AI & ML
- OpenAI launches GPT-Live-1 in the API, bringing full-duplex voice capabilities that let developers build voice-enabled apps with natural interrupt handling. Early evaluations show it cuts interruptions by 80% versus turn-based systems, with smooth conversation flow matching phone-call dynamics. Read more
- OpenAI introduces ChatGPT for Financial Services, a tailored experience combining built-in financial data from providers like Daloopa and PitchBook with GPT-6 Astra reasoning. Enables teams to develop research, financial models, and customized client materials with granular citations tied to source data. Read more
- DeepSeek releases DeepSeek-V4.1-Flash with state-of-the-art performance among open-source models on long-horizon agent tasks. Features a configurable reasoning-effort setting to trade inference cost for accuracy, uses Compressed Sparse Attention 2 (CSA2) and Hierarchical Sparse Indexer for efficiency, and demonstrates robust visual reasoning on professional charts. Read more
- Hugging Face publishes research on TabuLa-8B, a 3-8B LLM for tabular data prediction achieving 15+ percentage point accuracy gains over XGBoost and TabPFN on zero-shot unseen tables, and 5-15 pp gains in few-shot settings without fine-tuning. Read more
AI Coding Tools
- JetBrains releases IntelliJ Platform Explorer, a search tool for browsing Extension Points inside existing implementations of open-source IntelliJ Platform plugins. Read more
Languages & Runtimes
- Solidity releases v0.8.37, a bugfix release with three important fixes including a patch for memory byte array element delete that now correctly clears 32 bytes, and constants read in both checked and unchecked contexts now correctly apply overflow behavior. Adds support for the SLOTNUM opcode in the Amsterdam EVM version and deprecates several experimental features. Read more
- Quarkus releases v3.38.1, a maintenance release improving the cohesive developer experience with unified configuration, streamlined code for common usages, and kube-native performance. Read more
- Eclipse Theia releases v1.75 adding VS Code API 1.134.0 compatibility, React 19 as the only supported version, Node.js 26 in the build matrix (dropping Node 22), and Electron 42.8.1. Implements VS Code's editor group navigation commands and adds Agent Plugins from the Eclipse Foundation AI Registry. Read more
Browser & Web Platform
- Google accelerates Chrome to a 2-week major release cycle starting with Chrome 153 on September 8. The new cadence delivers broader fixes and improvements faster while maintaining weekly security updates, addressing the steady stream of zero-days exploited in the wild—6 have been patched in 2026 alone. Read more
- Chrome 153 removes XSLT support after November 17 (v158) due to security concerns with legacy code, with Firefox and WebKit following suit. The release adds new CSS for scroll control, JavaScript text-joining APIs, and a Rust-based XML parser. Read more
DevOps & Cloud
- AWS API Gateway now supports 1 MB execution logs with configurable delivery to CloudWatch Logs, S3, or Data Firehose. Previously, execution logs were truncated at 1 KB and tied to a single API Gateway-managed log group, limiting visibility into request/response data. Read more
- AWS Lambda durable functions integrate with Pydantic AI for building fault-tolerant Python agents. Each model and tool call becomes a durable execution step, so interrupted runs resume from the last completed step without repeating expensive work or causing duplicate billing. Read more
- Amazon OpenSearch Serverless now available on v0 by Vercel, enabling developers to build full-stack search and RAG applications in minutes using natural language prompts. v0 auto-provisions OpenSearch collections, indexes data, and handles environment configuration without leaving the interface. Read more
- AWS Storage Gateway adds FIPS 140-3 validated private connectivity over PrivateLink for S3 File Gateway. Previously FIPS endpoints were internet-only; now you can keep FIPS-compliant traffic on private AWS networks, enabling regulated workload deployments. Requires gateway software v2.1.10+. Read more
CMS & Site Builders
- DatoCMS improves plugin development workflows with version pinning, plugin disabling (without losing config), and "Duplicate for development" to fork plugins safely against dev servers while automatically disabling the original. Read more
- ChaiBuilder ships Payload CMS website builder built in, running on your own database (Postgres, SQLite) with a visual builder and chat-based editing, all as deployable Next.js + Payload code you fully control—no feature tiers or walled garden. Read more
Security
- Check Point discloses two 9.8-rated VPN certificate validation flaws in Security Gateways and Security Management Server (CVE-2026-85103 and an unnamed second flaw) enabling unauthenticated remote code execution under specific conditions. Live Patch automatic rollout began September 9 for R81.20, R82.00, and R82.10. Read more
- Google patches 200 Android vulnerabilities in September 2026 security updates, including CVE-2026-28662, a critical Wi-Fi memory corruption flaw allowing remote code execution without user interaction or special privileges. Organizations must update device fleets immediately to prevent privilege escalation. Read more
- Cisco Talos reports two patched Secure Firewall Management Center (FMC) vulnerabilities exploited by ransomware and state-sponsored groups: CVE-2026-20079 (authentication bypass) and CVE-2026-20316 (static credentials). Attackers used them to deploy web shells, steal credentials, and deploy Qilin ransomware and Cyclops Blink malware. Read more
- CISA alerts that WatchGuard Firebox RCE flaw CVE-2025-14733 is now exploited in ransomware attacks. Nine months after December 2025 patches, nearly 9,000 unpatched instances remain exposed. The flaw affects Fireware OS 11.x, 12.x, and 2025.1–2025.1.3 with IKEv2 VPN or branch office VPN configurations. Read more
- GreyNoise reports AI-powered campaign exploiting PaperCut vulnerabilities CVE-2026-81578 and CVE-2026-82078 across 395 organizations. Hundreds of AI agents using OpenAI Codex and DeepSeek refined exploits; attackers generated target lists via Netlas. Campaign began August 31; objective unknown but could enable data theft or ransomware. Read more
- CISA alerts on NextGen Healthcare Mirth Connect ≤v4.7.1 vulnerabilities: CVE-2026-82583 (SQL injection in Database Connector API), CVE-2026-78224 and CVE-2026-82578 (XXE and other flaws). Upgrade to v4.7.2+. Read more
Open Source
- ByteDance releases OpenViking, an open-source context database for AI agents storing memories, resources, and skills as a virtual filesystem under the
viking://protocol. Content loads on demand in three tiers (L0 abstract, L1 overview, L2 details). Achieves 80–83% accuracy on user memory tasks versus 24–57% natively, while cutting input tokens by 34–91% and latency by 58–66%. Read more
Dev Tools & IDEs
- Microsoft advances VS Code with v1.112 adding integrated browser debugging, MCP server sandboxing on macOS/Linux, native image analysis for agents, expanded Copilot agent autonomy, and monorepo support for agent customizations. Read more
- Eclipse ships 2026-09 R IDE packages including C/C++, Java, DSL, RCP/RAP, PHP, and Embedded C/C++ editions, providing essential tools for respective developer communities with Git integration, Maven/Gradle support, and language-specific editors. Read more