Tech news, October 27, 2026
Tuesday: 626 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:47 UTC, in the sources' own words.
- LeadElevators, toasters, and the birth of Java
Ryan sits down with James Gosling, creator of Java at Sun Microsystems, to talk about the early networking friction that drove the need for interconnectedness, the stringent relia…
- NewsHow much should we delegate to an LLM? Automating advertising analytics reports with an AI agent
Hello.
- NewsAPRICOT 2027 Call for Presentations is open now
If you have interesting Internet operations research or experience to share, submit a presentation for APRICOT 2027.
- OutageVoice Call Failures From a Subset of Twilio Phone Numbers to Multiple Networks in Germany
Twilio customers may be experiencing voice call failures from a subset of Twilio Phone Numbers to network subscribers on multiple networks in Germany.
- SecurityCVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)
- Deadlinezai-glm-5-2 shuts down in 4 days
Replacement: Z.ai GLM 5.3.
News
180 pieces, the newest 20 here.
- Amazon ECS now supports GPU sharing with NVIDIA Multi-Process Service (MPS)
Amazon Elastic Container Service (Amazon ECS) now supports GPU sharing with NVIDIA Multi-Process Service (MPS), enabling you to run multiple Amazon ECS tasks concurrently on a sin…
- Scala 3.3.9 LTS is now available!
Scala 3.3.9 LTS is now available!
- Opik Security Incident: October 2026
No customer data, accounts, or API keys were accessed.
- The EVPN trust challenge: How to detect and contain internal MAC hijacks
Guest Post: EVPN MAC mobility enables seamless workload movement, but it can also amplify the impact of MAC spoofing.
- Introducing time series collections for the next generation of Amazon OpenSearch Serverless
The next generation of Amazon OpenSearch Service serverless now supports time series collections.
- A Day in the Life: Inside a Principal Sales Engineer Role at EDB
In the fast-paced world of enterprise software, connecting cutting-edge database technology to real-world business challenges requires deep technical expertise and a passion for c…
- Can Postman do load testing? Yes, here’s how it works
Postman load testing reuses your existing collections with virtual users.
- GitHub Copilot supports server-to-server authentication
GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview.
- From Problem to Fix in Minutes: Automating Search Relevance Tuning with the Amazon OpenSearch Service Relevance Agent
The Amazon OpenSearch Service Search Relevance Agent turns a low NDCG score into a better search query in minutes.
- [Launched] Generally Available: Higher limit of Azure Blob Storage accounts per region per subscription
Higher Azure Storage account resource quotas are now generally available, supporting up to 1,000 storage accounts with standard endpoints per region, per subscription, up from the…
- How Are You Using JupyterHub? A new survey
JupyterHub user survey 2026
- SageMaker MLflow Apps now support MLflow 3.16
Amazon SageMaker AI MLflow Apps now support MLflow 3.16, bringing a redesigned tracing experience and faster experiment tracking to your generative AI and machine learning workflo…
- Azure DevOps Server RC (26H2) Is Now Available
Today we’re releasing the release candidate (RC) of the next Azure DevOps Server release.
- LLMOps: The Complete Guide to Managing LLMs at Scale
Learn what LLMOps is, how it differs from MLOps, and how to evaluate, deploy, govern, and monitor large language models in production.
- How Ramp's internal AI agents crossed a million sessions
Ramp shares the agents, sandboxes, and dashboards it built by treating internal AI as analytics engineering.
- How Obie Insurance cut its month-end close from 25 hours to 2 with dbt State and a lake house rebuild
Obie Insurance rebuilt on dbt and Apache Iceberg, cutting a critical monthly process from over 25 hours to 2 hours.
- How Virgin Media O2 cut compute costs 30% by giving dbt a memory
Virgin Media O2 cut dbt compute costs 30% and model run times 35% by adopting dbt v2 and dbt State at scale.
- Introducing VMware solution on Google Cloud
Many organizations with workloads on VMware are looking for ways to expedite their data center exits, migrate and modernize their mission-critical workloads, or simply leverage th…
- Snowflake and Oracle: Bringing the AI Data Cloud to OCI
Snowflake and Oracle are expanding their partnership to bring Snowflake's AI Data Cloud to Oracle Cloud Infrastructure as a native, first-party service.
- Automated Snowpipe Setup with Snowflake CoCo Is Now GA
Go from cloud storage files to a continuously loading Snowflake or Iceberg table in one conversation with automated Snowpipe setup in Snowflake CoCo.
New Models
5 pieces.
- Open model: nvidia/Metatron-v1
New open weights from NVIDIA on the Hugging Face Hub.
