The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, October 26, 2026

Monday: 590 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadOne week on the APNIC honeynet: 99,000 IP addresses and 173 million events

    Nearly 99,000 unique IP addresses interacted with APNIC's honeynet in just one week, generating 173 million events across SSH, Telnet, SMB, VPN, web, and Android services.

    APNIC Blog
  2. NewsFaster pnpm installs

    pnpm installs on Vercel are now faster, reducing the time spent installing dependencies before your build.

    Vercel
  3. NewsPython 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 are out

    Five expedited security releases to distrust the compromised eMudhra intermediate CA keys.

    Python
  4. Outage[Support] Call Handling Delays

    Due to a high volume of requests, it may be difficult to reach our teams by phone.

    Scaleway
  5. SecurityA week in security (October 19 – October 25)

    A list of topics we covered in the week of October 19 to October 25 of 2026

    Malwarebytes Labs
  6. Deadlinezai-glm-5-2 shuts down in 5 days

    Replacement: Z.ai GLM 5.3.

    Mistral AI

News

155 pieces, the newest 20 here.

  1. Databricks23:20 UTCUnify your productivity and AI data with Lakeflow Connect

    This is the second post in our series on how Lakeflow Connect brings fully managed...

  2. GitHub Changelog22:31 UTCGitHub Copilot assisted permissions generally available

    Assisted permissions are now generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code.

  3. dbt Labs22:27 UTCHow Data Culture measured its way from zero trust to a shippable AI analytics agent

    Data Culture built a 3-step evaluation framework that took one AI analytics deployment from 0% accuracy to 94.7%.

  4. dbt Labs22:24 UTCHow Verily Health monitors wastewater for 30-plus pathogens with a 5-person team and 1 dbt package

    Verily Health's five-person team uses one dbt package to monitor wastewater for over 30 pathogens in near real time.

  5. dbt Labs22:22 UTCHow Kramp cut analyst onboarding from days to minutes with a self-serve dbt Mesh factory

    Kramp used one Terraform module to let 15 domain teams provision governed dbt projects in minutes.

  6. Cloudflare22:01 UTCCross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

    A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests.

  7. OpenAI22:00 UTCGreptile takes bug detection beyond code review with GPT-6 Astra

    How Greptile uses GPT-6 Astra to test user workflows, Daybreak to strengthen security, and Codex to reduce rework.

  8. Postman21:55 UTCHow to load test an API behind a firewall

    Your functional tests pass on every build.

  9. Baseten21:23 UTCBDN Sealed Volumes: publish once, mount anywhere

    BDN Sealed Volumes do for model data what container images do for code: publish once, get a digest, mount it anywhere.

  10. Comet20:40 UTCIntroducing Opik’s Generative Dashboard Builder

    At Comet, we’ve seen firsthand how teams in finance, tech, e-commerce, and beyond use the Opik platform to track critical metrics for monitoring and improving their agents.

  11. What's New with AWS20:24 UTCAmazon ECR now supports replication backfill for existing container images

    Amazon Elastic Container Registry (Amazon ECR) now supports replication backfill, enabling you to replicate existing images in your private registry to your configured replication…

  12. Comet20:07 UTCTrain your own decision model

    Decision models drew wide attention in September, when TypeSafe AI launched Jev, a model that returns probabilities over a fixed set of answers instead of generating text.

  13. Vercel20:00 UTCDiscover 1000+ services on Vercel Connect from the CLI

    You and your agents can now browse and search more than 1000 services available in Vercel Connect without leaving your terminal.

  14. Google Cloud AI & ML20:00 UTCEasy to integrate, compliant by design: Bringing the Swiss Franc to Google Cloud Universal Ledger

    Every day, countless financial transactions are interrupted by slow, expensive, and inflexible conventional payment systems.

  15. AWS Networking & Content Delivery19:53 UTCYour AWS Networking and Content Delivery guide to re:Invent 2026

    The AWS Networking and Content Delivery (CDN) team invites you to join us at re:Invent from November 30 through December 4 2026.

