Tech news, November 3, 2026
Tuesday: 654 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadOh, your agents need OAuth2, too
Recorded at LDX3 by LeadDev, Ryan chats with Dan Moore, Senior Director of CIAM Strategy and Identity Standards at FusionAuth, about adapting established OAuth2 protocols for the…
- NewsCities Worldwide Build and Scale AI Services With NVIDIA Physical and Agentic AI
Cities generate enormous amounts of data from cameras, sensors and operational systems, but turning it into useful action — for planning, maintenance and public services — remains…
- NewsRestating the case for DNSSEC
Does TLS make DNSSEC unnecessary?
- Outage[DC3] [NETWORK] Switch down in DC3 Room 46 Rack B10
Both switches in the rack DC3/S46/B10 went offline.
- SecurityCVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Read this article Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
News
186 pieces, the newest 20 here.
- Build Custom Graph Visualizations with Neo4j NVL
Build custom, interactive graph experiences with the Neo4j Graph Visualization Library, a flexible foundation that lets developers define the interactions their applications need.
- GitHub Copilot is now a default agent in JetBrains Air
GitHub Copilot is now available in the JetBrains Air as a default agent.
- Introducing change-based throttling for Amazon Route 53 APIs
Amazon Route 53 now uses change-based throttling and has doubled its default API request rate from 5 to 10 requests per second.
- How a solo dev hit #2 in the Dutch App Store with this education app built on Expo
A solo developer with no native mobile experience shipped Samio in seven languages and reached #2 in paid Education on the Dutch App Store with no ad budget.
- Announcing XAML IntelliSense Support in the WinApp VS Code Extension
From creating your first project to writing UI and debugging with package identity, the WinApp extension helps you build Windows apps right in VS Code.
- Bridging Alloy and OpenTelemetry: the OTel engine is now in Public Preview
Many Grafana Cloud customers love what Alloy offers them, but we're also seeing a growing base of users who feel the same way about the OpenTelemetry Collector.
- Graphiant Named Confluent 2027 Data Streaming Startup of the Year for the Americas
Graphiant is Confluent's 2027 Americas Startup of the Year.
- My Favorite Undocumented Feature in SQL MCP Server
Deploy Microsoft's SQL MCP Server in minutes without a configuration file.
- [In preview] Public Preview: JWT validation for Application Gateway for Containers
Application Gateway for Containers now supports centralized JSON Web Token validation through the AuthPolicy custom resource.
- [In preview] Public Preview: MCP gateway for Application Gateway for Containers
Application Gateway for Containers now supports Model Context Protocol routing through the new MCPRoute custom resource.
- [In preview] Public Preview: Private ingress for Application Gateway for Containers
Application Gateway for Containers now supports private frontends that are reachable only through approved Azure Private Link private endpoints.
- Claude Platform now supports native OpenTelemetry observability in Databricks MLflow
An agent can return a plausible answer while missing an important finding or reading the same source repeatedly...
- Declare and optimize with UNIQUE constraints on Databricks
Data teams often maintain uniqueness guarantees in their pipelines, but without a...
- Cortex Training: Serverless Fine-Tuning for Open-Weight LLMs
Customize open-weight LLMs with SFT, RL and custom training loops on serverless GPUs.
- Fuel Every Agent and App With Data That Keeps Pace
Autonomous data engineering, real-time analytics and operational data come together on Snowflake so AI agents and apps run on fresh, trusted data.
- Real-Time Analytics on Snowflake: Stream, Transform, Serve
Build real-time analytics on Snowflake.
- How Regeneron built a multi-executor Omics platform with intelligent resource management on AWS
This post references AWS ParallelCluster.
- Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM).
- [In preview] Public Preview: Advanced capacity insights are now available in Azure Storage Discovery
Advanced capacity insights are now available for preview in Azure Storage Discovery.
- Amazon Connect Customer lets agents pause and resume emails
Amazon Connect Customer lets agents pause emails while waiting for information or approvals, freeing them to handle higher-priority contacts and resume their work later.
New Models
9 pieces.
- New model: Morph: Reflex
Morph's decision model.
- New model: Cohere: Embed 5 Fast
Embed 5 Fast is the lower-latency, cost-efficient tier of Cohere's Embed 5 family of multimodal embedding models (about 1B parameters).
- New model: Cohere: Embed 5 Pro
Embed 5 Pro is the higher-accuracy tier of Cohere's Embed 5 family of multimodal embedding models (about 2.4B parameters).
- New model: Cohere: Rerank 5 Fast
Rerank 5 Fast is the low-latency tier of Cohere's Rerank 5 family of reranking models.
- New model: Cohere: Rerank 5 Pro
Rerank 5 Pro is the higher-accuracy tier of Cohere's Rerank 5 family of reranking models.
- New model: Cloudflare: Clairic
Clairic is Cloudflare's System One-style extraction model served on Workers AI.
