Tech radar: week 26 of 2026
22–28 Jun 2026
In the week of 22–28 Jun 2026, 15 notable open-source releases shipped (including Tauri tauri-cli v2.11.4, MCP Python SDK v1.28.1, Deno v2.9.0), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Steam Machine launches today” (1922 points).
Releases worth knowing about
Mobile & desktop
<summary<em<h4Cargo Audit</h4</em</summarymentions security
Fixed Windows edge case in NativeWindowViews::MoveBehindTaskBarIfNeeded(). 52022 <sup(Also in 41, 43)</sup
AI & machine learning
[v1.x] Buffer per-request StreamableHTTP streams; store priming event before dispatch by @maxisbey in https://github.com/modelcontextprotocol/python-smentions security
auth: prioritize first auth header (797e336)
client: add support for system.message streaming events (2450d59)
Languages & runtimes
Read more: http://deno.com/blog/v2.9
\[cde0daabcc] - (SEMVER-MINOR) doc: update blockList stability status to release candidate (alphaleadership) 63050mentions security
Web frameworks
♻️ Refactor Library Skills, make info easier to find for agents. PR 15841 by @tiangolo.mentions security
Please refer to CHANGELOG.md for details.
[12.x] Add multi-type union support to Illuminate JsonSchema by @pushpak1300 in https://github.com/laravel/framework/pull/60462
This release includes fixes for the following security issues:mentions security
Cloud & DevOps
https://code.visualstudio.com/updates/v1126
ℹ️ This version introduces a new reconciliation algorithm between the observed state and the expected state.mentions security
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-18-0
Automation
1.123.60 (2026-06-22)mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-12569ransomware use | PTC Windchill and FlexPLM | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 2026-06-25 |
| CVE-2026-20230 | Cisco Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 2026-06-25 |
| CVE-2025-67038 | Lantronix EDS5000 | Lantronix EDS5000 Code Injection Vulnerability | 2026-06-23 |
| CVE-2026-34910 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 2026-06-23 |
| CVE-2026-34909 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | 2026-06-23 |
| CVE-2026-34908 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Access Control Vulnerability | 2026-06-23 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Steam Machine launches today1922 points · 1736 comments · 2026-06-22
- 02An entire Herculaneum scroll has been read for the first time1714 points · 369 comments · 2026-06-25
- 03Om Malik has died1353 points · 171 comments · 2026-06-25
- 04U.S. government will decide who gets to use GPT-5.61184 points · 1240 comments · 2026-06-26
- 05The 'papers, please' era of the internet will decimate your privacy1152 points · 623 comments · 2026-06-25
- 06Previewing GPT‑5.6 Sol: a next-generation model1139 points · 745 comments · 2026-06-26
- 07Deno Desktop1122 points · 398 comments · 2026-06-22
- 08GLM 5.2 beats Claude in our benchmarks1113 points · 516 comments · 2026-06-28
- 09What we call "age verification" is actually mass surveillance951 points · 506 comments · 2026-06-23
- 10Anonymous GitHub account mass-dropping undisclosed 0-days951 points · 385 comments · 2026-06-27
- 11We’re making Bunny DNS free927 points · 270 comments · 2026-06-24
- 12Apple raises prices of MacBooks, iPads846 points · 1255 comments · 2026-06-25
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.