Tech news, November 6, 2026
Friday: 611 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- LeadWhat’s new with Google Data Cloud
November 2 - November 6 BigQuery observability for data agents is now generally available: Data teams can now monitor the performance, adoption, latency, and cost of BigQuery data…
- NewsWelcome to life in the chip age
Ryan sits down with Rakesh Kumar, professor of computer engineering at the University of Illinois Urbana-Champaign, about the astounding complexity of manufacturing modern semicon…
- NewsElement Web: Device verification becomes mandatory by default
Starting with Element Web / Desktop 1.12.33, verifying your device is mandatory by default.
- OutageFrance SMS - Delivery degradation affecting SMS towards Orange France
A fix has been implemented and we are monitoring the results.
- SecurityRe: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Jeffrey Walton on Nov 05 One general comment that does not fit well into most of the discussions around sshole...
- Deadlinegemini-3.6-flash shuts down in 13 days
Replacement: gemini-3.8-flash.
News
143 pieces, the newest 20 here.
- Java OpenJDK October 2026 Patch & Security Update
Hello Java customers!
- Kimi K3.1 Pro (Highspeed) now available on Amazon Bedrock
Today, Kimi K3.1 Pro from Moonshot AI is available on Amazon Bedrock, expanding our open weight model portfolio with the security and governance that customers rely on.
- How we built Render OIDC
Learn how Render built OIDC authentication using short-lived tokens, workspace-specific issuers, and a daemon that keeps credentials fresh.
- Copilot impact dashboard adds chat and VS Code agent usage
The Agent adoption chart in the Copilot impact dashboard now includes Copilot Chat and the VS Code Agents window, so you can see engagement across nine Copilot experiences.
- Beyond code generation: A developer’s guide to agentic engineering
Writing code got faster.
- Read, don't copy: replacing file feeds with OpenSharing - Part 2 (How to Implement)
Many data-sharing architectures begin with a familiar pattern: A provider exports...
- Read, don't copy: replacing file and API feeds with OpenSharing - Part 1 (The Why)
If you ingest data from your customers over SFTP or APIs, you have probably asked...
- Optimizing Agentic Remediation for Financial Services with Opik
Incident remediation agents are quickly emerging as one of the most compelling AI use cases for the enterprise.
- GitHub Copilot weekly releases — November 2
This week, Copilot comes to JetBrains Air and Xcode’s coding assistant, with updates to help you manage pull requests, settings, and agent sessions.
- Chat SDK agents can now stream generative UI with json-render
You can now stream generative UI from your Chat SDK agent with json-render.
- AI Gateway adds DeepSeek Search and Fetch tools
DeepSeek Search and DeepSeek Fetch are now available through AI Gateway.
- @GitHub in Slack and Teams is generally available and more
Turn conversations into code with @GitHub in Slack and Teams!
- In conversation: Dylan Field and David Friedberg on the human role in creating with AI
On why design is the new code, shaping AI’s creative output, and the human vision and judgment behind what we make.
- Navigating the volatile silicon market: updates on memory and storage pricing
Updated on November 6th, 2026 We’ve been able to keep DDR5 pricing stable for the last few months by buffering inventory.
- Store and process large strings in Amazon Redshift SUPER columns
Storing large semi-structured data such as JSON and arrays in a data warehouse often means splitting or truncating your data.
- Agent Registry is now generally available in AWS GovCloud (US-West) Region
AWS Agent Registry, available through Amazon Bedrock AgentCore, is now available in the AWS GovCloud (US-West) Region.
- Google Workspace Weekly Recap - November 6, 2026
Display Custom Policy in the Green Room before Google Meet Calls To help ensure end users at your organization are familiar with your organization’s policies for handling meeting…
- Building the next generation of multimodal AI experiences with fal in Microsoft Foundry
Microsoft and fal partner to expand video generation in Microsoft Foundry, helping developers bring creative ideas into enterprise applications.
- Any agent anywhere: How to use Grafana Cloud with Claude, Cursor, and any other AI agent
AI agents are becoming part of everyday engineering workflows, helping teams write code, troubleshoot issues, and automate tasks.
- Your Guide to the Developer Tools Track at AWS re:Invent 2026
AWS re:Invent 2026 is almost here, and if you’re a developer, the Developer Tools (DVT) track is where you’ll want to spend your week.
New Models
2 pieces.
- New model: LiquidAI: LFM3-1.7B
A compact 1.7B-parameter text model with a 256K-token context, post-trained for agents, tool calling, and structured outputs.
- Open model: internlm/Sage-SciPerception
New open weights from InternLM (Shanghai AI Lab) on the Hugging Face Hub.
Security Desk
58 pieces, the newest 10 here.
- CVE-2026-123158 | OpenSSH musl Password Authentication Bypass & Remote Code Execution Vulnerability (*sshole)
CVE-2026-123158, known as *sshole, is an OpenSSH sshd authentication bypass on Linux systems that use musl libc without PAM, including Alpine Linux in its default configuration.
- CVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux
CVE-2026-123158 (*sshole) enables an OpenSSH authentication bypass on Alpine Linux.
- OpenSSF Community Day Europe 2026: Driving Systemic Security and Operational Resilience in Open Source
At OpenSSF Community Day Europe 2026 in Prague, more than 200 attendees gathered onsite as practitioners, maintainers, policymakers, and security leaders came together across two…
- Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration Systems
Unit 42 examines recent cyberattacks targeting European refrigeration systems and outlines defense and mitigation strategies.
- The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
Microsoft Threat Intelligence caught attackers using an agentic AI framework, ARTEX, to hunt exposed secrets on public GitHub and move into Azure tenants in as little as five minu…
- Addressing protocol security gaps in multi-tenant Kubernetes
Protocols like Android Debug Bridge (ADB) and Web Real-Time Communication (WebRTC), by default, use unencrypted channels for network communications and don’t support enterprise au…
- SonicWall security advisory (AV26-1133)
- Brute Force Sentry for Managed SIEM | Huntress
Huntress Managed SIEM's Brute Force Sentry turns the brute force attacks our SOC sees in the field into detections that fire earlier, with the evidence and hardening guidance part…
- Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
- Checkmarx Joins Claude Marketplace to Advance AI-Powered Application Security
Anthropic customers can now apply spend toward Checkmarx Fusion SAST, Triage, Remediation Assist Buying security software is rarely slowed down by the technology, it’s slowed down…
Technical Guides
19 pieces, the newest 10 here.
- Speed Up Image Generation with FLUX 3 Image Klein on NVIDIA Blackwell GPUs
When deploying diffusion models in design tools, image editors, and visual production workflows, developers must account for inference latency.
- Accelerating Reinforcement Learning Weight Refit with the Reshard Collective
During reinforcement learning (RL) post-training, training trajectories are generated on the fly by running inference with the current policy model.
- SageMaker Inference now supports Multi-Instance GPU to maximize GPU utilization for model endpoints
Amazon SageMaker Inference now supports GPU partitioning with NVIDIA Multi-Instance GPU (MIG), which divides one GPU into hardware-isolated partitions so you can run a different m…
- Securing PyPI accounts via Two-Factor Authentication
One of the key security promises that PyPI makes is that when you're downloading something, that only the people associated with that project are going to be able to upload, delet…
- Security Audit Remediation: Warehouse
This is part two in a three-part series.
- Security Audit Remediation: cabotage
This is part three in a three-part series.
- Taxonomy of agentic primitives in AWS Quick
As we built Amazon Quick, its agents grew from answering questions to taking actions, and the same primitives kept getting rebuilt under different names.
- Serverless MCP server for AI agent data lake access on Amazon ECS Fargate
Learn how to build a serverless Model Context Protocol (MCP) server on Amazon ECS with AWS Fargate that gives AI agents secure, metadata-driven access to an enterprise data lake.
- Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2
In Part 1 you built one governed agent.
- Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 1
An AI agent that acts for a user raises an identity question that per-app OAuth and service accounts leave open: which agent may act for which user, and how you stop it.
AI in the Field
7 pieces, the newest 6 here.
- Does Knowing a Student’s Interests Make AI More Engaging? Here’s What We Found
By Kristen DiCerbo, Khan Academy Chief Learning Officer One of the hopes we hear often about AI is...
- Google Forcing AI on Students Is BS
Google is rightfully facing blowback for forcing K-12 schools to enable AI if they wanted to keep using Google search.
- How to predict the behavior of molecules from scant data
A machine-learning approach called CheMeleon provides a practical way to develop new drugs or other molecules with much less detailed, expensive experimentation.
- 2026 election breakdown: Americans vote down data centers, AI and oligarchy
Sophie Song, AI Now's Data Center Policy Fellow, joins Brian Merchant, Molly White, and Dave Karpf for a roundtable discussion about what the midterms mean for AI, data centers, a…
- Medicare Program: Hospital Outpatient Prospective Payment and Ambulatory Surgical Center Payment Systems; and Quality Reporting Programs; including the Hospital Outpatient Quality Reporting Program and Ambulatory Surgical Center Quality Program; Request for Information on Strengthening the Standardization and Comparability of Hospital Price Transparency (HPT) Data; Prior Authorization; Accrediting Organization (AO) Deeming for Emergency Medical Treatment and Labor Act (EMTALA); and Notices of Closure of Teaching Hospitals and Opportunities To Apply for Available Slots
This final rule with comment period revises the Medicare Hospital Outpatient Prospective Payment System (OPPS) and the Medicare Ambulatory Surgical Center (ASC) payment system for…
- Prohibiting Illegal Discrimination in Registered Apprenticeship Programs
The Department of Labor (DOL or the Department) is issuing this final rule to remove the onerous and legally questionable affirmative action requirements that were previously impo…
Columns
11 pieces, the newest 6 here.
