Tech news, October 29, 2026
Thursday: 616 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadPowered by Raspberry Pi – from Stockholm to Sydney, South Korea to Slovakia
From the practicalities of everyday life to creative endeavours, Raspberry Pi power is behind hundreds of products.
- NewsA faster, rustier Element Web
Dave Baker and Florian Duros (Element) at The Matrix Conference 2026.
- NewsHow to Upload Kubernetes Packet Captures to S3 With Isopcap
Isopcap can now save Kubernetes packet captures to S3, providing better collaboration.
- OutageFrance SMS - Delivery degradation affecting registered SMS towards Orange network
We have been notified by our suppliers about registered SMS degradation to the Orange network.
- SecurityGhost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
PHP2Shell showed how fast AI turns a bug into an exploit.
- Deadlinezai-glm-5-2 shuts down in 2 days
Replacement: Z.ai GLM 5.3.
News
167 pieces, the newest 20 here.
- Postman and Baseten: Build Performant Agents, Run Them At Lower Cost
Postman and Baseten partner so enterprises can build AI agents and run them on fast, cost-efficient inference.
- Upgrading MLflow Pipelines Across a Python Version Boundary
How we migrated production MLflow models from Python 3.10 to 3.12 without retraining, using a "Load and Repack" strategy to recover cloudpickle-serialized artifacts and future-pro…
- Announcing General Availability of Real-Time Mode for Spark Declarative Pipelines on Databricks
We introduced Real-Time Mode (RTM) last year which enabled customers to build low-latency, operational use cases...
- The reports of Stack Overflow's death are greatly exaggerated
I’ve seen the recent predictions about Stack Overflow’s demise.
- Reducing petabyte-scale S3 storage costs with evidence-based lifecycle rules
Learn a repeatable, evidence-based method to cut petabyte-scale Amazon S3 storage costs.
- [Launched] Generally Available: Large OS Disk Encryption for Azure Confidential VM migrations
Large OS Disk Encryption (LOSDE) is now generally available for Azure Confidential VM migration scenarios.
- Financial Research Assistant on AWS
Build a financial research assistant with Cohere Embed, Rerank, and Parse on AWS.
- How we’re training a Figma-fluent editing model
We’ve increasingly seen that specialized post-training can compete with frontier models.
- Why Waiting for Ready Data Is Riskier Than Starting AI Now
Waiting for perfect data before starting AI creates its own risk.
- AWS Marketplace now enables partners to list once and sell through multiple subsidiary accounts
Today, AWS announces that AWS partners who operate multiple legal entities can publish a product listing once in their primary account and enable their local subsidiaries to sell…
- How BMW Group accelerated connected vehicle workloads on AWS Graviton
Learn how BMW Group migrated its connected vehicle platform from x86 to AWS Graviton.
- Making something human: 4 things we took away from Config India
AI can help us create almost anything now.
- Node.js 27.0.0-alpha.0.0.0 (Alpha)
- Securing Your Stack: Recent PHP and eMudhra Updates on Heroku
Managing critical vulnerabilities often consumes significant engineering time.
- Microsoft Research Focus – Edition #97
Host Sowbhagya Suresh shares some of the latest news and cutting-edge research from across Microsoft—from understanding the challenges facing coding agents to uncovering how peopl…
- Update on Rust Foundation Staffing
We are going through some structural changes inside the Rust Foundation.
- Strix now supports Vercel AI Gateway
Strix, the open-source AI penetration testing tool, can now run on any of the 400+ models on Vercel AI Gateway.
- Create, preview, and edit files directly in the Gemini app
We’re introducing new ways to create and refine files and code in the Gemini app.
- Introducing Apache Kafka 4.4.0
The Apache Software Foundation is proud to announce the release of Apache Kafka® 4.4.0.
- Optimizing Apache HBase availability on Amazon EMR, Part 1: Coordinator startup, RegionServer recovery, and regions in transition
A repeatable process for keeping Apache HBase on Amazon EMR highly available.
New Models
4 pieces.
- New model: Baseten: Joey 1
Joey 1 is a 2B decision model from Base Labs, Baseten's research team, built on Qwen3.5-2B.
- New model: Sourceful: Riverflow V2.6 Pro
Riverflow 2.6 Pro is the flagship model of Sourceful's Riverflow 2.6 lineup, a unified text-to-image and image-to-image family that treats generation as a production workflow: an…
- Open model: lightx2v/MiniMax-H3-Prompt-Rewriter-Qwen3.8-27B-Ref2VA
Trending on the Hugging Face Hub.
