Tech radar: week 24 of 2026
8–14 Jun 2026
In the week of 8–14 Jun 2026, 11 notable open-source releases shipped (including FastAPI 0.137.0, Hugging Face Transformers Release v5.12.0, React Native 0.86.0), CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Statement on US government directive to suspend access to Fable 5 and Mythos 5” (3158 points).
Releases worth knowing about
Web frameworks
♻️ Refactor internals to preserve APIRouter and APIRoute instances. PR 15745 by @tiangolo.mentions security
[12.x] Fix infinite recursion when defining model scope with attribute as private by @noefleury in https://github.com/laravel/framework/pull/59958
This release includes fixes for the following security issues:mentions security
AI & machine learning
<img width="886" height="583" alt="image" src="https://github.com/user-attachments/assets/ae9dd96f-6877-4531-a06b-a756686f24e5" /mentions security
api: add support for Managed Agents deployments and environment variable credentials (47633bf)
Mobile & desktop
- Accessibility: AccessibilityInfo: added missing tests for Promise based methods, align null checks and error message code style (8fc503d780 by @chicmentions security
Fixed a browser process crash when calling webContents.reload() or navigating synchronously from the render-process-gone event; the event is now emittmentions security
Cloud & DevOps
https://code.visualstudio.com/updates/v1124
What's new highlightsmentions security
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-17-0
Automation
1.123.54 (2026-06-08)mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 7.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-50751ransomware use | Check Point Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | 2026-06-08 |
| CVE-2026-35273ransomware use | Oracle PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 2026-06-12 |
| CVE-2026-7473 | Arista Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 2026-06-09 |
| CVE-2026-42271 | BerriAI LiteLLM | BerriAI LiteLLM Command Injection Vulnerability | 2026-06-08 |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 2026-06-09 |
| CVE-2026-11645 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2026-06-09 |
| CVE-2026-10520 | Ivanti Sentry | Ivanti Sentry OS Command Injection Vulnerability | 2026-06-11 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Statement on US government directive to suspend access to Fable 5 and Mythos 53158 points · 2314 comments · 2026-06-13
- 02Claude Fable 52626 points · 2159 comments · 2026-06-09
- 03If you are asking for human attention, demonstrate human effort1753 points · 503 comments · 2026-06-11
- 04Open source AI must win1603 points · 482 comments · 2026-06-13
- 05Show HN: Homebrew 6.0.01481 points · 363 comments · 2026-06-11
- 06AI agent bankrupted their operator while trying to scan DN421467 points · 536 comments · 2026-06-12
- 07Building an HTML-first site doubled our users overnight1278 points · 569 comments · 2026-06-10
- 08macOS Container Machines1269 points · 437 comments · 2026-06-10
- 09Show HN: Performative-UI – A react component library of design tropes1181 points · 213 comments · 2026-06-08
- 10If Claude Fable stops helping you, you'll never know1036 points · 501 comments · 2026-06-09
- 11German ruling declares Google liable for false answers in AI Overviews1021 points · 552 comments · 2026-06-10
- 12CRISPR tech selectively shreds cancer cells, including "undruggable" cancers1002 points · 220 comments · 2026-06-12
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.