Tech news, October 31, 2026
Saturday: 128 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadWhat’s new in AI infrastructure and orchestration in October
The Google Cloud AI Infrastructure team had another busy month in October, filled with new product launches and updates to power today’s AI and agentic workloads scalably and effi…
- NewsWhat’s new with Google Cloud
Want to know the latest from Google Cloud?
- NewsHow to run coding agents in parallel without piling up PRs
- OutageNetherlands Silent Authentication - Service degradation affecting KPN network
We continue to work with our carrier partners to resolve the issue and will issue an update as soon as more information becomes available.
- SecurityCVE-2026-118636: Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder
Posted by Emmanuel Lécharny on Oct 31 Severity: critical CVSS 3.1: 9.8 (critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache MINA 3.0.0 through 3.0.0…
- Deadlinezai-glm-5-2 shuts down today
Replacement: Z.ai GLM 5.3.
News
14 pieces.
- Ponder This Challenge - November 2026 - The SumSum
- Lakebase branching for CI/CD: lessons from 100 PR databases
The problem: testing against production data shouldn't take over 30 minutesSnorkel...
- A WebGPU cat puzzle game shipped in three days on Expo, with an AI agent as the QA team
Purrkour renders every cat, box and sound in code with TypeGPU and react-native-webgpu, and went from first commit to App Store-ready in three days.
- Monthly News – October 2026
Hello everyone, Before we start with the news, I’d like to thank all the people who support this project.
- Still on MariaDB 10.6? Why your next upgrade is a security decision
Last week was about PHP.
- DeepSeek-V4.1-Flash-1017: Wish-Driven Programming Made Real
DeepSeek-V4.1-Flash-1017 is here!
- October 31, 2026
Google SecOps Feature Basic Mode search This feature is in public preview.
- How to run coding agents in parallel without piling up PRs
- The TL;DR on Figma Weave: Make your creative process repeatable
Figma Weave brings AI generation and editing tools together into connected, reusable workflows, giving you a process your team can shape, refine, and repeat.
- E-Maj 5.0.1 : Major Security Update.
We are very glad to announce the E-Maj 5.0.1 version.
- pgAdmin 4 v9.19 Released
The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.19.
- What's new in Astro - October 2026
October 2026 - Astro 7.4, conference talks, and more!
- October 2026 Security Releases
Security releases for body-parser and multer have been published.
- v1.3 GA, JSON2 Path Indexes & PostgreSQL COPY FROM STDIN | Greptime Monthly Report - No. 89
GreptimeDB v1.3.0 is GA, with native histograms on by default and opt-in Trace V2.
Security Desk
19 pieces, the newest 10 here.
- Vulnerability & Patch Roundup — October 2026
If you operate a website, you’re already aware that a single unpatched vulnerability can render your site inaccessible, compromise your reputation, or necessitate extensive remedi…
- CVE-2026-98432: init_on_free=1 as an additional interim mitigation
Posted by Rui Sousa on Oct 31 Hello, An additional hardening option for CVE-2026-98432 (the IPv4 TCP inet_opt use-after-free), for systems that cannot take a fixed kernel yet.
- WebDyne for Perl (5 CVEs)
Posted by Robert Rothenberg on Oct 31 CVE-2026-78188 WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes C…
- Chromium: CVE-2026-118304 Improper input validation in SVG
This CVE was assigned by Chrome.
- Chromium: CVE-2026-118313 Use after free in Video
This CVE was assigned by Chrome.
- Chromium: CVE-2026-118311 Memory corruption in Media
This CVE was assigned by Chrome.
- Chromium: CVE-2026-118317 Memory corruption in HTML
This CVE was assigned by Chrome.
- Chromium: CVE-2026-118315 Improper input validation in SVG
This CVE was assigned by Chrome.
- Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets.
- Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
Technical Guides
2 pieces.
- OpenAI Halves the Price of Its New Everyday AI Model
Real Python's weekly AI news for October 24–30, 2026, explained in plain language: Cheaper OpenAI Model, Free Mistral Model, and New Kimi Model.
- Quiz: Socket Programming in Python
In this quiz, you'll test your understanding of Python sockets.
AI in the Field
2 pieces.
