Tech news, October 30, 2026
Friday: 546 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadWhat’s new with Google Data Cloud
October 19 - October 23 BigQuery introduces column aliases in GoogleSQL and cross-region table copy GA GoogleSQL in BigQuery now supports column aliases in SELECT and WHERE clause…
- NewsPlanet News Roundup
This is a roundup of articles from the openSUSE community listed on planet.opensuse.org.
- NewsIt’s ok that computers are (sometimes) better than us
Ryan is joined by Charity Majors, co-founder and CTO at Honeycomb, for a conversation about applying the concept of immutable infrastructure to software development to treat code…
- OutageBandwidth Local Market Impairment - 246 - Culpeper, VA
We are experiencing an impairment on the Bandwidth network which may affect a portion of calls.
- SecurityGitLab security advisory (AV26-1028) - Update 1
- Deadlinezai-glm-5-2 shuts down tomorrow
Replacement: Z.ai GLM 5.3.
News
108 pieces, the newest 20 here.
- Databricks and SAP unleash end-to-end data & AI capabilities to level up enterprise AI transformation
Today's AI models are more capable than ever.
- Amazon Bedrock expands API support and introduces Cross-Region Inferencing for OpenAI models in AWS GovCloud (US)
Amazon Bedrock now supports the OpenAI GPT-5.6 models (Terra and Luna) on the bedrock-runtime endpoint, with support for the Responses, Converse, and Chat Completions APIs in AWS…
- Google Workspace Weekly Recap - October 30, 2026
Fill with Gemini now provides cell-level citations for web sources and supports larger requests We are making it easier to verify your AI-generated data and scale your workflows i…
- Wealth Management Client Onboarding Needs More Than AI
Wealth Management client onboarding can stall even when every system has done its job.
- Web Search now available on Kiro in AWS GovCloud (US)
Kiro web search gives the agent real-time access to current information on the internet, so its answers draw on up-to-date search results and page content.
- Frontier AI–Accelerated Attacks: Securing the Agentic Web and MCP Surface
- Deliberate decisions and enterprise AI value
AI progress is moving quickly.
- Amazon Connect Customer automatically saves in-progress emails as drafts
Amazon Connect Customer automatically saves in-progress emails as drafts, helping agents resume work without losing progress when connectivity is interrupted or when their browser…
- The fastest delta weight syncs in the world
770GB of weights previously took ~36 seconds to sync on average; now they take 15, with a sub-second request pause, 7.5x faster than previous SOTA.
- How to Build a LlamaIndex Vector Store With TiDB
A LlamaIndex vector store is where your index keeps node embeddings, usually alongside the text chunks and metadata, so queries can find similar content.
- Everything released in October 2026 for Azure Developer CLI
The October recap for the Azure Developer CLI (`azd`).
- Edit entire presentations with Gemini in Google Slides
You can now use Gemini in Google Slides to edit multiple slides or an entire presentation at once.
- This Week in Open Source for October 30, 2026
by Daryl Ducharme & Shane Glass, Open Source Programs Office A look around the world of open source Right before Halloween weekend, it feels fitting to ask what actually haunts op…
- Daybreak Red from OpenAI now available to eligible customers on Amazon Bedrock in AWS GovCloud (US-East)
Security teams need powerful tools to find vulnerabilities, test exploits, and build defenses.
- Amazon CloudFront now provides viewer ISP and post-quantum TLS details
Amazon CloudFront can now forward two new optional headers to your origin.
- nemotron-halloween
- Weekend fixes — Vivaldi Desktop snapshot 4191.10
In this snapshot we continue the short, final journey to the 8.3 final.
- 4 real? Tracking exploitation and patching of eMudhra’s weak keys
Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates.
- Implement least-privilege access with designations in Amazon SageMaker Unified Studio
Amazon SageMaker Unified Studio now offers designations: named permission sets that give administrators granular, least-privilege control over what each project member can do.
- [In preview] Public Preview: Support database-level managed identity (including FIC) in Create Database Scoped Credential T-SQL
With database-level managed identity in Azure SQL Database, you can use a user-assigned managed identity for each database to query files in Azure Blob Storage and Azure Data Lake…
New Models
1 piece.
- New model: TBC: mischief 1
TBC mischief 1 is the world's first neuron-derived video model from The Biological Computing Co.
Security Desk
65 pieces, the newest 10 here.
- Oracle Security Alert for CVE-2026-114820
- Critical: Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
Affects signalk-server, @signalk/resources-provider.
