Weekly digest 5 min read

Weekly Digest: 19 October 2026

By Ali Fraz Khan, FHEA, Principal and Head of Centre, The Data and AI School of London
Weekly Digest: 19 October 2026
Share this article
Facebook LinkedIn X WhatsApp

Ofqual's Chief Regulator used a major speech on 16 October to set out his position on AI in assessment, saying AI cheating "must not be allowed" and that humans must stay in charge of consequential decisions (Ofqual, 2026a). Separately, Next.js and Django both shipped security fixes this month that teams running either framework should apply promptly (Vercel, 2026a; Django Software Foundation, 2026).

Qualifications and awarding bodies

  • The Chief Regulator confirmed that V Levels will arrive from 2027 as smaller level 3 vocational qualifications, with the first subjects including digital systems and data from September 2027 (Ofqual, 2026a). Takeaway: keep an eye on how this reshapes progression routes into higher technical study. Source
  • Ofqual fined the Associated Board of the Royal Schools of Music £150,000 after assessment recordings and marking records were not retained or were deleted in error, leaving some learners unable to fully challenge their marks (Ofqual, 2026b). Takeaway: test and back up any system holding assessment evidence, and check it can be retrieved for reviews and malpractice cases. Source
  • The Federation of Awarding Bodies flagged an Ofqual reminder to review qualification titles on 16 October, though the detail is for members only (Federation of Awarding Bodies, 2026). Takeaway: check that titles on learner-facing materials and certificates match the awarding body's published titles exactly. Source

AI in education

  • Jisc's updated review of AI detection concludes that detectors are improving but unstable, that humans detect AI text no better than chance, and that a detector flag should prompt an investigation rather than serve as proof (Jisc National Centre for AI, 2026). Takeaway: put assessment design and professional judgement ahead of any single tool. Source
  • On AI in assessment, Ofqual's Chief Regulator said coursework is vulnerable, that AI can help with tasks such as drafting questions and quality assurance, but that using it to mark complex work carries risks that need direct human oversight (Ofqual, 2026a). Takeaway: any AI used in marking or quality assurance needs a named human decision-maker. Source
  • Ofqual's current approach to regulating AI in the qualifications sector, published on 16 July 2026, is built around fairness, validity, security, public confidence and enabling innovation (Ofqual, 2026c). Takeaway: use these five objectives as a checklist when reviewing AI use in teaching and assessment. Source
  • The Education Secretary told the Confederation of School Trusts conference that AI is already causing problems with homework and project work, and that pupils should "master technology, not be mastered by it" (Department for Education, 2026). Takeaway: expect continued policy attention on AI and independent work. Source

Python and web frameworks

  • Next.js issued an out-of-band security update on 14 October fixing two critical remote code execution issues and a high severity denial of service issue, with patched versions 16.4.1 and 15.5.28 (Vercel, 2026a). Takeaway: upgrade any teaching or product projects now; the same release line, 16.4, made Cache Components the recommended default for new apps (Vercel, 2026b). Source
  • Django released 6.1.2, 6.0.9 and 5.2.18 on 6 October, fixing five security issues including a formset flaw affecting models with editable primary keys (Django Software Foundation, 2026). Takeaway: update course environments and review formsets that use natural or UUID keys. Source
  • Python 3.15.0 was released on 9 October with lazy imports, a built-in frozendict and UTF-8 as the default encoding (Python Software Foundation, 2026a), while Python 3.10 has now reached end of life with no further security updates (Python Software Foundation, 2026b). Takeaway: plan to move any remaining Python 3.10 teaching material to a supported version. Source
  • FastAPI 0.145.0 removed the deprecated openapi_prefix parameter and 0.146.0 deprecated root_path in favour of the server's --root-path option (FastAPI, 2026). Takeaway: pin versions in course projects and check for these parameters before upgrading. Source
  • No verifiable Azure or DevOps announcement could be confirmed this week, so none is included.

Worth a closer look: the Jisc update on AI detection, which gives practical, evidence-based advice for anyone handling suspected AI misuse (Jisc National Centre for AI, 2026). Read it here.

References

Related reading

If you want to study this formally, our NCFE Level 3 Technical Occupational Entry in Cyber Security (Diploma) is a regulated qualification you can start online at any time. You may also want to look at NCFE Level 3 Certificate in Cyber Security Practices.

Found this useful? Share it
Facebook LinkedIn X WhatsApp

Before you pay for a course

A free guide: how to check in five minutes that a qualification is genuinely regulated, the seven questions to ask any provider including us, and what your fee should actually buy. Enter your email and we will send you a confirmation link. Confirm it and the guide is yours, along with an email whenever we publish something new. No spam, unsubscribe any time.