On 12 October 2026 GitLab shipped versions 19.4.2, 19.3.4 and 19.2.8, closing 24 security holes in self-managed CE/EE. The headline fix is CVE-2026-97229, a CVSS 10.0 bug in the CI/CD regex compiler where weak expression validation causes an integer overflow, letting an unauthenticated attacker craft a CI/CD configuration that executes code on the server. CERT-EU is pushing organisations to patch immediately, with internet-facing GitLab instances first in line.
What changed?
CVE-2026-97229 (CVSS 10.0): unauthenticated attacker can achieve code execution via integer overflow in the CI/CD regex compiler
CVE-2026-92883 (CVSS 8.7): stored XSS in syntax highlighting lets an authenticated user run JavaScript in other users' browsers via a crafted repository
CVE-2026-16301 (CVSS 8.5): broken authorization allows a developer to trigger pipelines on protected branches without permission
21 more issues fixed, including an 8.2-rated cache poisoning bug that could leak protected CI/CD variables
NVIDIA, working with Princeton's Dao AI Lab, built ReplaySSM, a new way to store state in hybrid models that mix state-space (SSM) layers with attention layers. Instead of rewriting the entire state on every token, the method keeps a periodic checkpoint plus a short list of recent inputs, splitting the job of producing output from the job of updating memory. The result is roughly half the memory traffic, decode kernels running up to 1.80x faster at scale, and speculative decoding throughput more than doubling on 120B-class models, all while keeping accuracy close to full precision. The method already ships inside TensorRT-LLM, vLLM, and FlashInfer, and is running in production for GLM-5.3-Flash and Kimi-K3.
At the OCP Global Summit, NVIDIA contributed its Vera Rubin rack and compute tray designs to the open MGX architecture and announced a series of partnerships covering AI factory power, cooling and networking standards. Partners include hyperscalers such as Meta, Google, Microsoft and AMD, plus Cisco and Visionbay. The announcements cover rack design specs (MGX 1.2), new open-source software for managing AI data centers (DSX OS components), grid resilience standards, an 800VDC power architecture, new Ethernet switching (Spectrum-6) and a new optical transceiver standard (USFP) with Cisco.
Google has pulled gemini-3.7-flash from active use, with every call to that model string now redirected automatically to gemini-3.8-flash. On the agent side, the deep-research-pro-preview-12-2025 variant is on its way out too, with a hard shutdown date of October 23, 2026, pushing developers toward two newer Deep Research options.
Mistral AI has released Voxtral Mini 4B Realtime Arabic, a streaming speech-to-text model fine-tuned for Arabic dialects, Modern Standard Arabic, and code-switching between languages. The 4.4-billion-parameter model processes 16 kHz audio in real time with a configurable transcription delay, achieving an 8.82% average Character Error Rate across seven Arabic benchmarks at a 480ms delay — close to the offline Voxtral Transcribe Arabic model's 7.91% CER. It was co-developed with Morocco's digital transition ministry as part of a sovereign AI partnership and is released under Apache 2.0.
Anthropic has introduced a beta option on its Claude Platform that allows a Managed Agents agent to construct its own workflow for large, multi-part jobs, such as going through hundreds of documents. Instead of handling everything in one pass, the agent splits the task into phases, delegates pieces across multiple sub-agents, and merges their output into a single result. The job is handed off to the server, which executes it asynchronously and reports progress through a stream of events.
AWS published a joint engineering write-up with Postman describing how Agent Mode, Postman's AI-native interface for API testing and documentation, was built to run in production at scale. Rather than model quality, the team found that tool sprawl and missing context were the biggest obstacles to reliable agent behavior. The post details architectural patterns including dynamic tool scoping, schema-based query access, dedicated context handlers, and how Amazon Bedrock provides model flexibility, cross-Region inference, data residency controls, and prompt caching.
Qwen published Qwen-Image-2.1-Turbo on Hugging Face, a distilled version of its Qwen-Image-2.1 text-to-image and image-editing model. It uses the same 7B visual generation architecture but runs with only 8 denoising steps instead of the standard schedule, using CFG=1 and prefix KV caching to reuse text and reference-image context across steps. It loads directly via the QwenImage21Pipeline in Diffusers and supports the same resolution presets and aspect ratios as the base model, including editing tasks like turning sketches into photorealistic images.
