Tech radar: week 5 of 2026
26 Jan – 1 Feb 2026
In the week of 26 Jan – 1 Feb 2026, 11 notable open-source releases shipped (including Ghidra Ghidra 12.0.2, Svelte [email protected], Electron electron v40.1.0), CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Microsoft forced me to switch to Linux” (1871 points).
Releases worth knowing about
Testing & security tools
SHA-256: cf6e9de0b4d6e4ad2810bb4cd7fda59da726a98a454cd140694782aeaf2580e1mentions security
Web frameworks
- feat: allow passing ShadowRootInit object to custom element shadow option (17088)
[12.x] Clean up compiled views after parallel testing by @dxnter in https://github.com/laravel/framework/pull/58440
This release includes security fixes for multiple vulnerabilities in Hono and related middleware. We recommend upgrading if you are using any of the amentions security
Please refer the following changelogs for more information about this security release:mentions security
Mobile & desktop
DevTools errors are no longer printed to console. 49359
AI & machine learning
This release features 335 commits from 158 contributors (39 new)!mentions security
api: add support for Structured Outputs in the Messages API (ad56677)
api: api update (b97f9f2)
Transformers v5 release notesmentions security
Languages & runtimes
\[99a4e51f93] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) 61419mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 7.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2025-52691ransomware use | SmarterTools SmarterMail | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-01-26 |
| CVE-2026-23760ransomware use | SmarterTools SmarterMail | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-26 |
| CVE-2026-24858 | Fortinet Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-27 |
| CVE-2026-24061 | GNU InetUtils | GNU InetUtils Argument Injection Vulnerability | 2026-01-26 |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-01-29 |
| CVE-2018-14634 | Linux Kernel | Linux Kernel Integer Overflow Vulnerability | 2026-01-26 |
| CVE-2026-21509 | Microsoft Office | Microsoft Office Security Feature Bypass Vulnerability | 2026-01-26 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Microsoft forced me to switch to Linux1871 points · 1503 comments · 2026-01-28
- 02Antirender: remove the glossy shine on architectural renderings1844 points · 453 comments · 2026-01-30
- 03Moltbook1652 points · 5 comments · 2026-01-30
- 04TikTok users can't upload anti-ICE videos. The company blames tech issues1495 points · 1003 comments · 2026-01-27
- 05Apple to soon take up to 30% cut from all Patreon creators in iOS app1116 points · 917 comments · 2026-01-28
- 06FBI is investigating Minnesota Signal chats tracking ICE955 points · 1635 comments · 2026-01-27
- 07Vitamin D and Omega-3 have a larger effect on depression than antidepressants954 points · 641 comments · 2026-01-29
- 08A few random notes from Claude coding quite a bit last few weeks913 points · 848 comments · 2026-01-26
- 09France Aiming to Replace Zoom, Google Meet, Microsoft Teams, etc.900 points · 780 comments · 2026-01-26
- 10Mobile carriers can get your GPS location893 points · 582 comments · 2026-01-31
- 11After two years of vibecoding, I'm back to writing by hand865 points · 634 comments · 2026-01-26
- 12Defeating a 40-year-old copy protection dongle859 points · 290 comments · 2026-02-01
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.