$ checkup --date 2026-10-22
58 items from the last 24 hours across 24 sources · 2026-10-22 (generated 2026-10-22 04:45 UTC). Each entry is a title, a short excerpt and a link to the original; read the full story at the source.
Get this checkup by email each morning: choose your own sources, double opt-in, one-click unsubscribe. Or follow the RSS feed.
Choose sources & subscribe →
The short version
- Linux: Today's PHP Security Release, and How We're Strengthening PHP Security (PHP Foundation)
- Linux: KeePassXC 2.8 Released with ARM64 and Wayland Auto-Type Support on Linux
- Linux: NVIDIA Nemotron 3.5 Super VL Powers Specialized Agents with Multimodal Reasoning
- Local AI: v0.40.9-rc0: ci: switch to released WoA CTK (#19185)
- Agents: Claude Code: v2.1.308
Claude Code Releases
What's changed Added /claude-api api-version to move Claude API code to API version 2026-10-21 Added the claude_code.safety_event OpenTelemetry event for each tool call a permission rule, auto mode, a safety check, a hook or the sandbox stopped, prompted or sent back Fixed requests failing with a…
OpenAI Codex CLI Releases
arXiv cs.AI
Query clarification is essential for retrieval-augmented generation (RAG) systems that face ambiguous user queries.
Scaling data, diversity and model capacity has improved embodied learning in physical environments, where diverse experiences remain grounded in shared physical laws. Whether these gains extend to virtual worlds with different visual styles, dynamics, controls, and objectives remains unclear.
LLM-driven evolutionary search is a promising paradigm for scientific discovery, but existing methods remain costly and slow, often applying expensive reasoning uniformly while underusing evidence from failed, redundant, and saturated trials.
arXiv cs.CL
We study the 305M-parameter audio encoder shared by Gemma 4 and EmbeddingGemma 2 (identical except for its final projection) for Saudi and Gulf Arabic speech recognition, without changing any of its weights.
This chapter introduces data ethics for translation and discusses a number of ethical issues regarding data.
Current evaluation of LLMs on benchmarks typically aggregates performance over individual examples into a single scalar score. This approach is overly coarse and ignores the diverse scope of skills covered by benchmark datasets.
DistroWatch Weekly
Lightwhale is an independently-developed, minimalist, single-purpose Linux distribution designed to run Docker containers effortlessly. The live ISO image boots directly into a fully functional Docker engine without the need for installation or configuration.
Maple Linux is a desktop Linux distribution based on Debian's "Stable" branch and featuring the Cinnamon desktop. It is designed primarily for users located in Canada, with specific Canadian defaults.
Argent Linux is a Gentoo-based Linux distribution featuring the KDE Plasma desktop and designed for workstations and servers. It uses the systemd service manager which, as it is not available in the upstream Gentoo repositories, the project itself provides in the form of binary packages.
Ollama Releases
What's Changed llama.cpp update Full Changelog : v0.40.8...v0.40.9-rc0
Recursive Flint Flint brings Recursive's coding model to Ollama. It is designed for the work coding agents do across a repository: understanding unfamiliar code, tracing bugs, implementing features, and adding tests.
We were still using a pre-release, and the download site is flaky, so lets get current on the latest CUDA Toolkit for WoA support.
llama.cpp Releases
opencl: add F32-to-I32 ARGMAX ( #30897 ) opencl: add F32-to-I32 ARGMAX Assisted-by: OpenCode opencl: init to 0 to be consistent with cpu Co-authored-by: Li He lih@qti.qualcomm.com Website: https://llama.app Attestations: https://github.com/ggml-org/llama.cpp/attestations/58459449 macOS/iOS: macOS…
models : add Flint model (FlintForCausalLM) ( #30928 ) Add Flint model (FlintForCausalLM).
jinja : fix namespace attributes shadowed by dict methods ( #30941 ) Website: https://llama.app Attestations: https://github.com/ggml-org/llama.cpp/attestations/58411998 macOS/iOS: macOS Apple Silicon (arm64) macOS Apple Silicon (arm64, KleidiAI enabled) DISABLED macOS Intel (x64) iOS XCFramework…
Phoronix
There are notable patches by Arm engineer Lorenzo Stoakes that have begun landing in Linux 7.4 for speeding up the Linux kernel build process. This work can provide some significant reductions in the Linux kernel build time...
Linus Torvalds continues with his recent uptick in kernel patches himself, assisted in part by AI with Claude Code. Merged today was removing the historical and unsafe __get_user() and __put_user() kernel functions...
The latest Linux kernel cryptographic subsystem performance work carried out by Google engineer Eric Biggers is migrating x86/x86_64 and RISC-V optimized implementations of different AES modes into the lib/crypto kernel crypto library to enjoy faster performance there...
LWN.net
Inside this week's LWN.net Weekly Edition: Front : Android vendor hooks; Reproducible builds and kernel integrity; Rust data structures; NFS server changes; Setting no_new_privs for PID 1; Rust XArray; Rust cross-crate declarations; 7.3 statistics; Nix flakes.
The PHP Foundation has put out a blog entry explaining how the vulnerabilities disclosed today came about and why they took so long to fix.