- New model: LiquidAI: d1.1
d1.1 is Liquid AI's structured decision model, served as a System One endpoint and the successor to d1.
- New model: LiquidAI: d1-ultra Latest
This model always redirects to the latest model in the d1-ultra family.
- New model: LiquidAI: d1 Latest
This model always redirects to the latest model in the d1 family.
- Open model: inclusionAI/Ling-3.1-flash-1019
Trending on the Hugging Face Hub.
Security Desk
77 pieces, the newest 10 here.
- Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic.
- Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
- Vulnerabilities in golang.org/x/net
Posted by Alan Coopersmith on Oct 27 -------- Forwarded Message -------- Subject: [security] Vulnerabilities in golang.org/x/net Date: Tue, 27 Oct 2026 19:53:49 +0000 From: announ…
- Vulnerabilities in node.js Affecting Cisco Products: October 2026
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulne…
- Critical: MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
Affects mlflow.
- Godot 3.x/4.x: remote crash via DTLS receive-callback heap buffer overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot's DTLS networking was publicly disclosed on 2026-10-27 [1].
- USN-8956-2: Brotli vulnerability
USN-8956-1 fixed a vulnerability in Brotli.
- Adobe security advisory (AV26-697) – Update 1
- Chrome for Android Update
Hi, everyone!
- Google security advisory (AV26-1085) - Update 1
Technical Guides
13 pieces, the newest 10 here.
- Memory-Enforced GPU Sharing in Kubernetes with NVIDIA CUDA 13.4
Many AI workloads need only a fraction of a GPU.
- AWS named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service
AWS has been named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service (CCaaS) for AWS Connect Customer.
- Announcing SOCI-indexed images for faster SageMaker AI jobs
Seekable OCI (SOCI) indexing for Amazon SageMaker AI training and processing jobs takes full container image download off the critical path.
- NVIDIA RTX Spark Powers Neural Rendering and AI Characters in Games
NVIDIA RTX Spark is a new Windows PC platform for AI development, creation, and gaming in slim laptops and compact desktops.
- Fix evaluation bias to unlock better models on Amazon Bedrock
Property Finder found that 96.8% of their vision-AI evaluation labels were inherited from the incumbent model, hiding its true accuracy.
- Exowatt beats frontier models on accuracy with SageMaker serverless model customization
In this post, we show how Exowatt used Amazon SageMaker AI serverless model customization to build a repeatable AI pipeline that produces task-specific fine-tuned models for two d…
- Fine-Tuning NVIDIA Nemotron to Know Local Rules, Not Just Local Languages
As AI adoption expands globally, people across languages and cultures are using it in more aspects of their daily lives.
- 3 Ways to Boost MoE Inference on NVIDIA DGX Spark
Generating tokens faster starts with identifying what limits inference performance.
- Python Circular Imports: Why They Happen and How to Fix Them
Confused by Python circular imports?
- How to Get Out of Tutorial Hell
Stuck in tutorial hell?
AI in the Field
9 pieces, the newest 6 here.
- AI-enriched ingestion pipelines for searchable live and VOD media on AWS
As organizations adopt TAMS and cloud-centered workflows through the Amazon Web Services (AWS) Cloud-Native Agile Production (CNAP) program, the opportunity is clear: Make content…
- Learner collaborates with MIT peers to develop book of AI insights
Prabha Jha used her experience with MIT Open Learning’s program for senior executives to develop AI solutions for her employer, Verizon, and to write a book.
- COP31 pledge on AI lacks climate targets, critics say
Ahead of COP31, a proposed artificial intelligence pledge lacks any concrete climate targets and allows signatories to determine what steps they take.
- New Records Obtained by EFF Expose More Problems with Medicare’s AI Experiment
New records obtained by EFF expose additional issues with Medicare’s AI-driven prior authorization program and show why we need stronger legal limits around government use of auto…
- Critical Material List; Addition of Helium
The United States (U.S.) Department of Energy (DOE) is issuing this notice to advise the public that DOE added helium to the DOE Critical Material List.
- Radiographer fracture detection with and without AI assistance in prospective emergency department use
npj Digital Medicine, Published online: 27 October 2026; doi:10.1038/s41746-026-03313-x Radiographer fracture detection with and without AI assistance in prospective emergency dep…
Columns
11 pieces, the newest 6 here.
- TLA-Verus: LLM agents prove temporal properties of TLA+ specs
This NeurIPS'26 workshop paper takes TLA+ specs from GitHub, translates them into Verus, and has LLM agents prove the safety and liveness properties in the specs.
- How Anthropic ships Claude with Claude: Separating the Brain from the Hands
Katelyn Lesse and Angela Jiang on Opus 5.5, the Claude Platform, and the engineering behind AI agents.
