Kubernetes 1.37 enables Prometheus native histograms by default, replacing static buckets with dynamic exponential buckets. Components stay backward-compatible via dual exposition: enable scrape_native_histograms, then migrate your histogram_quantile queries.
The Pub/Sub AI Inference SMT reaches general availability: it applies a Gemini Enterprise Agent Platform model to every message in flight. For real-time enrichment you no longer need a separate inference service.
IBM and NASA open-source the NASA-IBM Lunar Foundation Model, a foundation model trained on decades of multi-instrument lunar data, paired with a unified 30-layer dataset. It cuts ice-deposit identification error by up to 22% and joins the Prithvi family.
A Chinese-speaking actor tracked as Red Heron exploited CVE-2026-60004, the Gitea RCE, to scan 1,386 instances across seven countries and steal industrial source code. Patch self-hosted forges, lock down registration, and treat any exposed instance as already breached.
On September 16, 2026, CISA released its first guide to cyber decoys — fake systems, accounts, and data that detect an attacker already present and using legitimate tools. Start with self-hosted honeytokens before considering a commercial platform.
On September 16, 2026, Cisco shipped a batch of fixes for Identity Services Engine, including CVE-2026-76460, an actively exploited CVSS 10.0 authentication bypass that can yield root. Patch ISE immediately and lock down the management plane with ACLs in the meantime.
Stable kernels 7.2.5 and 6.18.51, released September 11, 2026, fix video output for Blackwell GPUs in nouveau and close a memory leak and a use-after-free in ksmbd. Update first if you expose SMB shares or run a Blackwell card.
CVE-2026-76461 (CVSS 9.8), a zero-day in the AsyncOS email parsing of Cisco Secure Email Gateway, has been exploited since September 2026 to turn a SQL injection into root command execution. Cisco offers no workaround and CISA requires a fix by September 17, 2026: patch your Secure Email Gateway appliances now.
GNU Coreutils 9.12, released on September 14, 2026, delivers measurable wins — cut up to 4× faster, uniq up to 2.5× — and fixes a race that made -R commands fail against files deleted in parallel. A maintenance release that reminds us the GNU toolkit remains, against its Rust rewrite, the default foundation of every distribution.
Kubernetes Memory QoS, which guides the Linux kernel on container memory handling through cgroup v2, graduates to beta and turns on by default in version 1.37. The more important change lies elsewhere: the implicit throttling factor disappears, making the upgrade a no-surprise event for existing clusters.
Open-weight models accounted for 60% of OpenRouter’s US token consumption in August, most of them Chinese. The marketplace has now made US in-region routing generally available, guaranteeing that requests are decrypted, processed, and served entirely on American soil — or rejected.
Perplexity has brought Portable Computer, the local edition of its Computer agent, to Windows after Linux and macOS — but only for NVIDIA RTX cards with at least 24 GB of VRAM. Simple tasks run on-device, the model hands off to the cloud when it needs more reasoning, and sensitive files can stay on the machine.