NVIDIA described a workflow built into Megatron Core that makes large-scale pretraining bitwise deterministic, meaning independent or checkpoint-resumed training runs follow the exact same numerical trajectory. Using tensor fingerprinting across training phases, modules, operations and kernels, engineers can trace nondeterminism down to a specific kernel and fix it. On a trillion-parameter Nemotron model running on 2,432 GPUs, optimizations brought the performance cost of enforcing determinism (the 'determinism tax') down to about 2%, while keeping bitwise-identical results over 800 training steps.
Microsoft published guidance warning that post-quantum cryptography (PQC) planning cannot focus only on encrypted data — authentication systems, certificates, PKI, and hardware security modules also need to be tested for compatibility with new quantum-resistant algorithms. Microsoft launched a PQC TLS Pilot Program on August 27, 2026, letting approved certificate authorities test ML-DSA-87 based post-quantum certificate chains in closed, non-production environments. Seven pilot roots were added from providers including DigiCert, Sectigo, HARICA, and SSL.com, with rolling admissions continuing through the end of 2026. Windows 11 (from the July 28, 2026 updates) now supports evaluating ML-DSA certificates in controlled testing scenarios via Schannel.
Anthropic has announced the Cyber Mission, a long-term initiative to help defenders secure operational technology and open-source code using Claude models. It includes the Critical Infrastructure Defense Program, built with partners like Accenture, CrowdStrike, Deloitte and Rockwell Automation, and the free OSS Scanner tool that scans open-source projects for vulnerabilities. The effort builds on lessons from the earlier Project Glasswing, now merged into an expanded Cyber Verification Program.
Google released ML Drift, an open-source, cross-platform GPU compute engine for on-device ML inference, replacing the legacy TFLite GPU delegate. It unifies shader handling across OpenGL ES, OpenCL, Metal and WebGPU, adds 5D tensor support, and introduces stage-aware optimizations for LLM prefill/decode. It is already running in production in Chrome, YouTube Shorts, Google Photos, Meet and partner apps from Adobe and Snap.
AWS published a case study on Amazon Bedrock AgentCore payments, a managed feature that lets AI agents autonomously pay for services like model inference, one request at a time, using the x402 payment protocol. Incarna used it to let its agents pay BlockRun, a multi-provider inference router, for each individual model call, settling in USDC on the Base blockchain. AWS says Incarna cut integration time from a scoped two to three months down to three days and about 200 lines of code. During the beta, agents processed over 1,000 payments ranging from $0.001 to $0.05 per call.
Google introduced AQuA (Ambient Quality Agent), a tool that runs continuously beside production AI agents inside a Google Cloud project to find failures that don't show up in logs or health checks, such as skipped validation steps or dropped context between sub-agents. It samples production session traces, grades them against a checklist, clusters recurring failure patterns, verifies clusters against full transcripts, and tracks them over time as new, recurring, or resolved. On request, it can also trace a failure back to the exact line of code or prompt responsible, using an immutable source snapshot captured at deploy time.
Apple researchers, with collaborators from the University of Pennsylvania and UIUC, introduced a new generative modeling technique called Normalizing Trajectory Models (NTM) in a paper accepted at NeurIPS. Unlike typical diffusion models that rely on many small Gaussian denoising steps, NTM treats each step as a flexible, invertible transformation that preserves exact probability calculations — something most fast few-step generation methods give up when they rely on distillation or adversarial training. According to the paper, NTM can match or beat strong text-to-image baselines using only four sampling steps.
Google Cloud announced the Gemini agent, a unified agent that combines chat, knowledge work, content creation, and coding into one interface accessible across devices and channels. It integrates directly inside Gmail, Docs, Sheets, Slides, Chat, and Calendar, connects to enterprise tools and databases via MCP and a tools registry, and orchestrates across multiple models — including Google's Gemini family and Anthropic's Claude — to balance quality and cost. Google also detailed security/governance features, cost controls like Smart Routing and spend caps, and shared customer results from companies like BNP Paribas, Bradesco, and Orange Spain.
Cisco Talos' CAIRN research classifies a new malware archetype, 'A3: AI-Analysis Evasion,' where malicious code embeds natural-language text designed to manipulate language models used in automated malware triage. Talos traced the technique across four malware families (FRUITSHELL, PLOTSAFE, HOLLOWCLAD, MANTLEMAZE) and 84 samples from January 2025 to July 2026, showing it spreading from a simple copy-pasted comment to templated, multi-model-targeted 'template spraying' and fake intimidation messages. Controlled testing with a panel of five local LLMs found the simplest direct-instruction technique shifted model verdicts toward 'benign' in roughly 35% of runs, while more elaborate tricks had little effect or backfired by increasing suspicion.