  16. Databricks19:40 UTCHow to teach with Databricks Free Edition

    You can run a full data or AI course on the same platform enterprises use in production - for free...

  17. GitHub Changelog19:15 UTCGPT-6.1 Terra in GitHub Copilot

    GPT-6.1 Terra, OpenAI’s newest model, is now generally available in GitHub Copilot.

  18. Vercel19:00 UTCRun Scale AI’s AgentEnv evals on Vercel Sandbox

    AgentEnv, Scale AI's framework for testing agents against tasks and scoring their results, now runs on Vercel Sandbox.

  19. WebKit18:30 UTCWebKit Features for Safari 27.2

    Safari 27.2 is here, refining Customizable Select, renaming a Grid Lanes property, and delivering 20 bug fixes across accessibility, media, CSS, and more.

  20. PyTorch18:27 UTCOptimizing Streaming Speech Recognition on Arm® Edge Devices with ExecuTorch

    When you’re speaking to a device, you expect text to appear as you talk.

New Models

9 pieces.

  1. OpenRouter19:58 UTCNew model: Amazon: Titan Multimodal Embeddings G1

    Amazon Titan Multimodal Embeddings G1 embeds text, images, or text and image together into a shared vector space for multimodal search and recommendation.

  2. OpenRouter19:58 UTCNew model: Amazon: Titan Embeddings G1 - Text

    Amazon Titan Embeddings G1 - Text is the first-generation Titan text embedding model.

  3. OpenRouter19:58 UTCNew model: Amazon: Titan Text Embeddings V2

    Amazon Titan Text Embeddings V2 is a text embedding model for retrieval, search, and clustering.

  4. OpenRouter18:15 UTCNew model: OpenAI: GPT-6.1 Terra Pro

    GPT-6.1 Terra Pro is the same underlying model as [GPT-6.1 Terra](https://openrouter.ai/openai/gpt-6.1-terra), served with `reasoning.mode` set to `pro` for higher-quality respons…

  5. OpenRouter18:13 UTCNew model: OpenAI: GPT-6.1 Terra

    GPT-6.1 Terra is the mid-tier model in OpenAI's GPT-6.1 series, priced below GPT-6.1 Sol.

  6. Hugging Face Hub16:28 UTCOpen model: LiquidAI/LFM3-1.7B-Base

    Trending on the Hugging Face Hub.

  7. OpenRouter16:00 UTCNew model: HeyGen: HeyGen Voice Turbo

    HeyGen Voice Turbo is a lower-latency version of HeyGen Voice, HeyGen's text-to-speech model.

  8. inclusionAI (Ant Group)05:36 UTCOpen model: inclusionAI/LBS-27B

    New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.

  9. Hugging Face Hub03:57 UTCOpen model: baidu/Unlimited-OCR-2

    Trending on the Hugging Face Hub.

Security Desk

73 pieces, the newest 10 here.

  1. oss-security (Openwall)23:06 UTCCVE-2026-111422: Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

    Posted by Hussein Awala on Oct 26 Severity: low Affected versions: - Apache Airflow SSH provider 4.3.0 before 7.0.1 Description: In apache-airflow-providers-ssh before 7.0.1, SSHR…

  2. Quarkslab23:00 UTCSnapshotting our way to CVE-2026-9539

    This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.

  3. Doyensec23:00 UTCElectroNG is now open source!

    ElectroNG is now free and open source!

  4. CERT/CC22:45 UTCVU#701544: Retraction of mpc-lib hardened derivation fails to protect ancestor isolation

    Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key.

  5. Aikido Security22:15 UTCHow to patch PHP2Shell with free Aikido Images

    Patch PHP2Shell (CVE-2026-109618 and CVE-2026-109619) with free Aikido Images for PHP 5.5 to 8.5.