- New model: NVIDIA: Nemotron 3.5 Transcribe
Nemotron 3.5 Transcribe is an open-weight speech recognition model from NVIDIA, a 30B mixture-of-experts with about 4B active parameters.
Security Desk
77 pieces, the newest 10 here.
- CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)
- WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release
WordPress 7.1.4 was released on October 28, 2026.
- Chrome for Android Update
Hi, everyone!
- Stable Channel Update for Desktop
The Stable and Extended Stable channel has been updated to 156.0.8078.79/.80 for Windows and Mac and 156.0.8078.79 to Linux which will roll out over the coming days/weeks.
- Cisco Finesse Server-Side Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks throug…
- HCSEC-2026-54 - Boundary vulnerable to server-side request forgery in Vault credential store
Bulletin ID: HCSEC-2026-54 Affected Products / Versions: Boundary and Boundary Enterprise 0.21.3 up to 1.0.1; fixed in Boundary Enterprise 1.0.2 and 0.21.6.
- Cisco security advisory (AV26-1102) - Update 1
- GitLab security advisory (AV26-1028) - Update 1
- CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog mvining Oct 29, 2026 Release Date October 29, 2026 Description CISA has added two new vulnerabilities to its Known Exploit…
- Wordfence Bug Bounty Program Monthly Report – July 2026
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security p…
Technical Guides
14 pieces, the newest 10 here.
- Secure Your AI Agents – Free Model Context Protocol (MCP) Security Course
The Model Context Protocol (MCP) helps connect LLMs to external tools, databases, and APIs.
- How the UK Amazon Quick User Group grew in 2026
The UK Amazon Quick User Group's 2026 roundup: three quarterly meetups, 150+ attendees, and customer stories from Arriva, Carsa, and Propulse Lab on using agentic AI and Amazon Qu…
- Building intent-driven UI testing with Amazon Nova Act
Epsilon's Agentic Platform team delivers UI testing as a managed, multi-tenant service built on Amazon Nova Act and Amazon Bedrock AgentCore Browser Tool.
- Build a repeatable PHP-to-Java migration engine with Kiro
Turn a PHP-to-Java migration from a one-time leap of faith into a measurable, repeatable process with Kiro.
- Lend and borrow resources across teams with AWS Batch’s quota management for SageMaker Training jobs
AWS Batch quota management is a new scheduling capability you can use to divide GPU capacity into quota shares per team or project, automatically lend idle capacity across shares,…
- How MoEngage turned over 400 APIs into agent tools with AgentCore Gateway
MoEngage turned roughly 400 private REST APIs across 7 AWS Regions into permission-scoped agent tools with Amazon Bedrock AgentCore Gateway.
- Accelerate agentic AI with NVIDIA Nemotron models on Amazon EKS and SageMaker HyperPod EKS
NVIDIA Nemotron 3.5 Super VL is a 120B-parameter mixture-of-experts model that pairs reasoning and tool use with multimodal understanding.
- Unlocking Tensor Core Performance for Machine Learning Interatomic Potentials
Atomistic simulations help researchers understand how molecules and materials behave, from chemical reactions and phase transitions to mechanical failure.
- Learn With Mentor AI: A Guided Journey Through Async Python
Experience a new way of learning on Real Python by working through async Python in conversation with Mentor AI, one well-placed question at a time.
- Quiz: Learn With Mentor AI: A Guided Journey Through Async Python
Practice learning async Python with Mentor AI.
AI in the Field
9 pieces, the newest 6 here.
- How BMW builds toward Industry AI on Amazon SageMaker AI
BMW Group is building toward Industry AI on Amazon SageMaker AI by fine-tuning task-specific LoRA adapters on engineering process data and serving multiple domain capabilities fro…
- Research: Artificial Intelligence sector study 2025
An analysis of the UK’s artificial intelligence (AI) sector, developing estimates of the scale and scope of firms developing AI products and services in the UK.
- Who will get to define the danger?
At the People's AI Assembly, the crowd, spilling onto the balconies, laughed at Mayor Zohran Mamdani’s jokes, cheered former antitrust chief Lina Khan, and hung on the every word…
- Google launches AI for Healthcare Professionals Certificate on Coursera
Today, Google is launching its first health program on Coursera, the Google AI for Healthcare Professionals Certificate.
- Equipping healthcare professionals with practical AI skills
Built by clinicians at Google, the new Google AI for Healthcare Professionals Certificate helps healthcare professionals prioritize patients.
- Eunice Kennedy Shriver National Institute of Child Health & Human Development; Notice of Meeting
Columns
15 pieces, the newest 6 here.
