Tech news, October 26, 2026
Monday: 590 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadOne week on the APNIC honeynet: 99,000 IP addresses and 173 million events
Nearly 99,000 unique IP addresses interacted with APNIC's honeynet in just one week, generating 173 million events across SSH, Telnet, SMB, VPN, web, and Android services.
- NewsFaster pnpm installs
pnpm installs on Vercel are now faster, reducing the time spent installing dependencies before your build.
- NewsPython 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 are out
Five expedited security releases to distrust the compromised eMudhra intermediate CA keys.
- Outage[Support] Call Handling Delays
Due to a high volume of requests, it may be difficult to reach our teams by phone.
- SecurityA week in security (October 19 – October 25)
A list of topics we covered in the week of October 19 to October 25 of 2026
- Deadlinezai-glm-5-2 shuts down in 5 days
Replacement: Z.ai GLM 5.3.
News
155 pieces, the newest 20 here.
- Unify your productivity and AI data with Lakeflow Connect
This is the second post in our series on how Lakeflow Connect brings fully managed...
- GitHub Copilot assisted permissions generally available
Assisted permissions are now generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code.
- How Data Culture measured its way from zero trust to a shippable AI analytics agent
Data Culture built a 3-step evaluation framework that took one AI analytics deployment from 0% accuracy to 94.7%.
- How Verily Health monitors wastewater for 30-plus pathogens with a 5-person team and 1 dbt package
Verily Health's five-person team uses one dbt package to monitor wastewater for over 30 pathogens in near real time.
- How Kramp cut analyst onboarding from days to minutes with a self-serve dbt Mesh factory
Kramp used one Terraform module to let 15 domain teams provision governed dbt projects in minutes.
- Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests.
- Greptile takes bug detection beyond code review with GPT-6 Astra
How Greptile uses GPT-6 Astra to test user workflows, Daybreak to strengthen security, and Codex to reduce rework.
- How to load test an API behind a firewall
Your functional tests pass on every build.
- BDN Sealed Volumes: publish once, mount anywhere
BDN Sealed Volumes do for model data what container images do for code: publish once, get a digest, mount it anywhere.
- Introducing Opik’s Generative Dashboard Builder
At Comet, we’ve seen firsthand how teams in finance, tech, e-commerce, and beyond use the Opik platform to track critical metrics for monitoring and improving their agents.
- Amazon ECR now supports replication backfill for existing container images
Amazon Elastic Container Registry (Amazon ECR) now supports replication backfill, enabling you to replicate existing images in your private registry to your configured replication…
- Train your own decision model
Decision models drew wide attention in September, when TypeSafe AI launched Jev, a model that returns probabilities over a fixed set of answers instead of generating text.
- Discover 1000+ services on Vercel Connect from the CLI
You and your agents can now browse and search more than 1000 services available in Vercel Connect without leaving your terminal.
- Easy to integrate, compliant by design: Bringing the Swiss Franc to Google Cloud Universal Ledger
Every day, countless financial transactions are interrupted by slow, expensive, and inflexible conventional payment systems.
- Your AWS Networking and Content Delivery guide to re:Invent 2026
The AWS Networking and Content Delivery (CDN) team invites you to join us at re:Invent from November 30 through December 4 2026.
- How to teach with Databricks Free Edition
You can run a full data or AI course on the same platform enterprises use in production - for free...
- GPT-6.1 Terra in GitHub Copilot
GPT-6.1 Terra, OpenAI’s newest model, is now generally available in GitHub Copilot.
- Run Scale AI’s AgentEnv evals on Vercel Sandbox
AgentEnv, Scale AI's framework for testing agents against tasks and scoring their results, now runs on Vercel Sandbox.
- WebKit Features for Safari 27.2
Safari 27.2 is here, refining Customizable Select, renaming a Grid Lanes property, and delivering 20 bug fixes across accessibility, media, CSS, and more.
- Optimizing Streaming Speech Recognition on Arm® Edge Devices with ExecuTorch
When you’re speaking to a device, you expect text to appear as you talk.
New Models
9 pieces.
- New model: Amazon: Titan Multimodal Embeddings G1
Amazon Titan Multimodal Embeddings G1 embeds text, images, or text and image together into a shared vector space for multimodal search and recommendation.
- New model: Amazon: Titan Embeddings G1 - Text
Amazon Titan Embeddings G1 - Text is the first-generation Titan text embedding model.
- New model: Amazon: Titan Text Embeddings V2
Amazon Titan Text Embeddings V2 is a text embedding model for retrieval, search, and clustering.
- New model: OpenAI: GPT-6.1 Terra Pro
GPT-6.1 Terra Pro is the same underlying model as [GPT-6.1 Terra](https://openrouter.ai/openai/gpt-6.1-terra), served with `reasoning.mode` set to `pro` for higher-quality respons…
- New model: OpenAI: GPT-6.1 Terra
GPT-6.1 Terra is the mid-tier model in OpenAI's GPT-6.1 series, priced below GPT-6.1 Sol.