- How Anthropic ships the #1 LLM in the World safely: Separating the Brain from the Hands
Katelyn Lesse and Angela Jiang join Latent Space to explain the engineering behind the Claude Platform: launching Opus 5.5, separating the model’s “brain” from the agent’s “hands,…
- AI SRE: what is it, how could it change on-call – and does it work?
“AI SRE” is fast becoming a trending term fueled by flashy demos from vendors, but has an AI SRE ever really been on-call while engineers slept?
- Coding From the Himalayas With an Offline AI Agent
How to set up and run an offline coding agent using OpenCode, Ollama and Qwen.
- Why don’t we run the taskbar and Task Manager at high priority, so they can remain responsive?
Hurry up and wait.
Research
154 pieces, the newest 10 here.
- Honeycomb-Surfels: Compact Hexagonal Primitives for Efficient Scene Rendering and Reconstruction
Novel view synthesis and 3D reconstruction have advanced rapidly with radiance fields and splatting, yet their memory and computational demands limit their use in resource-constra…
- ThinkWorld: World Imagination Reinforces Chain-of-Dynamics Reasoning
Vision-Language-Action (VLA) models have made substantial progress in robotic manipulation, but their generalization remains constrained by the diversity and coverage of action-la…
- An EVM-Cosmos Bridge for Atomic, Semantic-Preserving Transfer of Environmental Tokens
Transferring semantically typed tokens between heterogeneous blockchains (e.g.
- Can Discrete Tokens Serve as Semantically Lossless Representations of Visual Signals?
Discrete visual tokens represent vision in a discrete form analogous to language, offering a native interface for multimodal modeling under a shared next-token prediction objectiv…
- When Should We Intervene at Test Time?
Test-time adaptation helps a deployed model respond to changing inputs, but the same intervention can rescue one batch and damage the next.
- Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
We introduce Heads of Security (HoS), a prompt injection defense that enforces instruction-data separation via a small set of learned per-head attention gates.
- Attention as Lattice Gauge Theory: Relations Interact Only Through Wilson Loops
Relations compose through the entity they share - Alice is Bob's mother and Bob is Carol's father, so Alice is Carol's grandmother - and the order matters, since a father's mother…
- KPPax: preprocess differentiable kinetic ODE for machine learning in atmospheric chemistry
Atmospheric chemical mechanisms are commonly distributed in the language of the Kinetic PreProcessor (KPP), which generates efficient Fortran or C code but does not fit into the d…
- Pushing Dexterity and Safety for In-Hand Object Pose Reaching That Works Remarkably Well
Dexterous manipulation with multi-fingered hands is the next frontier of robotics, yet learned hand skills remain limited to simple grasps or basic repeated motions, such as rotat…
- GEPA-Curator: Curated Learning for Self Improving Agents
Large Language Models (LLMs) are increasingly used in multi-turn agentic workloads that require sustained interaction with complex environments.
Releases
68 pieces, the newest 12 here.
- Temporal 1.33.0-164.4: patched temporal version
- langchain-anthropic==1.7.7
- @ai-sdk/xai@3.0.146
- CrewAI 1.15.32: Fix failing flaky tests
- Ollama 0.40.12: Liquid AI LFM3
- React Router 8.5.1: See the changelog for release notes, https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v851
- @react-router/serve@8.5.1
- @react-router/remix-routes-option-adapter@8.5.1
- CrewAI 1.15.31: Support conversational flow context compaction
- Release v0.66.0
- Claude Code 2.1.312: Added oidc.useridclaim to the Claude apps gateway, to identify people by an idtoken claim other than sub…
- OpenAI Codex 0.165.0: GPT-6.1 Terra to the model catalogs. (#57337)
New Repos & Packages
26 pieces, the newest 8 here.
Watch
23 pieces, the newest 6 here.
Package releases
60 from the most used packages' own repositories, the newest 15 here.
- configargparse v1.9.0 · every release →
- zip v9.1.3 · every release →
- moto 5.2.5 · every release →
- phpstan/phpdoc-parser 2.3.9 · every release →
- react-redux v9.3.1 · every release →
- @npmcli/promise-spawn v8.0.4 · every release →
- awswrangler 3.18.0 · every release →
- pytest 9.2.0 · every release →
- stripe/stripe-php v22.0.1 · every release →
- python-engineio v4.15.0 · every release →
- ddtrace v4.16.1 · every release →
- @azure/msal-common msal-node-v7.1.2 · every release →
- ghapi 2.1.5 · every release →
- @aws-sdk/types v3.1158.0 · every release →
- aws/aws-sdk-php 3.402.2 · every release →