Daily 9 for November 4, 2026 covers nine developments across AI, fintech, crypto, software and tech: eight announced on November 3 and a Barracuda security advisory from late November 2. Two items are about stablecoins, two are patches administrators should schedule now, and one is a phone launch with a long preorder runway.

Each item links to the company, regulator or project that published it.

1. Cohere opens Model Vault to third-party open models

Cohere now lets enterprises run open models from other developers inside Model Vault, its managed single-tenant inference service, next to its own Command, Embed and Rerank families. The list includes DeepSeek, Gemma, GPT-OSS, Phi, Nemotron, GLM and Tencent’s Hy3. Prompts and outputs are not retained by default. Model Vault runs in the United States, the EU and Canada, while Model Vault Encrypted, which keeps data encrypted during processing through confidential computing, is live only in the US and supports a shorter model list. Cohere, November 3.

2. Google publishes a benchmark for engineering work by AI agents

Google’s AI and Infrastructure team, working with Mercor, released Physical-Engineering’s Last Exam, a benchmark of 85 long-horizon tasks in mechanical, electrical, civil and structural engineering. Agents work through project folders averaging 61 files, including CAD drawings and building codes, and score only if their design passes every hard safety check. Google says all 14 frontier models it tested scored below 50% on the private set, with the best at 48.3%. Twenty-nine public tasks and grading tools are on GitHub, with an open leaderboard. Google Cloud blog, November 3.

3. Razorpay gets its final payment licence for India’s GIFT City

Razorpay received its final payment service provider licence from the International Financial Services Centres Authority, following in-principle approval in April 2026. It can now move money into and out of India from GIFT City, hold funds in multiple currencies and serve flows such as Indian residents investing abroad. Banking integrations with RBL Bank and ICICI Bank are in place, and Razorpay says investment platforms can connect in two to three weeks. No partner platform is live yet; the company says the first ones are expected soon. Razorpay newsroom, November 3.

4. Truist adds Clover and Paze to its merchant services

Truist, the Charlotte-based bank, announced a broader merchant services package for business clients. It includes consultant-guided digital onboarding that, by Truist’s own measure, cuts the time from a client’s decision to execution by up to 80%, from a process that could take several days. Merchants also get authorization, settlement and statement data in Truist Merchant Engage, wider access to the Clover business platform, and Paze checkout, which lets eligible shoppers pay online with existing bank cards without retyping card details. Pricing was not disclosed. Truist newsroom, November 3.

5. Taiwan drafts its stablecoin issuance rules

Taiwan’s Financial Supervisory Commission drafted regulations for licensing stablecoin issuers under the Virtual Asset Service Act, promulgated on July 22, 2026. Banks and companies invested in by banks or financial holding companies may apply. A non-bank issuer would need at least NT$300 million in paid-in capital, a public offering, and a business limited to issuing and redeeming coins. Tokens must be pegged one-to-one to the New Taiwan dollar or a single foreign currency, with reserves at fair value covering all coins outstanding. The draft opens for 40 days of comment and takes effect with the act, whose start date the Executive Yuan has not yet set. FSC press release (Chinese), November 3.

6. Safirum launches the CHF-S Swiss franc stablecoin on Solana

Safirum, a fintech based in Zug, launched CHF-S, a Swiss franc stablecoin it first announced in June. Each token is backed one-to-one by francs in segregated accounts at Berner Kantonalbank and Banque Richelieu. Every holder must pass identity checks, and the Solana Token-2022 smart contract blocks transfers to wallets that are not on its whitelist, in line with FINMA Supervisory Notice 06/2024. Safirum makes its money from fees rather than reserve income: 0.05% per transfer, capped at 0.50 CHF-S, plus network fees. Safirum announcement, November 3. Background: what a smart contract is.

7. Barracuda patches two flaws that can lead to root access

Barracuda disclosed CVE-2026-116606, a pre-authentication authorization bypass in Email Security Gateway rated 9.3, and CVE-2026-111560, a command injection rated 8.6 that also affects its Load Balancer ADC, Message Archiver, WAF, WAF Control Center and Web Security Gateway. Combined, they could give an attacker root on the device, but only one who can reach the administrative interface. Patches are out. Barracuda advises checking firmware versions, applying patches manually if automatic patching is off, and keeping admin interfaces on trusted internal networks. Barracuda advisory, November 2.

8. Apache ZooKeeper fixes a flaw that can leave servers unbootable

The Apache ZooKeeper project disclosed CVE-2026-100300, rated 8.7 under CVSS 4.0. Anyone able to write under the /zookeeper/quota subtree, which is world-writable and needs no authentication on default deployments, can crash the server’s request-processing thread and leave its on-disk data directory permanently unbootable. Versions 3.8.0 to 3.8.7 and 3.9.0 to 3.9.6 are affected, and the project recommends upgrading to 3.8.8 or 3.9.7. Apache advisory on oss-security, November 3.

9. REDMAGIC takes its 12 Pro gaming phone global

REDMAGIC opened its global store for the 12 Pro gaming phone. It runs Qualcomm’s Snapdragon 8 Elite Extreme Gen 6 alongside REDMAGIC’s own R5 gaming chip, and has a 6.85-inch 185Hz display with under-display front camera technology, dual-loop liquid cooling with a 25,500 RPM fan, and an 8,400mAh battery with 80W charging. It ships with REDMAGIC OS 12, based on Android 17. The global store lists it from $899. Early-bird vouchers start November 12 and general sales open November 18. REDMAGIC global store, with dates from the REDMAGIC UK launch page.