Package releases

30 from the most used packages' own repositories, the newest 15 here.

  1. 23:25 UTCmitmproxy v12.3.1 · every release →
  2. 23:00 UTCpreshed release-v3.0.15 · every release →
  3. 22:29 UTCvcrpy v9.2.0 · every release →
  4. 21:44 UTCzip v9.1.1 · every release →
  5. 21:37 UTCguzzlehttp/guzzle 8.3.1 · every release →
  6. 21:36 UTCeventsource-parser v4.1.3 · every release →
  7. 21:34 UTCthinc v8.3.14 · every release →
  8. 21:05 UTCpytest-asyncio v1.4.1 · every release →
  9. 21:01 UTCordered-float v5.5.1 · every release →
  10. 20:31 UTCsse-starlette v3.6.0 · every release →
  11. 20:27 UTCharbor-rewardkit v0.25.0 · every release →
  12. 20:21 UTCphp-debugbar/php-debugbar v3.8.1 · every release →
  13. 19:04 UTCctranslate2 v4.8.4 · every release →
  14. 18:24 UTCpolars py-2.1.0 · every release →
  15. 17:43 UTCdedoc/scramble v0.13.50 · every release →