Tech news, November 4, 2026
Wednesday: 610 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadProduct compliance, demystified: how Raspberry Pi helps you get to market
How Raspberry Pi helps industrial customers bring fully compliant products to market faster.
- NewsImplementing security labels in Matrix
A talk by Midhun Suresh R and Kieran Lane at The Matrix Conference 2026.
- NewsSolar PV for Internet resilience (Part 1): Designing your system
Guest Post: Solar photovoltaics and battery storage can provide reliable power for network infrastructure, even in remote locations.
- OutageIncreased task-related errors for Copilot Mission Control
We are investigating reports of impacted performance for some GitHub services.
- SecurityBeta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16868.9.0 (Browser version 158.0.8127.9 ) for most ChromeOS devices.
News
149 pieces, the newest 20 here.
- Laravel October Product Updates
Resend email on Laravel Cloud, QUERY routes in the Laravel framework, and PHP security advisories in Forge.
- Amazon S3 Tables now offer managed migration of Apache Hive tables to Apache Iceberg
You can now migrate existing Apache Hive datasets in Amazon S3 to fully managed Apache Iceberg tables in Amazon S3 Tables, with no pipelines to build or compute to provision, whil…
- AI changed how we write software. We must change how we release it.
Introducing Release Autopilot.
- Workflow lab: Test ideas with code layers and the Figma agent
Bringing code onto the canvas gives teams a shared space to compare working prototypes side by side, refine a direction, and collaborate on ideas with teammates.
- Allow and block client IPs in NGINX Gateway Fabric with AccessPolicy
AccessPolicy in NGINX Gateway Fabric lets you allow or block client IP addresses and CIDR ranges on a Gateway or on individual routes.
- Implementing PostgreSQL logical replication between Amazon RDS for PostgreSQL instances on separate AWS Outposts
Learn how to configure PostgreSQL logical replication between two Amazon RDS for PostgreSQL instances on separate AWS Outposts racks, keeping all replication traffic and backups w…
- Intelligent Terminal 0.3: A new way to manage your tabs and agents
This is the biggest update to Intelligent Terminal since we launched.
- Data Manager API now supports Google Ads call conversions and row-level diagnostics
The latest release of the Data Manager API adds support for Google Ads call conversions.
- Amazon ECS Managed Daemons can now collect json-file logs from application containers on Amazon ECS Managed Instances
Amazon Elastic Container Service (Amazon ECS) introduces json-file log driver support for Amazon ECS Managed Instances and log driver volumes for Amazon ECS Managed Daemons.
- Change the database: Two engineering teams on open source, hard forks, and sovereign data
Based on a conversation with Altinity's Robert Hodges and Max Romanenko, CTO at EDB Some engineering principles survive every product cycle.
- Call for Proposals: PyTorch Day China 2026
The Call for Proposals for PyTorch Day China 2026 closes November 10 at 23:59 China Standard Time.
- CodeQL 2.27.4 improves accuracy and query metadata
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code.
- The Enterprise Case for Open-Weight Models on Databricks
As field engineers at Databricks, we spend our days inside enterprise AI deployments,...
- Automate Custom Image Builds with EC2 Image Builder for Amazon WorkSpaces
Introduction For organizations running Amazon WorkSpaces at scale, a custom image is the foundation of every end user session.
- CVE-2026-109518 APT vulnerability fixes available
Fixes are available in Ubuntu for the CVE-2026-109518 vulnerability affecting APT.
- Upcoming changes to multi-party approvals in the Google Ads API
Earlier this year, the Google Ads API started requiring multi-party approvals (MPA) when performing sensitive API actions.
- Introducing identity and access management for Lambda Cloud
Role-based access control for your GPU cloud: roles, groups, and service identities are now in the Lambda Cloud console.
- GKE Workspaces: Your notebook, on Google's AI infrastructure
by Siyuan Zhang & Antonio Ojea, Google Cloud If you're an ML engineer or researcher, the GPUs and TPUs you need increasingly live on Kubernetes, but Kubernetes should be an invisi…
- Post Mortem: Patching the PHP and Node.js Vulnerabilities
How we patched every Laravel Cloud app in place within about 27 hours of the PHP and Node.js disclosures, what broke on Forge, Envoyer, and Vapor, and what we are changing.
- GitHub Copilot is now available in Xcode’s coding assistant
You can now work with GitHub Copilot directly in Xcode’s built-in coding assistant, bringing Copilot into your native Xcode workflow.
New Models
8 pieces.
- New model: OpenAI: GPT Image 2.6 Sunburst
GPT Image 2.6 Sunburst is OpenAI's image generation and editing model optimized for detail: dense compositions, text-heavy layouts, and edits that keep details consistent from one…
- New model: OpenAI: GPT Image 2.6 Flare
GPT Image 2.6 Flare is OpenAI's image generation and editing model optimized for speed: fast iteration and interactive text-to-image and image-to-image workflows, generating about…
- New model: Google: Gemini Omni 1.1 Flash
Gemini Omni 1.1 Flash is Google's native multimodal video generation and editing model, the generally available successor to Gemini Omni Flash Preview.
