Tech radar: week 29 of 2026
13–19 Jul 2026
In the week of 13–19 Jul 2026, 6 notable open-source releases shipped (including OpenAI Python SDK v2.46.0, Anthropic Python SDK v0.117.0, Electron electron v42.7.0), CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Show HN: I replaced a $120k bowling center system with $1,600 in ESP32s” (2935 points).
Releases worth knowing about
AI & machine learning
api: /organization/projects/{projectid}/serviceaccounts/{serviceaccountid}/apikeys" endpoint (5a00941)
api: add support for dreaming (642eee7)
Inkling (fresh from Thinking Machines): 975B total, 41B active
Mobile & desktop
Added net.WebSocket, a WHATWG-compatible WebSocket client for the main process that routes through Chromium's network stack. 52345
Cloud & DevOps
https://code.visualstudio.com/updates/v1129
Web frameworks
[13.x] Add missing $separator parameter to Storage facade append/prepend docblocks by @ferhatolmez in https://github.com/laravel/framework/pull/60693
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 10.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-15409ransomware use | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-07-14 |
| CVE-2026-15410ransomware use | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 2026-07-14 |
| CVE-2008-4128 | Cisco IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | 2026-07-13 |
| CVE-2026-25089 | Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 |
| CVE-2026-39808 | Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 2026-07-15 |
| CVE-2026-58644 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-16 |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 2026-07-14 |
| CVE-2026-56164 | Microsoft SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 2026-07-14 |
| CVE-2026-46817 | Oracle E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 2026-07-15 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Show HN: I replaced a $120k bowling center system with $1,600 in ESP32s2935 points · 359 comments · 2026-07-19
- 02Kimi K3: Open Frontier Intelligence2107 points · 1214 comments · 2026-07-16
- 03Zig Creator Calls Spade a Spade, Anthropic Blows Smoke1554 points · 785 comments · 2026-07-13
- 04AWS: Inaccurate Estimated Billing Data – $1.7 billion1318 points · 754 comments · 2026-07-17
- 05LG monitors silently install software through Windows Update without consent1228 points · 637 comments · 2026-07-18
- 06Inkling: Our Open-Weights Model1227 points · 291 comments · 2026-07-15
- 07Ask HN: Add flag for AI-generated articles1102 points · 459 comments · 2026-07-13
- 08Qwen 3.8961 points · 731 comments · 2026-07-19
- 09Jurassic Park computers in excruciating detail961 points · 259 comments · 2026-07-15
- 10The lost joy of music piracy853 points · 607 comments · 2026-07-16
- 11Thanks HN for 15 years of support and helping me find my life's work836 points · 107 comments · 2026-07-17
- 12Microsoft Comic Chat is now open source814 points · 178 comments · 2026-07-16
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.