The Node.js project has released a number of security updates to fix, among other vulnerabilities, a remote-code-execution bug affecting programs that use Brotli compression.
NVIDIA Technical Blog
Supply chain problems are expanding across more SKUs, lanes, and constraints than ever before, while energy grids are balancing more distributed sources in real...
The massive growth of generative AI has fundamentally altered data center design. As distributed model training scales to span hundreds of thousands of GPUs,...
Always-on agents are taking on longer, more complex enterprise workflows. A single request can involve reading a document, checking information across sources,...
9to5Linux
KeePassXC 2.8 open-source password manager is now available for download with Qt 6 port, Auto-Type support on Linux/Wayland, quick unlock on Linux, and many other changes.
siduction Linux 2026.1.0 distribution is now available for download featuring the Xfce 4.20 and KDE Plasma 6.7 desktop environments, based on Debian Unstable.
OMG! Ubuntu
Ubuntu has released security updates for the php2shell PHP flaw that’s led to websites being taken offline, and a key compromise at the eMudhra certificate authority. Desktop Ubuntu isn’t directly affected by php2shell, since PHP isn’t installed by default.
Hacker News Best
Article URL: https://blog.railway.com/p/security-disclosure-wednesday-october-21st Comments URL: https://news.ycombinator.com/item?id=50188228 Points: 366 # Comments: 210
Article URL: https://claude.com/product/claude-duet Comments URL: https://news.ycombinator.com/item?id=50186037 Points: 333 # Comments: 296
https://nmdoj.gov/press-release/the-new-mexico-department-of... Comments URL: https://news.ycombinator.com/item?id=50184820 Points: 436 # Comments: 279
OpenAI News
How OpenAI works with distribution partners to uphold consistent safeguards, support responsible access, and clarify expectations in our Usage Policies.
AT&T is working with OpenAI to make legal knowledge easier to access. Learn how its LegalEdge team is rethinking intake and scaling legal judgment.
From local businesses to global brands, more advertisers can now reach people as they explore, compare and decide what to buy in ChatGPT.
Ars Technica AI
Apple just revealed a new brand identity for Apple Music, with the expected turn to Liquid Glass. I’m not much of a fan of their new design language in general; this is where I admit that I’m still running MacOS Sequoia and have grumpy things to say about rounded corner radii and text legibility.
Google would certainly prefer that everyone used its Gemini models with Google Cloud services, but soon, you'll have more options. OpenAI and Google have come to an arrangement that will see the former's frontier models arrive in Google Cloud services.
Elon Musk’s SpaceXAI is stuck facing a lawsuit over alleged data center pollution after Donald Trump failed to convince a judge that his Environmental Protection Agency (EPA) has complete control over all Clean Air Act lawsuits and can dismiss any suit at whim.
Simon Willison's Weblog
If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes, and there have been exploits circulating since last night, thanks to a leak in the coordinated disclosure process.
Well this is delightful: I released Battle Drones yesterday under an Apache 2.0 License and there's already a French language fork which reskins the game to take place in steampunk 1900s France and adds an animated intro!
Hugging Face Blog
It's FOSS
Brax Technologies, the company behind the BraX3 smartphone and the open_slate tablet, opened pre-orders for the Wink last week with plans to ship it in two batches next year.
What I realized in the past week or so is that if you can reverse engineer it, any software is open source software. Not in the license sense, of course.
Dank Linux , the Wayland desktop suite built around DankMaterialShell (DMS), has put out its final post on X under that name, bidding farewell to its old identity. Accompanying it is DMS 2.0 , codenamed " Heisenberg, " which reached GitHub just a few hours ago.
Microsoft Research Blog
Microsoft researcher and collaborator combine new mathematical ideas with human-directed AI to resolve a central problem in high-dimensional geometry and probability At a glance Fundamental scientific breakthrough: Researchers resolved the Kannan-Lovász-Simonovits (KLS) conjecture, a 31-year-old…
Ubuntu Blog
Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application.
Arch Linux News
PHP versions prior to 8.5.12 and 8.3.36 are affected by CVE-2026-109618 and CVE-2026-109619 , which allow for remote code execution.
On 2026-10-20 it was revealed, that several certificates of the eMudhra intermediate Certificate Authority have been compromised . The compromised certificates have been removed/invalidated with ca-certificates-mozilla ≥ 3.131.1-1.
Linux Kernel Releases
Version: next-20261021 (linux-next) Released: 2026-10-21
Latent Space
For the last few weeks I’ve used Claude Mods to mold Claude Code to my AI engineering workflow. Claude Code is great out of the box, but every engineering workflow is different.
Proudly brought to you by SerpAPI: Today’s release covers a LOT of ground, but you can scrape all this into markdown for your agents ! 50% token cost of JSON.
Last year , Alex Lieberman and his cofounder joined us to explain Tenex’s unusual bet: pay AI engineers for the work they deliver, rather than the hours they spend at a keyboard. If AI makes an engineer faster, an hourly rate can make the engineer less money for the same job.
Mistral AI News
Mistral is collaborating with NVIDIA to develop a new generation of AI-native engineering workflows powered by NVIDIA accelerated computing.
Get this checkup by email each morning: choose your own sources, double opt-in, one-click unsubscribe. Or follow the RSS feed.
Choose sources & subscribe →