- Friday Squid Blogging: New Jurassic Squid Predecessors
News story: “ Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen.” Scientists have identified the “fattest” belemnite ever discovered, a bizarre, barrel-shap…
- The Pragmatic Summit 2027
The Summit is back in San Francisco, for the second year, and registrations are open for February 10, 2027
- GPT-6 Astra Covertly Underperforms on Safety Research Tasks
For a while, UK AISI, Redwood Research and others have been concerned specifically with the possibility that AIs would sabotage safety research, and have invested in looking for s…
- 2026.45: Falling Leaves (and Stocks)
The best Stratechery content from the week of November 2, 2026, including AI on the ballot, a Google state of the union, and China.
- Controlling Biology - Fabian Theis, Helmholtz Munich
As systems biology efforts heat up to map biology at higher resolution, greater breadth and more modalities, Fabian Theis is pushing the frontier from mapping to predicting to con…
- Why are we all worked up about atomicity when applying hot-patches if we can just suspend all the threads?
Suspending all the threads stops the threads that are there now, those are not the only possible sources of change.
Research
155 pieces, the newest 10 here.
- Video-Coder: Reinforcing Agentic Coding for Video Generation
Recent years have witnessed remarkable progress in video generation in terms of visual quality and temporal consistency.
- On Agentic Manipulation Policies
Recent work on robot manipulation has focused on specialist policies trained on demonstrations.
- CPU-ARC: Agentic Reasoning Caching for on-CPU Reasoning Reuse
Large language models reinvent the wheel all the time.
- SciCheck: A Framework for Verifying the Integrity of Deep Learning Training
Deep learning training is difficult to verify within a scientific workflow: its architecture, hyperparameters, and procedure are rarely fixed until training has been attempted, an…
- On the (non-)closedness of the set of ReLU networks
We prove that the set $\mathcal{N}_N$ of ReLU networks with one hidden layer and at most $N\in\mathbb N$ neurons is weakly closed in $W^{1,p}(Ω)$, for a bounded connected open set…
- FlowMoP: Stochastic Multi-Person Motion Prediction
Predicting the future motion of multiple people is inherently stochastic: the same observed history admits many plausible continuations depending on intent, coordination, and soci…
- ZeoBench: A Benchmark for Self-Supervised Learning on 3D Zeolite Representations
Zeolites are an important class of porous crystalline materials with broad applications in gas storage, separations, and catalysis.
- PhotoFinish: Portable Timerless Probing of Microarchitectural Latencies
Timing measurements are a fundamental building block of microarchitectural attacks, enabling software to convert otherwise invisible latency differences into architectural observa…
- Graded convolutional networks: scale invariance without the scale and robustness to unknown blur
The Gaussian jet of an image is a graded vector space: a dilation by $λ$ multiplies derivatives of order $k$ by $λ^{-k}$.
- On the Reliability of Majority-Vote Pseudo-Labels in Test-Time Reinforcement Learning
Test-time reinforcement learning (TTRL) adapts pretrained language models to unlabeled target-domain data using self-generated pseudo-labels, whose reliability remains poorly unde…
Releases
51 pieces, the newest 12 here.
- v1.71.0/v0.165.0
- service/v0.165.0
- opencode 2.2.6: support for Microsoft Store installations of PowerShell 7 on Windows. (#61952)
- 1.108.0 (LTS)
- 1.108.2 (LTS)
- @ai-sdk/zai@2.0.19
- @ai-sdk/xai@3.0.150
- @ai-sdk/vue@3.0.324
- ComfyUI 0.44.2: ComfyUI v0.44.2
- Temporal 1.33.0-165.4: patched temporal version
- Temporal 1.33.0-166.2: patched temporal version
- pkg/storage/dbproxy/v0.1.0
New Repos & Packages
66 pieces, the newest 8 here.
Watch
31 pieces, the newest 6 here.
- CoreWeave AI Training: Built for Training at Scale with Confidence
- CoreWeave ARIA: AI Research and Iteration Agent for Continuous Improvement
- CoreWeave Agent Lens: Intelligent Agent Observability at Enterprise Scale
- How Siemens Plans Production in Minutes With NVIDIA AI
- Next.js, but for AI agents: inside Vercel's eve
- LifeVal: Measuring AI progress on the tasks that matter in everyday life.
Package releases
68 from the most used packages' own repositories, the newest 15 here.
- openfeature-provider-posthog-v0.1.150 · every release →
- uuid v1.29.1 · every release →
- @tanstack/query-core release-2026-11-06-2304 · every release →
- grpcio v1.81.2 · every release →
- graphql-core v3.3.2 · every release →
- prefect 3.9.2 · every release →
- @opentelemetry/core semconv/v1.45.0 · every release →
- smallvec v1.16.5 · every release →
- gcloud-aio-auth datastore-9.3.0 · every release →
- @aws-sdk/types v3.1164.0 · every release →
- phpstan/phpstan-doctrine 2.1.2 · every release →
- aws/aws-sdk-php 3.403.1 · every release →
- import-in-the-middle-v3.6.0 · every release →
- python-utils pypi-untagged-releases · every release →
- portalocker pypi-untagged-releases · every release →