- New model: Moondream: Parakeet Ultra
Parakeet Ultra is Moondream's post-trained version of NVIDIA's Parakeet TDT 0.6B v3 speech-to-text model, with the same architecture, tokenizer, and 0.6B parameters.
- Open model: BAAI/PingPongRealWorldRL
New open weights from BAAI on the Hugging Face Hub.
- New model: Crouton Alpha
Crouton Alpha is a lightweight model built for scalable coding, agentic, and multimodal workflows.
Security Desk
75 pieces, the newest 10 here.
- Binance’s $6.34 Billion Hack: Developer Machines, AI Tooling, and Wallet Signing
Binance’s November 3 findings reveal a path from a malicious coding assignment to wallet signing.
- Chrome for Android Update
Hi, everyone!
- CVE-2026-90634: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: An uncontrolled memory access in the PDF import code of…
- CVE-2026-90632: Apache OpenOffice: Local file inclusion via GStreamer plugin
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: Apache OpenOffice documents can include multimedia cont…
- CVE-2026-90631: Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4.1.16 Description: Apache OpenOffice documents can contain links.
- WordPress security advisory (AV26-1117)
- CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
Bulletin ID: 2026-168-AWS Publication Date: 11/03/2026 13:00 PM PST Description: We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0.
- CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog chayes Nov 03, 2026 Release Date November 03, 2026 Description CISA has added one new vulnerability to its Known Explo…
- Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux.
- The PHP Security Wake-Up Call: Fixes Are Only the Beginning
Technical Guides
11 pieces, the newest 10 here.
- Find your logging gaps before they become compliance gaps with CloudTrail Data Event Coverage
AWS CloudTrail now includes a Data event coverage page in the AWS CloudTrail console, giving you a single view of how well your resources are covered by data event logging.
- Tag Editor moves to AWS Resource Explorer: bulk-tag resources across Regions
Starting today, you can manage resource tags in bulk in the AWS Resource Explorer console, and requests to Tag Editor console will redirect to Resource Explorer automatically.
- Bring structured and unstructured data together with Amazon Quick
Amazon Quick brings structured and unstructured data together in one experience.
- ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway
Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while pre…
- How Gen Digital built Norton Revamp’s AI-curated News Engine with Amazon Bedrock AgentCore Web Search
Gen Digital built Norton Revamp, a generative AI-powered professional reputation management platform, with an AI-curated News Engine grounded by Web Search on Amazon Bedrock Agent…
- Build a semantic layer for agentic AI with EDB Postgres AI and Amazon Bedrock AgentCore
Learn how to build a governed semantic layer for agentic AI inside EDB Postgres AI and query it from a Strands Agents agent on Amazon Bedrock AgentCore.
- Building ultra-low-latency voice AI applications on AWS
Learn how Cartesia, an AWS Partner, uses purpose-built State Space Models and AWS infrastructure to deliver sub-100ms text-to-speech and speech-to-text at global scale, and how to…
- Introducing India-based inference for Kimi K3 on Amazon Bedrock
Amazon Bedrock now offers in-country inference in India for Kimi K3, keeping processing within the Mumbai and Hyderabad Regions.
- Converting Documents to Markdown With MarkItDown
Learn how to use MarkItDown to convert Excel files, PDFs, and images into clean Markdown that's ready for LLMs and AI workflows.
- Quiz: How to Use Claude Code Skills for Better Python Docstrings
Check your understanding of Claude Code skills, from SKILL.md frontmatter and reference files to bundled scripts and personal skills.
AI in the Field
7 pieces, the newest 6 here.
- Building connections across the research infrastructure
MIT.nano and the Northeast Microelectronics Coalition gathered facility leaders and technology professionals from across the nation to explore ways to make shared-access facilitie…
- How AWS helps education leaders prioritize AI investments
Eighteen months ago, most boards were asking leaders whether they were moving fast enough on AI.
- Modernize tax and motor vehicle agencies with AI
In this post, we explore how Amazon Web Services (AWS) AI capabilities can transform constituent services and business operations.
- Call for proposals: EU AI Media Platform – Modular multilingual public-interest infrastructure for European news and audiovisual media (IA) - Apply AI
Call for proposals: EU AI Media Platform – Modular multilingual public-interest infrastructure for European news and audiovisual media (IA) - Apply AI Anonymous (not verified) Tue…
- Streamlining Contested Adjudications in Licensing Proceedings
The U.S.
- RETBind: a patient-level multimodal foundation model for unified cross-modal retinal representation learning
npj Digital Medicine, Published online: 03 November 2026; doi:10.1038/s41746-026-03426-3 RETBind: a patient-level multimodal foundation model for unified cross-modal retinal repre…
Columns
12 pieces, the newest 6 here.
- Elon Is Doing It Again: SpaceX Will Be The World’s Biggest AI Cloud
Making 13GW in 1.5 Years A Reality, Repurposing Rocket Ship Campuses, A Datacenter at TeraFab?