- Open model: LiquidAI/LFM3-1.7B-Base
Trending on the Hugging Face Hub.
- New model: HeyGen: HeyGen Voice Turbo
HeyGen Voice Turbo is a lower-latency version of HeyGen Voice, HeyGen's text-to-speech model.
- Open model: inclusionAI/LBS-27B
New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.
- Open model: baidu/Unlimited-OCR-2
Trending on the Hugging Face Hub.
Security Desk
73 pieces, the newest 10 here.
- CVE-2026-111422: Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
Posted by Hussein Awala on Oct 26 Severity: low Affected versions: - Apache Airflow SSH provider 4.3.0 before 7.0.1 Description: In apache-airflow-providers-ssh before 7.0.1, SSHR…
- Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
- ElectroNG is now open source!
ElectroNG is now free and open source!
- VU#701544: Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key.
- How to patch PHP2Shell with free Aikido Images
Patch PHP2Shell (CVE-2026-109618 and CVE-2026-109619) with free Aikido Images for PHP 5.5 to 8.5.
- Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
- CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog mvining Oct 26, 2026 Release Date October 26, 2026 Description CISA has added two new vulnerabilities to its Known Exploit…
- Godot 4.x: arbitrary code execution via .po translation file Plural-Forms header
Posted by Tomasz Kaye on Oct 26 A code-execution vulnerability in Godot 4.x translation loading was publicly disclosed on 2026-10-26 [1].
- CVE-2025-60467: GPAC/MP4Box: Use-After-Free in gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file
Posted by Alexander A.
- eMudhra, Brotli, and the Long Tail of a Security Fix
Fixes for eMudhra and Brotli are out.
Technical Guides
12 pieces, the newest 10 here.
- Operating in the agentic era: AIOps sessions at re:Invent 2026
Telemetry volume and incident counts keep growing while operations headcount stays flat, and coding tools now produce changes faster than most release processes can review them.
- Fleet-wide computer vision lifecycle at the edge with SageMaker SDK v3
Fleet-wide computer vision needs a model per camera, not one model for the whole fleet.
- Groundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock
Every time an agent takes a step, it re-reads its entire context before acting.
- Build agentic retrieval on a Managed Amazon Bedrock Knowledge Base with CDK
Build enterprise agentic retrieval on a Managed Amazon Bedrock Knowledge Base with the AWS CDK: an agent that routes across two knowledge bases, retrieves through the AgentCore Ga…
- How NVIDIA Minerva Turns Telemetry Chaos Into Peak GPU Yield
AI Factories are some of the most technologically complex operational environments ever created.
- Embracing Observability for the AI era at re:Invent 2026
As organizations continue to scale their cloud presence and bring AI agents into production, effective operations become increasingly critical for success.
- How NVIDIA Mission Control 2.5 Brings Autonomous Recovery to Kubernetes
Training large-scale AI models on thousands of GPUs is a high-stakes operation where monitoring and automation must be built-in to optimize cluster resiliency...
- Cold Start Mechanics: How Warm Pools and Model Caching Actually Work
Cold starts slow down scalable AI clouds.
- Single and Double Underscores in Python Names
Learn Python naming conventions with single and double underscores to design APIs, create safe classes, and prevent name clashes.
- Python Protocols: Leveraging Structural Subtyping
Learn how Python protocols bring static duck typing to your code and help you get the most out of type hints and static type checkers.
AI in the Field
7 pieces, the newest 6 here.
- AI-enabled ECU validation on AWS using Corellium Atlas virtual ECUs
Automotive firmware teams face a structural bottleneck: physical electronic control unit (ECU) hardware doesn’t scale at the pace of software development.
- At New York Climate Week 2026, MIT connects with a global network
A cross-section of the MIT community convened discussions on topics ranging from data centers and super pollutants to agriculture and education.
- What Should the Rules for A.I. Companies Actually Be? We Asked the Experts.
AI Now's Senior Director Kate Brennan joined a roundtable discussion with AI experts and leaders, pushing the conversation away from abstract risk and toward the very real harms c…
- A.I.’s Rogue Behavior Starts With Its Training
AI Now's senior research scientist Boyan Milanov points out how the failure to implement standard cybersecurity protocols is the responsibility of AI companies.
- Outbound Investment Security Program Regulations
This proposed rule sets forth regulations that would implement Subtitle C of the Comprehensive Outbound Investment National Security Act, which is codified at Title VIII of the De…
- Cooperative Research and Development Agreement: Super Intelligence (SI) Situational Awareness Tools for Analyzing Coast Guard (CG) Sensor Feeds for Search and Rescue (SAR)
The Coast Guard announces its intent to enter a Cooperative Research and Development Agreement (CRADA) with LOOKOUT to assess Super Intelligence for automated target detection and…
Columns
7 pieces, the newest 6 here.
