Tech news, November 12, 2026
Thursday: 654 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
The morning briefing
As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.
- Lead2026 APNIC Survey: Executive Council Response
The 2026 APNIC Survey highlights strong confidence in APNIC’s services and the priorities of Members and stakeholders across the region.
- NewsLeRobot v0.7.0 on Lance, ASOF Joins in DataFusion, LLM Pretraining from One LanceDB Table
LeRobot v0.7.0 trains on Lance tables straight from object storage, ASOF joins contributed upstream to DataFusion, and GPT-2 pretrained from one LanceDB table, plus Feature of the…
- NewsDeploying OpenEverest on a 3-Node K3s Cluster
Part 1 of 2: From bare Ubuntu servers to a running MySQL cluster OpenEverest is an open source platform for running databases such as MySQL, PostgreSQL and MongoDB on Kubernetes.
- OutageReplicate Issue
Cloudflare Replicate customers may see an increase of 500 errors for predictions.
- SecurityWFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks
A coordinated botnet of compromised GitHub accounts launched a widespread attack, opening seemingly harmless pull requests before pushing a malicious shell script directly to defa…
- Deadlinegemini-3.6-flash shuts down in 7 days
Replacement: gemini-3.8-flash.
News
183 pieces, the newest 20 here.
- Boosting Amazon RDS for PostgreSQL with AWS Graviton5: Benchmarks
AWS Graviton5 is now available on Amazon RDS through the new M9g instance family.
- Could pigeons deliver the Internet?
Guest Post: What happens when we replace network cables with carrier pigeons?
- Post-Quantum Authentication: Lessons from Prague
In October, the Internet Architecture Board (IAB) held a two-day workshop in Prague with people who are deploying post-quantum authentication.
- Build once, run on any agent: A practical guide to agent skills
Agent skills capture repeatable engineering work in files teams can review and reuse, while tools, project context, and permissions remain specific to the host that runs them.
- [In preview] Public Preview: JWT validation with Azure Front Door Auth Policy
JSON Web Token (JWT) validation through Azure Front Door Auth Policy is now in public preview on Azure Front Door Premium.
- [Launched] Generally Available: Azure Front Door mutual TLS authentication
Mutual TLS (mTLS), also known as client certificate authentication, is now generally available on Azure Front Door Premium.
- Amazon Cognito now supports OAuth 2.0 token exchange
Amazon Cognito now supports OAuth 2.0 token exchange (RFC 8693).
- Google Summer of Code mentor summit 2026
Every year, the Google Summer of Code (GSoC) Mentor Summit brings together open source maintainers, community leads, and mentors from across the globe.
- Agents Wrote All of AWS Emulator’s 200+ Services. What’s the Engineer’s Job Now?
AWS says agents wrote AWS Emulator's 200+ services and security agents checked each change.
- Modular regression testing framework built on AWS for large-scale systems
Regression testing must catch behavior changes before they reach production, yet synthetic tests miss real-world edge cases.
- Dispelling LTAP myths
Reynold Xin's post "From monolith to Lakebase to LTAP" explained what LTAP is and...
- Microsoft Research Focus – Edition #98
What's new in research at Microsoft?
- Automatically recover from GPU failures with Amazon ECS Managed Instances
Amazon ECS Managed Instances provides built-in GPU health monitoring and automatic repair powered by NVIDIA DCGM.
- Actions for ARM32 Linux & Windows retirement
GitHub Actions hosted runners will be ending support for ARM32 job execution on Windows and Linux by 8th Dec 2026.
- Agentic Enterprise Security: Where the Ecosystem Goes Next
Learn how Snowflake and its ecosystem of security innovators help enterprises govern AI agents, protect data and respond to threats across seven pillars.
- Enterprise AI Customer Stories: Expedition 2026
See how Disney, Canva, Northern Trust, Stripe and EY are putting AI to work, from marketing ROI to finance and tax.
- Kimi K3.1 Pro is now available in Token Pass
Token Pass now includes Kimi K3.1 Pro, Moonshot AI’s most capable model for coding and agentic workflows, with vision, tool use, and a 1M context window.
- Multi-tab testing in Cypress: @cypress/puppeteer 1.0 is generally available
Cypress runs each test in one tab, so flows that open a new tab or popup have been hard to test.
- Scale distributed AI workloads with Ray and Anyscale on Amazon EC2
Building multimodal AI/ML pipelines on Amazon EC2 means scaling distributed compute, controlling costs across stages, and keeping up with new models and hardware.
- A Fintech Giant Built Across the Americas. Can Your AI Team?
Learn how a distributed AI team can share packages, models, and environments across borders, with lessons from Nubank and Latin American talent.
New Models
7 pieces.
- New model: ByteDance Seed: Seedream 5.5
Seedream 5.5 is an image generation and editing model from ByteDance Seed.
- New model: Google: Gemini 4 Hydrogen
Gemini 4 Hydrogen is the high-efficiency workhorse model of the Gemini 4 family from Google, built for high-throughput agentic workflows, coding and multi-model routing at lower c…
- Open model: higurashi-ai/Haru-4B
Trending on the Hugging Face Hub.