- Open model: thinkingmachines/Inkling-2-Small
Trending on the Hugging Face Hub.
- New model: Ricursive: Ripple 65B Preview
Ripple-65B-Preview by ricursiveAI, a 65B model with native tool calling, served in BF16.
- Open model: meituan-longcat/LongCat-2.5
Trending on the Hugging Face Hub.
- New model: Tencent: Hy4
The official release of Hy4 delivers comprehensive and substantial improvements over Hy4 Preview, with particularly strong gains in agentic capabilities and performance across a w…
- Open model: ricursiveAI/Ripple-65B-Preview
Trending on the Hugging Face Hub.
Security Desk
68 pieces, the newest 10 here.
- Horizon3 Expands Australia and New Zealand Team, Strengthens APJ Investment
Chris Wood appointed Director of Sales, ANZ, and Vivienne Horsfall named Growth Marketing Director, APJ.
- CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-age…
- CVE-2026-109518: RCE in apt(1) (DSA 6607-1)
Posted by Jan Schaumann on Nov 04 This Debian Security Advisory for CVE-2026-109518 in apt(1) seems worth sharing more widely: https://lists.debian.org/debian-security-announce/20…
- Surviving cybersecurity until the end of 2026
After Binance, LiteLLM, PHP2Shell and eMudhra, here are six practices and a checklist to limit what the next compromise can reach before 2027.
- CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog chayes Nov 04, 2026 Release Date November 04, 2026 Description CISA has added one new vulnerability to its Known Explo…
- Android security advisory – November 2026 monthly rollup (AV26-1128)
- Cisco security advisory (AV26-1127)
- Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote at…
- GitHub security advisory (AV26-1126)
- CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard
Bulletin ID: 2026-169-AWS Publication Date: 11/04/2026 11:30 AM PST Description: We identified CVE-2026-122192, an issue in Firecracker v0.23.0 through v1.16.1 that, under certain…
Technical Guides
14 pieces, the newest 10 here.
- Gain per-developer visibility into Kiro Enterprise credit usage
In this post, we introduce the Kiro Cost Optimizer, an open-source, serverless solution that gives you per-developer visibility into Kiro Enterprise credit usage.
- How NVIDIA Uses AI Agents to Streamline AI Factory Operations
As GPU clusters scale, operations span compute, network, hardware, and scheduling.
- Use decision models with Amazon Bedrock AgentCore Evaluations
Some agent-evaluation questions are narrow and repeatable, and decision models answer exactly that kind of question.
- NVIDIA CUDA 13.5 Brings NVIDIA Vera Rubin GA Support
As artificial intelligence and accelerated computing continue to push the boundaries of what's possible, the latest NVIDIA CUDA release arrives to unlock...
- How CI Financial ran parallel teams on AWS Transform
A Canadian investment management firm needed to exit VMware on a hard deadline.
- How NVIDIA Factory Operations Blueprint Coordinates AI Agents to Investigate Production Issues
A Siemens report estimates that unplanned downtime costs an average large plant in the surveyed sectors $253 million per year.
- Smart Approvals in AWS Quick: Human oversight where it matters
Smart Approvals in Amazon Quick reviews eligible agent actions within your existing controls, reducing unnecessary approval prompts while keeping consequential decisions with a pe…
- Four layers of context engineering for production AI agents: How Deep Insight applies them in working code
In production AI agents, context management is the real bottleneck.
- How Indegene is modernizing and scaling enterprise data quality in life sciences
This post explores how Indegene built a production-grade, LLM-powered Data Quality Agent in its NEXT Unified Data Platform on AWS.
- How U Mobile built agentic telco operations with Amazon Bedrock AgentCore
U Mobile, Malaysia's newest 5G network provider, built AiDaH, an agentic AI operations platform on Amazon Bedrock AgentCore that moves beyond AI assistance to autonomous action ac…
AI in the Field
6 pieces.
- Google Summaries Aren't About AI, They're About Lock-In
Whether they call it AI summaries, knowledge panels, or AMP, Google takes actions that are less about functionality and more about locking you into its own ecosystem.
- OpenAI is already trying to shape the 2028 election
In response to an essay written by OpenAI's chief global affairs officer, AI Now's Kate Brennan says "This is written by a private company that is trying to advocate for policies…
- Trust, not volume: The real AI advantage in game development
Key findings from the Perforce 2026 State of Real-Time Workflows Report, produced with AWS and based on 608 practitioners.
- Coming Soon: Guest Report on AI Corporate Structure and Mission Accountability
Public Good or Private Gain?
- We're sharing our framework for building safer and more helpful AI for health.
