InfoQ

Google and Meta Open-source TorchTPU to Bring Native PyTorch Support to Google TPUs

Sergio De Simone — Mon, 02 Nov 2026 17:00:00 GMT

TorchTPU is an open-source project developed by Google in collaboration with Meta that provides a native PyTorch backend for Google TPUs. It enables PyTorch workloads to execute on TPU hardware with minimal code modifications, supporting eager and compiled execution, distributed computing, and hardware-specific optimizations.

By Sergio De Simone

Java News Roundup: TornadoVM 8.0, JNoSQL, Endive, JReleaser, JBang, LangChain4j, Quarkus Almanac

Michael Redlich — Mon, 02 Nov 2026 17:00:00 GMT

This week's Java roundup for October 26th, 2026, features news highlighting: the GA release of TornadoVM 8.0; point releases of JNoSQL, Endive, JBang, JReleaser and LangChain4j; a maintenance release of JobRunr; beta releases of Hibernate ORM and Hibernate Reactive; and introducing the Quarkus Almanac.

By Michael Redlich

Uber Builds MCP Gateway to Govern Access to 800+ Servers and 5,000+ AI Agent Tools

Leela Kumili — Mon, 02 Nov 2026 13:53:00 GMT

Uber has built an MCP Gateway to standardize how AI agents discover and invoke internal services across more than 800 MCP servers and 5,000 tools. The gateway separates tool registration from runtime execution and includes automated API discovery, access controls, sensitive data redaction, incremental tool discovery through Omni MCP, and response filtering.

By Leela Kumili

Article: Systemic Approach to Memory, Knowledge, and Context in Agentic AI Architectures

Adi Polak — Mon, 02 Nov 2026 11:00:00 GMT

The article argues that reliable agentic AI architecture depends on a context engine that selects, injects, compresses, and expires information before it reaches the model. It separates context, memory, and knowledge, and recommends tiered memory, curated knowledge, and token budgeting. It also covers common anti-patterns, such as context stuffing and stale data loops, with mitigations.

By Adi Polak

Podcast: Educating an Architect: A Conversation with Luca Mezzalira

Luca Mezzalira — Mon, 02 Nov 2026 11:00:00 GMT

In this podcast, Michael Stiefel spoke to Luca Mezzalira about software architecture as a socio-technical discipline that balances technological design with an organization's social and managerial context. They explored how architectural choices must be adapted to a company's unique culture and team structure rather than relying blindly on universal best practices.

By Luca Mezzalira

Shopify Overexposed Scans GKE Ingresses and Cloud Run for Exposure

Claudio Masolo — Mon, 02 Nov 2026 09:00:00 GMT

Shopify has introduced Overexposed. This internal scanner locates Kubernetes Ingresses on GKE and Cloud Run services. It checks for those that are accessible from the internet without authentication

By Claudio Masolo

AWS Capacity Largely Sold Out Through 2027, With On Demand Headroom Reserved

Steef-Jan Wiggers — Sun, 01 Nov 2026 08:03:00 GMT

Amazon CEO Andy Jassy says AWS’s large committed cloud capacity is largely sold out through 2027, with part of 2028 already allocated, while the company continues to reserve headroom for On Demand, EC2 and Bedrock. Practitioners discussing the remarks report difficulty obtaining On Demand capacity for ordinary EC2 instances, and similar constraints at other providers.

By Steef-Jan Wiggers

File Mover Express: AWS Releases Open-Source Tool for S3 File Transfers

Renato Losio — Sun, 01 Nov 2026 06:32:00 GMT

AWS has recently released File Mover Express, an open-source application under the Apache 2.0 license for transferring large files between local systems and Amazon S3. Available for macOS, Windows, and Linux, it supports parallel transfers, automatic performance tuning, retries, pause and resume, and file integrity verification.

By Renato Losio

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta Without Attribute-Based Encryption

Steef-Jan Wiggers — Sat, 31 Oct 2026 19:56:00 GMT

Cloudflare has moved a post-quantum rebuild of GeoKey Manager into closed beta, guarding geo-fenced keys with hybrid ML-KEM-768 and X25519 instead of the attribute-based encryption used since 2022. Keys live only in kernel memory on verified regional servers, and any failed check rejects the request, a fail-closed choice practitioners ask could cause a regional outage. GA is planned for Q1 2027.

By Steef-Jan Wiggers

OpenBSD 8.0 Brings Expanded Hardware Support, Security Enhancements, and Virtualization Improvements

Sergio De Simone — Sat, 31 Oct 2026 17:00:00 GMT

OpenBSD 8.0 is a substantial upgrade bringing broader hardware compatibility, enhanced security, an expanded virtual address space, and support for modern architectures, including Intel Arc A-Series graphics support, ARM64 hibernation, RISC-V improvements, and enhanced virtual machine support.

By Sergio De Simone

Spring News Roundup: First Release Candidates of Boot, Framework, Data, Security, Modulith, AI

Michael Redlich — Sat, 31 Oct 2026 13:30:00 GMT

There was a flurry of activity during the week of October 19th, 2026, highlighting: first release candidates of: Spring Boot, Spring Framework, Spring Data, Spring Cloud, Spring Security, Spring for GraphQL, Spring Session, Spring Integration, Spring HATEOS, Spring Modulith, Spring REST Docs, Spring AI, Spring Batch, Spring AMQP, Spring for Apache Kafka, Spring LDAP and Spring Web Services.

By Michael Redlich

Kubernetes Confidential Containers Get Fortanix Attestation and Key Management

Mark Silvester — Sat, 31 Oct 2026 08:18:00 GMT

Fortanix's CoCo integration connects workload attestation to decryption-key release for Kubernetes AI workloads. GPU-verification settings affect protection, while upstream Trustee and Azure Secure Key Release offer alternative routes to attestation-based key release.

By Mark Silvester

LocalStack for Azure Enters Public Preview with Security Settings Stored but Not Enforced

Steef-Jan Wiggers — Sat, 31 Oct 2026 07:57:00 GMT

LocalStack has opened its Azure emulator to a free public preview, running Azure services locally and accepting existing ARM, Bicep, and Terraform without rewrites. Its own documentation reports partial operation coverage per service and a consistent pattern: configuration is stored and returned, while enforcement of access restrictions, TLS, and network rules is not implemented.

By Steef-Jan Wiggers

Google Discloses PageBreak AI Security Agent That Found 500+ XSS Bugs

Renato Losio — Sat, 31 Oct 2026 06:20:00 GMT

According to a paper published by Google, its AI-powered security agent has uncovered more than 500 XSS vulnerabilities across its web applications since entering full operation in January. PageBreak uses Gemini models to autonomously investigate potential vulnerabilities, but reports them only after deterministic validators successfully reproduce the exploit against a running application.

By Renato Losio

DoorDash Cuts Grocery Reorder Latency from 16 to 2 Seconds with AI Agents

Leela Kumili — Fri, 30 Oct 2026 13:31:00 GMT

DoorDash reduced grocery reorder latency from 16 to 2 seconds by precomputing recurring purchase needs using batch LLM inference and deterministic validation. Live catalog resolution keeps product selections current, while an editable shopping interface avoids unnecessary model calls. The company reports that shopping list views doubled and the flow’s order rate increased by approximately 34%

By Leela Kumili