- Critical: imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
Affects github.com/imgproxy/imgproxy/v3, github.com/imgproxy/imgproxy/v2, github.com/imgproxy/imgproxy.
- “Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
- Linux security advisory (AV26-1108)
- Critical: pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
Affects pypa/gh-action-pypi-publish.
- OpenSSF Newsletter – October 2026
October brought four new members and fresh CRA resources from Prague, a practical guide to finding and fixing vulnerabilities with AI, and a new Sandbox project.
- AI agent security in Kubernetes: Why prompt injection isn't the right term
Abdel Sghiouar, Google engineer and senior cloud developer advocate, thinks prompt injection should be called prompt poisoning Category: Guides & Best Practices
- Dev Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Dev channel is being updated to OS version 16868.5.0 (Browser version 158.0.8127.5 ) for most ChromeOS devices.
- New LF Research Survey Shows Generative AI Cuts Open Source Coding Time in Half, but 25% of Incoming Pull Requests are Considered AI Slop
While Generative AI boosts developer productivity and lowers barriers to entry, a new Linux Foundation Research report reveals it also increases maintainer workloads.
Technical Guides
17 pieces, the newest 10 here.
- Managing Amazon Bedrock costs end to end: A playbook for FinOps and platform teams
This post presents a five-stage operating model for managing Amazon Bedrock cost: attribute every dollar to an owner, make every request observable, enforce budgets, optimize plat…
- Preview web apps live as your coding agent builds them with Amazon Bedrock AgentCore runtime
Amazon Bedrock AgentCore Session endpoints give each runtime session an authenticated URL that forwards any HTTP method, path, and WebSocket connection to the ports you allow.
- Build a Validated Kubernetes Runtime for NVIDIA Dynamo
Teams building AI applications need a repeatable path from a model configuration to a working inference endpoint.
- Run AI Models for Edge Application Development with Just a Few Commands
AI is expanding beyond the data center as developers build a new generation of agents to act at the edge: monitoring driver attention and cabin conditions,...
- How Worldwide Express automated freight exceptions with Amazon Bedrock
Worldwide Express automated its less-than-truckload freight billing-exception process with a multi-agent solution built on Amazon Bedrock.
- Configure the ChatGPT desktop app with Amazon Bedrock in AWS GovCloud (US)
The ChatGPT desktop app is now available on Amazon Bedrock in AWS GovCloud (US).
- Build Specialized Agents on a Stack You Control with NVIDIA NemoClaw
Building an autonomous agent requires a model, a harness, and domain-specific tools.
- How to Check and Configure NVIDIA GPUDirect Storage for Your Platform
NVIDIA GPUDirect Storage (GDS) accelerates GPU storage access in on-premises and cloud environments.
- GPT-6.1 Terra Draws a Python Reading a Book
Explore GPT-6.1 Terra's Python code, turtle drawing, and responses to small tasks that check modern syntax, release knowledge, focused edits, and made-up functions.
- Inheritance and Composition: A Python OOP Guide
Learn how inheritance and composition in Python model is-a and has-a relationships, and when to use each to design flexible object-oriented code.
AI in the Field
10 pieces, the newest 6 here.
- Rewriting Copyright Law for Generative AI Would Hurt Everyone
In courts across the country, publishers and creators are suing large AI companies for training generative AI models on copyrighted works.
- MIT affiliates named 2026 Schmidt Sciences AI2050 Fellows
Five MIT faculty members and two additional alumni are honored with fellowships to advance research on beneficial AI.
- Q&A: Hey AI, who should I vote for this year?
MIT professors Adam Berinsky and Chara Podimata discuss a new project to track how AI chatbots are responding to questions about the 2026 U.S.
- Philip R. Lane: AI adoption in Europe
- Guidance: Using AI agents: complying with consumer law
Guidance from the Competition and Markets Authority (CMA) on how your business can benefit from agentic AI, while still meeting legal obligations.
- Research: Agentic AI and consumers
How agentic AI could affect consumers' lives, how the law applies, and what businesses should do to mitigate risk.
Columns
11 pieces, the newest 6 here.
- Friday Squid Blogging: Bigfin Squid Off California Coast
Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Oc…
- Childhood and Education #22: Voice Without Exit
Nikole Hannah-Jones wrote a brave self-critical piece in The New York Times, centrally about how she intentionally sent her daughter to a well-funded but failing school, PS 307, i…
- Was I wrong about open models & cyber risks?
Last week coined the term “Black October“ after an onslaught of critical vulnerability disclosures, including PHP2Shell and a long-standing GitLab bug, signified the moment when t…
- 2026.44: At Long Last…
The best Stratechery content from the week of October 26, 2026 including Anthropic numbers, the end of the Internet as we know it, and autocracies then and now.