- Open model: inclusionAI/Duo-1.0-causal-base
New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.
- Open model: inclusionAI/Duo-1.0-distill
New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.
- Open model: inclusionAI/Duo-1.2-causal-base
New open weights from inclusionAI (Ant Group) on the Hugging Face Hub.
- Open model: facebook/meta-encoder-v1
New open weights from Meta (FAIR) on the Hugging Face Hub.
Security Desk
87 pieces, the newest 10 here.
- Critical: Active Storage: Possible arbitrary file write and read in image analysis
Affects activestorage.
- Fw: New cabextract 1.12 and libmspack 0.12alpha release
Posted by Hanno Böck on Nov 12 Hi, Forwarding this, various security issues fixed in cabextract and libmspack.
- Chrome for Android Update
Hello Everyone!
- HCSEC-2026-57 - Vault audit device prefix vulnerable to log injection
Bulletin ID: HCSEC-2026-57 Affected Products / Versions: Vault and Vault Enterprise up to 2.2.1; fixed in Vault 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25.
- HCSEC-2026-56 - Vault vulnerable to ACL deny bypass via trailing slash
Bulletin ID: HCSEC-2026-56 Affected Products / Versions: Vault and Vault Enterprise up to 2.2.1; fixed in Vault 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25.
- HCSEC-2026-55 - Vault integrated storage join may disclose server environment credentials
Bulletin ID: HCSEC-2026-55 Affected Products / Versions: Vault and Vault Enterprise up to 2.2.1; fixed in Vault 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25.
- Early Stable Update for Desktop
The Stable channel has been updated to 158.0.8127.36/.37 for Windows, Mac will be coming shortly as part of our early stable release to a small percentage of users.
- USN-9090-1: Apache HTTP Server vulnerabilities
Zhenpeng Lin discovered that Apache HTTP Server's mod_dav module incorrectly calculated memory sizes when handling WebDAV locks.
- CVE-2026-126793 - Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapp…
- USN-9068-1: Debian-LAN vulnerability
Wolfgang Schweer discovered that Debian-LAN configured overly permissive ACLs for the Kerberos admin server.
Technical Guides
19 pieces, the newest 10 here.
- Deploy frontier AI models on AWS Trainium with SGLang-Neuron
SGLang-Neuron is now publicly available through an AWS Deep Learning Container.
- How Natera designed an agentic AI system for lab ops with Amazon Bedrock AgentCore
Natera built SWARM, an agentic AI system on Amazon Bedrock AgentCore that captures institutional lab-operations knowledge and deploys it at scale.
- Bring Your Expertise to Git-Ape
The new Community Skills Feature.
- Four Amazon Bedrock inference choices that affect cost
Your Amazon Bedrock inference bill can keep climbing even after you tune prompts and application logic.
- Profile your Amazon CloudWatch Logs estate with an AWS DevOps Agent skill in sandbox, no infrastructure to deploy.
A zero-infrastructure AWS DevOps Agent skill profiles your Amazon CloudWatch Logs estate and gives you one view of it.
- Tokenomics at scale: Track and cap Amazon Bedrock spend per IAM principal with CUR 2.0 and AWS Budgets
Get per-identity Amazon Bedrock cost visibility and enforceable spend limits using only AWS-native features, with no application code for the common case.
- Optimizing cost per task and proving agent ROI on Amazon Bedrock
Comparing per-token prices hides the real cost of running a model on Amazon Bedrock.
- Building a self-service LLM gateway with Amazon Bedrock and LiteLLM
Build a self-service LLM gateway with LiteLLM on AWS Fargate that puts Amazon Bedrock foundation models behind an OpenAI-compatible API.
- Run agents securely and efficiently with the next generation AgentCore runtime
AI agents now run multi-step workloads for hours and act on behalf of users, raising the bar for secure, scalable agent compute.
- Migrate to Amazon Bedrock Managed Knowledge Base with your coding agent
The migration guide in the amazon-bedrock skill helps you migrate a customer-managed Amazon Bedrock knowledge base to a Managed Knowledge Base.
AI in the Field
9 pieces, the newest 6 here.
- Three Lincoln Laboratory technologies receive 2026 R&D 100 Awards
A secure operating system, a quantum microsystem platform, and a 5G interference-canceling algorithm are named among the year's most significant innovations.
- How and when to deliver AI at a fixed cost with AWS
Public sector agencies increasingly need AI spend to be a fixed, predictable number.
- Implement a generative AI Andon Cord for live media workflows on AWS
The generative AI Andon Cord pattern gives operators runtime controls to disable, roll back, or constrain AI features in live media workflows in seconds, without redeploying.
- Barr, American Inequality and the Future of AI
Speech At Yale University, New Haven, Connecticut
- Introducing AI Series on Coursera: 12 Expert-curated learning plans to help you apply AI in your field
Every job across every industry is being reshaped by AI, but many professionals struggle to identify the right AI skills they need and where to start.