  6. Socket22:14 UTCSocket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected

    Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

  7. CISA21:44 UTCCISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA Adds Two Known Exploited Vulnerabilities to Catalog mvining Oct 26, 2026 Release Date October 26, 2026 Description CISA has added two new vulnerabilities to its Known Exploit…

  8. oss-security (Openwall)21:31 UTCGodot 4.x: arbitrary code execution via .po translation file Plural-Forms header

    Posted by Tomasz Kaye on Oct 26 A code-execution vulnerability in Godot 4.x translation loading was publicly disclosed on 2026-10-26 [1].

  9. oss-security (Openwall)21:28 UTCCVE-2025-60467: GPAC/MP4Box: Use-After-Free in gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file

    Posted by Alexander A.

  10. Socket21:18 UTCeMudhra, Brotli, and the Long Tail of a Security Fix

    Fixes for eMudhra and Brotli are out.

Technical Guides

12 pieces, the newest 10 here.

  1. AWS Cloud Operations18:04 UTCOperating in the agentic era: AIOps sessions at re:Invent 2026

    Telemetry volume and incident counts keep growing while operations headcount stays flat, and coding tools now produce changes faster than most release processes can review them.

  2. AWS Machine Learning17:56 UTCFleet-wide computer vision lifecycle at the edge with SageMaker SDK v3

    Fleet-wide computer vision needs a model per camera, not one model for the whole fleet.

  3. AWS Machine Learning17:27 UTCGroundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock

    Every time an agent takes a step, it re-reads its entire context before acting.

  4. AWS Machine Learning17:15 UTCBuild agentic retrieval on a Managed Amazon Bedrock Knowledge Base with CDK

    Build enterprise agentic retrieval on a Managed Amazon Bedrock Knowledge Base with the AWS CDK: an agent that routes across two knowledge bases, retrieves through the AgentCore Ga…

  5. NVIDIA Developer16:00 UTCHow NVIDIA Minerva Turns Telemetry Chaos Into Peak GPU Yield

    AI Factories are some of the most technologically complex operational environments ever created.

  6. AWS Cloud Operations15:22 UTCEmbracing Observability for the AI era at re:Invent 2026

    As organizations continue to scale their cloud presence and bring AI agents into production, effective operations become increasingly critical for success.

  7. NVIDIA Developer15:00 UTCHow NVIDIA Mission Control 2.5 Brings Autonomous Recovery to Kubernetes

    Training large-scale AI models on thousands of GPUs is a high-stakes operation where monitoring and automation must be built-in to optimize cluster resiliency...

  8. DigitalOcean Tutorials14:02 UTCCold Start Mechanics: How Warm Pools and Model Caching Actually Work

    Cold starts slow down scalable AI clouds.

  9. Real Python14:00 UTCSingle and Double Underscores in Python Names

    Learn Python naming conventions with single and double underscores to design APIs, create safe classes, and prevent name clashes.

  10. Real Python14:00 UTCPython Protocols: Leveraging Structural Subtyping

    Learn how Python protocols bring static duck typing to your code and help you get the most out of type hints and static type checkers.

AI in the Field

7 pieces, the newest 6 here.

  1. AWS for Industries20:52 UTCAI-enabled ECU validation on AWS using Corellium Atlas virtual ECUs

    Automotive firmware teams face a structural bottleneck: physical electronic control unit (ECU) hardware doesn’t scale at the pace of software development.

  2. MIT News19:00 UTCAt New York Climate Week 2026, MIT connects with a global network

    A cross-section of the MIT community convened discussions on topics ranging from data centers and super pollutants to agriculture and education.

  3. AI Now Institute17:49 UTCWhat Should the Rules for A.I. Companies Actually Be? We Asked the Experts.

    AI Now's Senior Director Kate Brennan joined a roundtable discussion with AI experts and leaders, pushing the conversation away from abstract risk and toward the very real harms c…

  4. AI Now Institute16:46 UTCA.I.’s Rogue Behavior Starts With Its Training

    AI Now's senior research scientist Boyan Milanov points out how the failure to implement standard cybersecurity protocols is the responsibility of AI companies.