- Puzzling out why a program doesn’t work when run from a batch file, but works when double-clicked from Explorer
Mimicking the operation more accurately.
- Gemini 4 Argon: The Model and Safety Cards
Gemini 4’s model card is a compact 14 pages.
- Import AI 478: Math for alignment; ProgramBench; and Mirendil shows what RSI means
Welcome to Import AI, a newsletter about AI research.
- Bias in Qwen3-Coder Model
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what…
- The End of the Internet
The old Internet, where anyone could host a server is over, but it's just the final blow in an ending that has been coming for years.
- The Man from the Future: Why Johnny Can't Stop Abstracting
I have come to suspect that to most people thinking is painful.
Research
157 pieces, the newest 10 here.
- Isekai3D SDG: A Platform for Diverse Synthetic Gameplay Visual Data
Isekai3D SDG: A Platform for Diverse Synthetic Gameplay Visual Data We present Isekai3D SDG (Synthetic Data Generation), a platform for generating diverse 3D gameplay data for wor…
- Retriever-Free Retrieval: Navigating Documents with Decision Models
While language models have become dramatically more capable, retrieval still largely relies on lexical matching or similarity in fixed embedding spaces.
- Center-of-Mass Interpretation of Evolution Strategies
Evolution strategies (ES) update a model by sampling a population of perturbed copies, scoring each one, and moving in the reward-weighted direction of the perturbations.
- Auto-Research Arena: Benchmarking and Advancing Auto-Research in Language Modeling
As autonomous research systems become more capable, benchmarks must both evaluate their performance and support meaningful research progress.
- VibeVideoBench:Evaluating Multimodal Agents on Code-Driven Video Generation
Diffusion video models produce striking clips, but they cannot reliably render an exact formula, a correct chart, a ruleconsistent game or narration synchronized to on-screen even…
- Learning Force-Reactive Humanoid Loco-Manipulation
Many everyday tasks require controlling contact force as well as motion.
- Do vision models know that three is three?
Do vision models encode the transition $2{\to}3$ the same way whether it appears in handwritten digits or in hand gestures, and do they "understand" that clean${\to}$dirty is the…
- On the stability of learning
Learning algorithms are usually analyzed under the assumption that informative gradients are continuously available.
- FL4N: Feed-forward Latent Model for 4D Novel View Synthesis
4D novel view synthesis (NVS) aims to render dynamic scenes across viewpoints and timestamps, which requires jointly inferring 3D structure and temporal dynamics.
- OSWAM: An Effective World Action Model with One-Step Action Generation
Direct-policy World Action Models (WAM) have demonstrated the benefits of decoupling action generation from explicit future visual prediction for efficient inference in autonomous…
Releases
43 pieces, the newest 12 here.
- get-pnpm@0.0.10
- Scheduled + MiniMax-M3.1-Flash + Perf Gains
- Valkey 8.0.12: Valkey 8.0.12 - Released Mon 26 October 2026
- langchain-openai==1.7.3
- Claude Code 2.1.311: Added --hold-idle-file and --max-hold-min to self-hosted-runner, to keep an idle session while your host…
- langgraph==1.2.18
- langgraph-sdk==0.4.10
- Nx 24.0.2: angular, register the ssr dev server afterEmit hook only once (#37589, #37587)
- Temporal 1.33.0-164.3: patched temporal version
- ONNX Runtime v1.31.1
- openai 7.45.0
- GitHub CLI 2.103.3
New Repos & Packages
24 pieces, the newest 8 here.
Watch
35 pieces, the newest 6 here.
- AI in France: From NVIDIA’s First Chip to AI Factories | NVIDIA
- AI Crisis in Math: Navier-Stokes, Riemann Hypothesis & Complexity Theory | Lex Fridman Podcast #503
- SIG Network Meeting for 2026-10-26
- Amp puts AI agents to work beyond code with OpenAI models
- Stack Overflow for Agents triples signups with ChatGPT plugin
- Higgsfield takes AI video from 1 minute to over 10
Package releases
68 from the most used packages' own repositories, the newest 15 here.
- laminas/laminas-code 4.18.0 · every release →
- pbs-installer 2026.10.26 · every release →
- yt-dlp 2026.10.26 · every release →
- nette/php-generator v4.2.4 · every release →
- browser-use 0.13.14 · every release →
- mistral-vibe v3.0.3 · every release →
- autoprefixer 10.6.2 · every release →
- spacy release-v3.8.18 · every release →
- azure-core azure-identity_1.27.0 · every release →
- dulwich-1.2.20 · every release →
- jsonpointer v3.6 · every release →
- google-auth google-cloud-observability-v0.1.0 · every release →
- postcss 8.5.32 · every release →
- phpstan/phpdoc-parser 2.3.8 · every release →
- strtok3 v10.6.3 · every release →