- Understanding clinical reasoning variability in medical large language models: a mechanistic interpretability study
npj Digital Medicine, Published online: 31 October 2026; doi:10.1038/s41746-026-03423-6 Understanding clinical reasoning variability in medical large language models: a mechanisti…
- Predicting persistent fever in patients with cancer receiving antibiotics: a machine learning approach
npj Digital Medicine, Published online: 31 October 2026; doi:10.1038/s41746-026-03449-w Predicting persistent fever in patients with cancer receiving antibiotics: a machine learni…
Columns
3 pieces.
- Agents Prompt People: Using Agents for Long-Horizon Financial Work
Arca's head of AI discusses persistent memory, the benefits of a custom harness, and agentic workflows that span days.
- Pray for Chaos
There’s two basic ways AI can play out, one is order, the other is chaos.
- [AINews] Google admits AI Mode hurts Search revenue; -15% $500B drop worst since 2004 IPO. AI Bear Market coming?
It turns out you cannot have your cake AND eat it
Research
5 pieces.
- Critiquing AI Surveys with a Case Study on Temporal Features for Trustworthy Computer Vision
A novel, thorough manual survey is presented, focusing on the trustworthy extraction and application of temporal features in drone video feeds for object detection and tracking.
- A Systematic Review of Digital Twins and Security for Cyber-Physical Systems
The rapid growth of Cyber-Physical Systems (CPS) has increased interest in digital twins (DTs) as virtual representations of physical systems to improve efficiency, monitoring, an…
- 3D Human Interaction Generation: A Survey
3D human interaction generation has emerged as a key research area, focusing on producing dynamic and contextually relevant interactions between humans and various interactive ent…
- A Systematic Review of Modern Machine Learning in Query Optimization
Traditional query optimization struggles with modern, heterogeneous workloads.
- Representation Control for Large Language Models: Survey and Research Challenges
Large language models (LLMs) are capable of completing a variety of tasks, but remain unpredictable and intractable.
Releases
20 pieces, the newest 12 here.
- providers/2026-10-31
- expo-template-tabs@58.0.31
- expo-template-default@58.0.31
- v2026.10.25: Edit and remove tasks from the CLI, and `mise watch --once`
- mise-daemons-v2026.10.12
- b12020
- electron v44.10.1
- b12019
- openai 7.47.0
- Preact 11.1.0: Add preact/compat/compiler-runtime for apps compiled with React Compiler (#5323, thanks @JoviDeCroock)
- Preact 11.1.1: Fix rendering, updating, and hydrating <template> elements in SVG and MathML namespaces (#5339, thanks…
- @openrouter/sdk 1.5.33
New Repos & Packages
24 pieces, the newest 8 here.
Watch
9 pieces, the newest 6 here.
- AI:AM: Carbon in the Arena, Mistral's Le Chonk, the Agent-Run Economy, Ferroelectric RAM + New Hacks
- Meet Shriya Kamat Tarcar - Speaker at KubeCon + CloudNativeCon North America
- Meet Aman Singh - Speaker at KubeCon + CloudNativeCon North America
- Does AI Matter for a Potato Chip Company?
- The Self-Driving Finance Team (Replit for Business)
- Content Creation & Production: Valorem Reply on Accelerating Content Workflows — Jamie Burgess
Package releases
30 from the most used packages' own repositories, the newest 15 here.
- trio v0.35.0 · every release →
- @formatjs/ecma402-abstract formatjs_intl_hermes_v0.3.2 · every release →
- amphp/dns v2.4.2 · every release →
- nodeenv 1.12.0 · every release →
- unrs-resolver v1.13.0 · every release →
- @azure/abort-controller @azure/keyvault-common_2.1.1 · every release →
- pyee v16.0.1 · every release →
- schema-utils v4.8.2 · every release →
- react-resizable-panels 4.16.0 · every release →
- openai-php/client v0.22.0 · every release →
- platformdirs 4.14.2 · every release →
- filelock 4.2.6 · every release →
- pytest-env 1.8.4 · every release →
- python-multipart 0.0.33 · every release →
- @dnd-kit/core @dnd-kit/geometry@0.5.3 · every release →