  5. Federal Register (AI)04:00 UTCOutbound Investment Security Program Regulations

    This proposed rule sets forth regulations that would implement Subtitle C of the Comprehensive Outbound Investment National Security Act, which is codified at Title VIII of the De…

  6. Federal Register (AI)04:00 UTCCooperative Research and Development Agreement: Super Intelligence (SI) Situational Awareness Tools for Analyzing Coast Guard (CG) Sensor Feeds for Search and Rescue (SAR)

    The Coast Guard announces its intent to enter a Cooperative Research and Development Agreement (CRADA) with LOOKOUT to assess Super Intelligence for automated target detection and…

Columns

7 pieces, the newest 6 here.

  1. Raymond Chen14:00 UTCPuzzling out why a program doesn’t work when run from a batch file, but works when double-clicked from Explorer

    Mimicking the operation more accurately.

  2. Zvi Mowshowitz12:59 UTCGemini 4 Argon: The Model and Safety Cards

    Gemini 4’s model card is a compact 14 pages.

  3. Jack Clark (Import AI)12:31 UTCImport AI 478: Math for alignment; ProgramBench; and Mirendil shows what RSI means

    Welcome to Import AI, a newsletter about AI research.

  4. Bruce Schneier11:03 UTCBias in Qwen3-Coder Model

    Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what…

  5. Ben Thompson (Stratechery)10:00 UTCThe End of the Internet

    The old Internet, where anyone could host a server is over, but it's just the final blow in an ending that has been coming for years.

  6. Murat Demirbas06:28 UTCThe Man from the Future: Why Johnny Can't Stop Abstracting

    I have come to suspect that to most people thinking is painful.

Research

157 pieces, the newest 10 here.

  1. NVIDIA Research19:36 UTCIsekai3D SDG: A Platform for Diverse Synthetic Gameplay Visual Data

    Isekai3D SDG: A Platform for Diverse Synthetic Gameplay Visual Data We present Isekai3D SDG (Synthetic Data Generation), a platform for generating diverse 3D gameplay data for wor…

  2. arXiv cs.AI17:59 UTCRetriever-Free Retrieval: Navigating Documents with Decision Models

    While language models have become dramatically more capable, retrieval still largely relies on lexical matching or similarity in fixed embedding spaces.

  3. arXiv cs.AI17:59 UTCCenter-of-Mass Interpretation of Evolution Strategies

    Evolution strategies (ES) update a model by sampling a population of perturbed copies, scoring each one, and moving in the reward-weighted direction of the perturbations.

  4. arXiv cs.LG17:59 UTCAuto-Research Arena: Benchmarking and Advancing Auto-Research in Language Modeling

    As autonomous research systems become more capable, benchmarks must both evaluate their performance and support meaningful research progress.

  5. arXiv (vision, retrieval & HCI) cs.CV17:59 UTCVibeVideoBench:Evaluating Multimodal Agents on Code-Driven Video Generation

    Diffusion video models produce striking clips, but they cannot reliably render an exact formula, a correct chart, a ruleconsistent game or narration synchronized to on-screen even…

  6. arXiv cs.RO17:59 UTCLearning Force-Reactive Humanoid Loco-Manipulation

    Many everyday tasks require controlling contact force as well as motion.

  7. arXiv (vision, retrieval & HCI) cs.CV17:58 UTCDo vision models know that three is three?

    Do vision models encode the transition $2{\to}3$ the same way whether it appears in handwritten digits or in hand gestures, and do they "understand" that clean${\to}$dirty is the…

  8. arXiv q-bio.NC17:58 UTCOn the stability of learning

    Learning algorithms are usually analyzed under the assumption that informative gradients are continuously available.

  9. arXiv (vision, retrieval & HCI) cs.CV17:58 UTCFL4N: Feed-forward Latent Model for 4D Novel View Synthesis

    4D novel view synthesis (NVS) aims to render dynamic scenes across viewpoints and timestamps, which requires jointly inferring 3D structure and temporal dynamics.