- How Assignar achieved 80x faster development velocity by modernizing with Supabase
Assignar builds software for subcontractors and the general contractor firms who hire them.
Columns
10 pieces, the newest 6 here.
- The Pulse: What can we learn from the Railway hack?
Also: native mobile and frontend jobs are disappearing, how trust helps an “AI-native” engineering team to succeed, Carta starts selling a coding harness, and more
- Nvidia and the World Without Jensen
Is NVIDIA Over?
- First Strike
- How can I pass more than one parameter to co_await?
The co_await operator takes only one parameter, but it can be a big parameter.
- AI #194: Spy Versus Guy
Tomorrow I head to Washington DC for a conference called The Takeoff.
- Bliki: Generated Glossary
When we use LLMs in a specialized domain, such as the operations of any reasonably-large organization, there is a lot of specialized vocabulary.
Research
158 pieces, the newest 10 here.
- Back to Pixels: Lifting Latent Video Diffusion into Pixel Space
Frontier video generation models work in a VAE latent space that compresses video in both space and time.
- Unbundling Multimodal Vision Encoding
How multimodal language models should encode visual input remains up for debate.
- ArchSpace: Recording, Reviewing, and Referencing LLM Architecture Research
Model architecture shapes the scaling behavior, training efficiency, and inference cost of LLMs, making it a central focus of both industry and academia.
- TTB: Test-time Baking for Efficient Rendering of Decoder-only View Synthesis Models
Decoder-only Large View Synthesis Models (LVSMs) with KV-cache have recently achieved state-of-the-art quality by regressing novel views from neural networks without reconstructin…
- ProtoVis-Nav: Prototypical Visual Imagination for Visual-Spatial Aligned UAV Navigation
Vision language navigation (VLN) is very challenging for Unmanned Aerial Vehicles (UAVs) since small errors in 3D motion prediction can lead to navigation errors and collisions.
- Internalizing Investment Mandates: A Neurosymbolic RL Approach to Portfolio Allocation
Institutional portfolios operate under investment policy statements that specify asset allocation constraints, often conditioned on market regime information.
- K2V: Generative Keyframing For Physically Plausible Video Generation
Video diffusion models are able to generate samples with high-quality appearance and textural qualities.
- AgentSSL: Can MLE Agents Leverage Unlabeled Data?
Applying machine learning systems to new domains introduces bottlenecks in both labeled data acquisition and manual pipeline engineering.
- BrickFlow: Connectivity-Guided Brick Reconstruction
Given a set of LEGO parts and an image of an assembled object, our task is to infer the pose of each part to assemble the object.
- Learning When Diffusion Language Models Should Regenerate
Remasking allows diffusion language models to revisit generated text, but effective correction requires knowing when and what to revise.
Releases
54 pieces, the newest 12 here.
- DeepSpeed 0.20.0: Sum GPTBigCode's shared key/value gradient across tensor-parallel ranks by @Achyuthan-S in #8928
- @openrouter/sdk 1.5.100
- Claude Code 2.1.323: Code Mode, an experimental opt-in in which Claude writes JavaScript to call its tools; see…
- electron v44.11.3
- electron v43.8.10
- mastracode@0.50.0
- mastra@1.39.0
- @google/genai 3.3.0
- ComfyUI 0.45.3: ComfyUI v0.45.3
- Kysely 0.29.9: A small batch of bug fixes. Please report any issues.
- 1.108.7 (LTS)
- Nx 23.3.2: core, flush task output before the task process exits (#37827)
New Repos & Packages
29 pieces, the newest 8 here.
Watch
33 pieces, the newest 6 here.
- Closing Remarks (ASL)
- Cloud Native Without Limits: What Can AI Agents Do for Us? - Lin Sun, Solo.io (ASL)
- Kubernetes with Conviction: How Customization is... Jago Macleod, Google & Shaun Hopper, Meta (ASL)
- Stripe CFO Steffan Tomlinson: How AI Is Reshaping Finance
- Cyber at the Frontier: Introducing Daybreak Red Team & Daybreak Defense Factory
- What is new in GitHub: October releases explained
Package releases
65 from the most used packages' own repositories, the newest 15 here.
- azure-core azure-ai-projects_2.11.0 · every release →
- @seroval/transport@0.1.2 · every release →
- claude-agent-sdk v0.2.181 · every release →
- pikepdf v10.18.1 · every release →
- checkov 3.4.5 · every release →
- strands-agents harness-typescript/v0.4.0 · every release →
- gunicorn 27.0.1 · every release →
- ty 0.0.102 · every release →
- @azure/msal-common msal-react-v5.8.2 · every release →
- doctrine/doctrine-bundle 3.4.1 · every release →
- ws 8.23.0 · every release →
- google-adk v2.14.1 · every release →
- snowflake-snowpark-python v1.57.0 · every release →
- pymongo 4.20.0 · every release →
- memfs v4.80.1 · every release →