- Anthropic’s financials are surprisingly strong
What I learned reading all 421 pages of the Anthropic S-1
- What I learned about power from LBJ and Robert Moses
Preparing to interview Robert Caro.
- Can Frontier Models See Past a Decoy? Elorian Tests Visual Reasoning
A new decoy counting benchmark exposes a gap between seeing and reasoning.
- Bliki: LLM Voice
Sometimes when I read a post, I get the growing feeling that I'm reading the output of an LLM.
- The support case of a customer who said that all they could see was a black screen
Then again, that is what they asked for.
- AI #192: Anthropic Is Going Public
Anthropic filed its S-1 this week to prepare for its IPO.
Research
158 pieces, the newest 10 here.
- Elucidating the Design Space of LM Data Attribution
Data attribution methods for Language Models (LMs) are typically evaluated using downstream tasks like fact retrieval.
- Propose-Filter-Release: Scaling Noise to Typical Sensitivity via Private Filtering
An estimator can be accurate and stable on typical data, yet sensitive to a few possible records.
- Micro-Edits: Computational Support for Fine-Scale Edits in Film
In film editing, every frame matters.
- Rethinking Neural Thickets Without Weight Perturbations
The Neural Thickets hypothesis posits that pretrained language models lie in dense neighborhoods of task-specific experts in weight space, which random Gaussian perturbations can…
- Read, Allocate, Route: Role-Coupled Tokenization for Pixel-Space Generative Transformers
Pixel-space generative Transformers typically use one token per image patch, so capturing finer detail requires more tokens and makes global attention increasingly expensive.
- Adaptive Scenario Generation for KL-DRO Around a Learned Density Model
Distributionally robust optimization (DRO) hedges data-driven two-stage stochastic programs against error in the distribution estimated from a finite record, and standard ambiguit…
- Luggage re-identification: A study of strategies towards a real-world application
Luggage re-identification (ReID) is a critical task in video surveillance for forensics, security or border management (suspicious or abandoned luggage recognition), as well as lu…
- From extreme weather to agricultural consequences with agentic AI
Extreme weather is forecast days ahead, yet its consequences for agriculture remain hard to predict: a forecast says where a storm will strike, not which crops will suffer or how…
- SonoWorld4D: From One Video to a 4D Audio-Visual Scene via Diffusion Synchronization
Recent progress in visual scene generation has extended beyond static 3D scenes toward the more challenging problem of generating dynamic 4D scenes from minimal input.
- world2vec: Mechanistic world models through latent dynamics learning
World models can achieve strong control performance without faithfully capturing the dynamics of their environment, limiting their potential for mechanistic interpretability and s…
Releases
52 pieces, the newest 12 here.
- @sveltejs/package@3.0.2
- @sveltejs/kit@3.1.1
- @sveltejs/adapter-vercel@7.0.2
- v0.19.9 Patch Release
- process-daemon v0.4.0
- ONNX Runtime v1.30.1
- v1.13.5
- ONNX Runtime WebGPU Plugin EP v0.5.0
- langchain-core==1.7.3
- OpenAI Codex 0.166.0: GPT-6.1 Terra to the bundled, Vertex AI, and Amazon Bedrock model catalogs. (#57293)
- OpenTofu 1.12.11: Fixed panic when provided invalid state encryption configuration. (#4784)
- langchain-core==1.7.2
New Repos & Packages
31 pieces, the newest 8 here.
Watch
27 pieces, the newest 6 here.
- An industry look into AI generated images & videos in fashion
- Trace me if you can: Automated instrumentation and field profiling
- GitLab Orbit is Now GA: SDLC Context Graph for Autonomous AI Agents
- GTC Berlin 2026: Power Demand, Increasing Grid Reliability and Resiliency
- Building audio-first experiences for intelligent eyewear with Gemini Nano 4
- XR is for everyone: Designing accessible spatial experiences
Package releases
62 from the most used packages' own repositories, the newest 15 here.
- @azure/abort-controller @azure/identity-vscode_2.2.3 · every release →
- fpdf2 2.9.0 · every release →
- wrapt 2.5.2 · every release →
- google-ads 35.0.0 · every release →
- react-resizable-panels 4.15.2 · every release →
- semgrep v1.183.0 · every release →
- nodeenv 1.11.1 · every release →
- smart-open v9.0.1 · every release →
- stripe/stripe-php v22.1.0 · every release →
- stripe v16.1.0 · every release →
- webpack-dev-middleware v8.6.0 · every release →
- ty 0.0.95 · every release →
- cuda-bindings cuda-pathfinder-v1.8.5 · every release →
- strands-agents harness-cli/v0.2.3 · every release →
- @aws-sdk/types v3.1160.0 · every release →