Many of us have turned to AI with a health question or received care from a doctor who’s using it.
- Cross-paradigm audit of large language model judges for clinical text evaluation
npj Digital Medicine, Published online: 04 November 2026; doi:10.1038/s41746-026-03443-2 Cross-paradigm audit of large language model judges for clinical text evaluation
Columns
4 pieces.
- [AINews] Behind Latent Space: Kill My SaaS, Jev & AI in 2026 | AIEi Shanghai
November 3, 2026 — A quiet day lets us share some behind the senes.
- How big is the open model economy today?
Our first open model economy research note for paid subscribers.
- There are things with ranks, but it’s not always clear what the ranks mean
The problem with documentation written by people who know the feature too well.
- AI on the Ballot
Data Centers were on the ballot, and they lost in a major way; what does it mean if American opposition to building is permanent?
Research
157 pieces, the newest 10 here.
- From Pixels to Actions - Towards Native Vision-Language-Action Policies
Vision-language-action models are typically built on a simple premise: perception is first compressed by visual encoders, and action reasoning begins only afterwards.
- A Framework for Context Enrichment and Selective Robustness in LLM Social Agents
Researchers use large language models as agents in social simulations, where agents are prompted with observations and background information intended to shape their actions.
- FlowReconBench: Accuracy, calibration and cost of learned and classical flow reconstruction from sparse sensors
Reconstructing full flow fields from sparse sensors requires prior assumptions about unmeasured regions and physical variables.
- BEAKER: An Expert-Curated Benchmark for Embodied Brains in Self-Driving Chemical Laboratories
Self-Driving Chemical Laboratories (SDCLs) are moving chemical experimentation toward embodied automation, where machines must perceive laboratory scenes, reason about experimenta…
- FrontierPhysics: Evaluating Agents for End-to-End Physics Research
AI agents are playing an increasingly important role in physics research.
- Perceptive Humanoid Motion from Simulation
Humanoid robots have the potential to automate a wide range of physical tasks.
- Reinforcement Learning Enables Scaling Generalist Robot Policy Improvement
The introduction of generalist robot policies has enabled a single, large model to learn to perform a variety of tasks from a vast pre-training corpus.
- Motion-guided Contrastive Regularization For Latent World Models
JEPA-style world models learn action-conditioned latent dynamics without reconstructing observations, but distributional regularization alone does not ensure that their representa…
- Occlusion for Free: Detecting Occlusion from the Disagreement Between Two Monocular Distance Cues
Knowing that a pedestrian is occluded is useful to a robot even when the detector cannot recover the hidden pixels, but occlusion estimators are normally trained on occlusion anno…
- MCP-Eco: A Linked Dataset of MCP Servers, Consumers, and Development Activity
The Model Context Protocol (MCP) enables LLM agents to access external tools and data.
Releases
45 pieces, the newest 12 here.
- OpenTofu 1.13.8: The -v short option now again works as an alias for the version command and --version option, fixing an…
- electron v45.2.3
- v1.13.7
- langchain-fireworks==1.7.2
- @anthropic-ai/sdk 1.5.0
- Anthropic Python SDK 2.5.0: api, add error details types and new error type values
- Release v0.67.0
- v1.13.6
- google-cloud-sdk-v1.1.3
- vertex-sdk-v1.1.2
- LiteLLM 1.106.7: Verify this release
- v2026.11.1: npm provenance verified by default, with repository pins in mise.lock
New Repos & Packages
34 pieces, the newest 8 here.
Watch
29 pieces, the newest 6 here.
- GPT-Image-2.6: Faster image generation with Flare and Sunburst
- The Linkerd Story: The People Behind the Service Mesh Premiere Announcement
- Protecting and Re-Monetizing Live Content with Agentic Intelligence | Support Partners
- Accelerating Open Intelligence Together - Mark Collier PyTorch Conference NA Keynote
- Inference Optimization with CoreWeave Mission Control Agent
- Strengthening Content Security in the Hybrid Intelligence Era | Trusted Partner Network
Package releases
96 from the most used packages' own repositories, the newest 15 here.
- dulwich-1.2.21 · every release →
- azure-core azure-ai-evaluation_1.18.11 · every release →
- tox 4.67.11 · every release →
- databricks-sql-connector v4.9.0 · every release →
- @angular-devkit/core v22.2.6 · every release →
- gcloud-aio-auth auth-5.6.1 · every release →
- @smithy/util-utf8 @smithy/node-http-handler@4.14.2 · every release →
- basic-ftp v6.2.6 · every release →
- @aws-sdk/types v3.1162.0 · every release →
- openfeature-provider-posthog-v0.1.143 · every release →
- aws/aws-sdk-php 3.402.6 · every release →
- graphql v17.1.0 · every release →
- strands-agents typescript/v1.24.0 · every release →
- coverage 7.17.2 · every release →
- zircote/swagger-php 7.2.0 · every release →