  10. arXiv (vision, retrieval & HCI) cs.CV17:57 UTCOSWAM: An Effective World Action Model with One-Step Action Generation

    Direct-policy World Action Models (WAM) have demonstrated the benefits of decoupling action generation from explicit future visual prediction for efficient inference in autonomous…

Releases

43 pieces, the newest 12 here.

  1. pnpm23:52 UTCget-pnpm@0.0.10
  2. Unsloth23:45 UTCScheduled + MiniMax-M3.1-Flash + Perf Gains
  3. Valkey23:37 UTCValkey 8.0.12: Valkey 8.0.12 - Released Mon 26 October 2026
  4. LangChain23:08 UTClangchain-openai==1.7.3
  5. Claude Code21:51 UTCClaude Code 2.1.311: Added --hold-idle-file and --max-hold-min to self-hosted-runner, to keep an idle session while your host…
  6. LangGraph20:05 UTClanggraph==1.2.18
  7. LangGraph19:59 UTClanggraph-sdk==0.4.10
  8. Nx19:49 UTCNx 24.0.2: angular, register the ssr dev server afterEmit hook only once (#37589, #37587)
  9. Temporal19:34 UTCTemporal 1.33.0-164.3: patched temporal version
  10. ONNX Runtime19:29 UTCONNX Runtime v1.31.1
  11. npm releases19:27 UTCopenai 7.45.0
  12. GitHub CLI19:24 UTCGitHub CLI 2.103.3

New Repos & Packages

24 pieces, the newest 8 here.

  1. GitHub #generative-ai23:00 UTCblixvip/GenMotion (7 stars)
  2. npm #mcp22:14 UTCeve 0.84.0
  3. npm #llm21:36 UTCdeepagents 1.16.0
  4. npm #llm20:09 UTC@posthog/ai 8.17.0
  5. npm #ai-agent20:04 UTCagent-device 0.21.32
  6. npm #mcp19:47 UTC@claude-flow/cli 3.63.4
  7. npm #mcp19:12 UTC@claude-flow/mcp 3.1.4
  8. npm #mcp18:57 UTC@ai-sdk/mcp 2.0.85

Watch

35 pieces, the newest 6 here.

  1. NVIDIA · YouTube23:43 UTCAI in France: From NVIDIA’s First Chip to AI Factories | NVIDIA
  2. Lex Fridman · YouTube22:51 UTCAI Crisis in Math: Navier-Stokes, Riemann Hypothesis & Complexity Theory | Lex Fridman Podcast #503
  3. Kubernetes · YouTube22:43 UTCSIG Network Meeting for 2026-10-26
  4. OpenAI · YouTube22:03 UTCAmp puts AI agents to work beyond code with OpenAI models
  5. OpenAI · YouTube22:03 UTCStack Overflow for Agents triples signups with ChatGPT plugin
  6. OpenAI · YouTube22:03 UTCHiggsfield takes AI video from 1 minute to over 10

Package releases

68 from the most used packages' own repositories, the newest 15 here.

  1. 23:37 UTClaminas/laminas-code 4.18.0 · every release →
  2. 23:02 UTCpbs-installer 2026.10.26 · every release →
  3. 22:25 UTCyt-dlp 2026.10.26 · every release →
  4. 22:18 UTCnette/php-generator v4.2.4 · every release →
  5. 22:00 UTCbrowser-use 0.13.14 · every release →
  6. 21:38 UTCmistral-vibe v3.0.3 · every release →
  7. 21:30 UTCautoprefixer 10.6.2 · every release →
  8. 21:18 UTCspacy release-v3.8.18 · every release →
  9. 21:08 UTCazure-core azure-identity_1.27.0 · every release →
  10. 20:58 UTCdulwich-1.2.20 · every release →
  11. 20:58 UTCjsonpointer v3.6 · every release →
  12. 20:45 UTCgoogle-auth google-cloud-observability-v0.1.0 · every release →
  13. 20:32 UTCpostcss 8.5.32 · every release →
  14. 20:26 UTCphpstan/phpdoc-parser 2.3.8 · every release →
  15. 20:17 UTCstrtok3 v10.6.3 · every release →