- How software engineering is changing: a tale of two eras
We invited readers to write about how building software changed, in an essay challenge.
- OpenAI Updates Its Model Spec
The Model Spec is potentially OpenAI’s most important document.
- Qwen 3.8 27B on my laptop can interpret model weights, too
Yesterday's hot paper was Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights by Rikiya Takehi, Jayden Teoh, Alex Zhang, and Omar Khattab.
- Open October LLM Architecture Roundup
A roundup of ten open-weight LLM architecture releases from October 2026, covering attention mechanisms, hybrid layers, and MoE designs.
- How do you implement a random-access database when you don’t have random-access external storage?
You just store it all in memory, in your own program.
Research
170 pieces, the newest 10 here.
- PARE: A Power and Area-Efficient Memory Controller for High-Bandwidth DRAM
PARE: A Power and Area-Efficient Memory Controller for High-Bandwidth DRAM High-throughput processors, like GPUs, fundamentally depend on high-bandwidth DRAM to feed their paralle…
- DreamX: Video Diffusion Model is a Universal Latent Action Learner
Learning a universal action representation from video requires modeling dynamics that are consistent across different executions of the same action yet invariant to changes in emb…
- From Autonomous Agents to Cognitive Symbionts: Toward AI-Augmented Human Intelligence
For a decade, progress in artificial intelligence has been measured by how much a machine can do on its own.
- Aligning Language Models with General Preferences: An Empirical Study of Direct Nash Optimization
Direct Nash Optimization (DNO) aligns a language model to a general preference function by approximating the Nash equilibrium of a two-player preference game.
- PolicyIK: High-Precision Inverse Kinematics for Robot Arms with Reinforcement Learning
Inverse kinematics (IK) converts end-effector pose commands into joint motion, and many vision-language-action (VLA) policies rely on it to act on a given arm and to transfer acro…
- GUILD: Guided Iterative Data Collection for Imitation Learning
Imitation learning policies in robotics are trained on datasets collected through costly real-world teleoperation.
- Visibility-Aware Reference Generation for Benchmarking Visual 3D Reconstruction in Vegetation-Rich Environments
Reliable evaluation of visual 3D reconstruction and depth estimation in vegetation-rich outdoor environments is limited by the scarcity of geometric ground-truth data and the cost…
- GSCV++: Lightweight 3D Gaussian Splatting Sequence Compression via Standard Video Codecs
This paper presents GSCV++, a lightweight pipeline for 3D {G}aussian {S}platting (GS) sequences {C}ompression with standard {V}ideo codecs.
- Suppressing Misaligned Behaviors in Language Models, Durably
Undesired model behaviors can emerge or re-emerge at any stage of training.
- Reading Why: Born-Measured Attention with Exact Word Evidence on Light and Qubits
When a language model answers, we can usually only estimate why.
Releases
53 pieces, the newest 12 here.
- mastracode@0.49.0
- mastra@1.38.0
- libcap 2.75 source archive
- Argo CD 3.6.0: kubectl create namespace argocd
- Ollama 0.40.15: mlx, load bundled CUDA libraries in-process on Linux by @dhiltgen in #19433
- TestFlight Update
- Nx 24.0.4: angular-rspack, respect component style minification (#37722, #37713)
- sdk/v3.274.0
- OpenAI Node SDK 7.49.0: api, add workload identity providers and federation rules (#3103) (47c4227)
- OpenAI Python SDK 3.44.0: api, add workload identity providers and federation rules (#4237) (12709d7)
- electron v45.2.2
- electron v43.8.7
New Repos & Packages
40 pieces, the newest 8 here.
Watch
32 pieces, the newest 6 here.
- I built an agent to run my YouTube channel
- AI-Friendly Code: The Missing Link for Speed with Quality • Adam Tornhill • GOTO Copenhagen 2026
- Building Smarter, Agentic Media Operations with DataMiner | Skyline Communications
- A new way to use GitHub Copilot in JetBrains IDEs
- How Work is Changing in 2027 (Replit for Business)
- What does LangChain even do these days?
Package releases
59 from the most used packages' own repositories, the newest 15 here.
- pyzmq v27.3.0 · every release →
- srsly release-v2.5.6 · every release →
- open-telemetry/sem-conv 1.45.0 · every release →
- laravel/octane v2.23.0 · every release →
- azure-core azure-mgmt-hybridcompute_10.1.0 · every release →
- @azure/abort-controller @azure/arm-hybridcompute_5.1.0 · every release →
- resend v2.51.0 · every release →
- dedoc/scramble v0.13.53 · every release →
- zircote/swagger-php 6.20.2 · every release →
- yfinance 1.8.0 · every release →
- timm v1.0.31 · every release →
- databricks-labs-blueprint v0.13.0 · every release →
- pydocket rust/v0.4.1 · every release →
- uncalled-for 0.4.2 · every release →
- rector/rector 2.8.4 · every release →