- What Robert Caro learned about power after studying it for 50 years
"A lot of the stuff that I cut out, it's tragic that no one knows it."
- The Pulse: Anthropic kills the coding interview
AI is rendering the Leetcode-style interview pointless and now Anthropic has deleted it from its interview loop.
Research
173 pieces, the newest 10 here.
- GazeRIB: Systematic Evaluation of Multi-Reader Gaze-Guided Chest X-ray Learning
Radiologists' visual attention can supervise medical image learning, but how reader panel composition affects its value remains untested.
- Latent Reasoning in Continuous Space for Unified Multimodal Models
Unified Multimodal Models (UMMs) achieve remarkable success on diverse multimodal understanding and generation tasks, yet they still struggle to effectively leverage language-base…
- Flide: Accelerating Decision Inference with Exact State Forking
Decision models such as Jev have emerged as a highly promising paradigm for LLM agent systems, providing lightweight and reliable categorical reasoning for rapid System One execut…
- Latent Sparse Attention: Towards Subquadratic Ultra-Long Context Attention
Agentic workflows are increasingly shifting towards long-horizon tasks, such as open-ended scientific work, where models benefit from long context windows.
- Hierarchical World Models with Implicit Dynamics
Planning with world models enables test-time adaptation for embodied agents, offering superior generalization over direct policy learning.
- SemEllipsoid: Semantic-aware Shape Abstraction with Ellipsoid
Representing 3D shapes using a set of primitives - known as shape abstraction - is an actively studied problem in computer graphics with wide applications in shape understanding,…
- Dittany: Contribution-Guided Repair Framework for MAS Applications
LLM-based multi-agent system (MAS) applications can produce useful intermediate results while leaving task requirements unsatisfied.
- RoboArchitect: Automating the Design of Robotic Agents with Persistent Memory
Recent work shows that a frozen robot policy performs far better inside an agent harness, where control code decides when to query the policy, consult vision tools, or command the…
- Counting on Dummies: Privacy Amplification with Observable Counts and Truncated Batches
In many practical deployments of Differentially Private Stochastic Gradient Descent (DP-SGD), the server processes data in batches.
- ReLift: Dense 3D Tracking as Lifted Trajectory Repair
Dense 3D tracking from monocular video requires establishing point correspondences over time, estimating their depth, and inferring their trajectories during occlusion.
Releases
34 pieces, the newest 12 here.
- electron v43.8.6
- @mastra/vercel@1.6.3
- @mastra/upstash@1.6.0
- opencode 2.2.5: Worktree and Shell Mode Shortcuts, Press ⌘⌥O on macOS or Ctrl+Alt+O on Windows and Linux to choose a…
- langgraph==1.2.19
- @ai-sdk/xai@5.0.35
- @ai-sdk/workflow-harness@1.0.170
- @ai-sdk/workflow@2.0.91
- langgraph-checkpoint-sqlite==3.1.3
- ai 7.0.159
- pnpm 11.28.10
- Nx 24.0.3: angular-rspack, print diagnostic positions and full warning text (#37637, #37431)
New Repos & Packages
32 pieces, the newest 8 here.
Watch
32 pieces, the newest 6 here.
- Insights into agent code generation from Android Bench
- Running a 120B model offline on Surface RTX Spark Dev Box with Intelligent Terminal
- Mistral Large 4: The West’s Best Open Model? | AI Cyber Threats
- k8s-monitoring-helm Chart Office Hours (October 2026)
- Lessons from WhatsApp's Wear OS journey
- Token billing for LLM apps | live demo with Metronome + Stripe
Package releases
63 from the most used packages' own repositories, the newest 15 here.
- pydantic-ai-slim v2.64.0 · every release →
- python-discovery 1.9.0 · every release →
- @smithy/util-utf8 @smithy/node-http-handler@4.14.1 · every release →
- azure-core azure-appconfiguration-provider_2.5.1 · every release →
- sass 1.107.1 · every release →
- zircote/swagger-php 6.20.1 · every release →
- inertiajs/inertia-laravel v3.6.0 · every release →
- aws-sam-translator v1.116.0 · every release →
- aws-xray-sdk 2.16.0 · every release →
- log v0.4.35 · every release →
- @effect/openapi-generator@4.1.1 · every release →
- wasmparser v1.263.0 · every release →
- sqlfluff 4.5.0 · every release →
- frozendict v2.5.1 · every release →
- pydeck v9.3.12 · every release →