Tech radar: week 6 of 2026
2–8 Feb 2026
In the week of 2–8 Feb 2026, 14 notable open-source releases shipped (including Redis 8.4.1, Anthropic Python SDK v0.79.0, Svelte [email protected]), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Claude Opus 4.6” (2346 points).
Releases worth knowing about
Cloud & DevOps
Update urgency: SECURITY: There are security fixes in the release.mentions security
Welcome to the January 2026 release of Visual Studio Code. In this release, we are further evolving VS Code to make it the home for multi-agent develomentions security
Downloads: https://elastic.co/downloads/elasticsearch
AI & machine learning
api: enabling fast-mode in claude-opus-4-6 (5953ba7)
<img width="2278" height="1142" alt="image" src="https://github.com/user-attachments/assets/0c3d5341-0483-49c3-8467-f9784ec94b37" /
api: add shellcalloutput status field (1bbaf88)
v0.15.1 is a patch release with security fixes, RTX Blackwell GPU fixes support, and bug fixes.mentions security
Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA https://github.com/modelcontextprotocol/typescript-sdkmentions security
Web frameworks
- feat: allow use of createContext when instantiating components programmatically (17575)
[12.x] Test Improvements by @crynobone in https://github.com/laravel/framework/pull/58531
Mobile & desktop
<summary<em<h4Cargo Audit</h4</em</summarymentions security
Added support for MSIX auto-updating. 49585 <sup(Also in 40, 41)</sup
Languages & runtimes
\[796ff46ae6] - (SEMVER-MINOR) async\hooks: add trackPromises option to createHook() (Joyee Cheung) 61415mentions security
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-10-0
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-24423ransomware use | SmarterTools SmarterMail | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | 2026-02-05 |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 2026-02-03 |
| CVE-2025-11953 | React Native Community CLI | React Native Community CLI OS Command Injection Vulnerability | 2026-02-05 |
| CVE-2025-64328 | Sangoma FreePBX | Sangoma FreePBX OS Command Injection Vulnerability | 2026-02-03 |
| CVE-2019-19006 | Sangoma FreePBX | Sangoma FreePBX Improper Authentication Vulnerability | 2026-02-03 |
| CVE-2025-40551 | SolarWinds Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2026-02-03 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Claude Opus 4.62346 points · 1031 comments · 2026-02-05
- 02GPT-5.3-Codex1530 points · 605 comments · 2026-02-05
- 03I miss thinking hard1310 points · 718 comments · 2026-02-04
- 04Don't rent the cloud, own instead1222 points · 497 comments · 2026-02-05
- 05I now assume that all ads on Apple news are scams1178 points · 555 comments · 2026-02-06
- 06The Waymo World Model1160 points · 663 comments · 2026-02-06
- 07France dumps Zoom and Teams as Europe seeks digital autonomy from the US1149 points · 598 comments · 2026-02-03
- 08Data centers in space makes no sense1118 points · 1346 comments · 2026-02-03
- 09Vouch1077 points · 486 comments · 2026-02-08
- 10Voxtral Transcribe 21012 points · 241 comments · 2026-02-04
- 11OpenCiv3: Open-source, cross-platform reimagining of Civilization III996 points · 309 comments · 2026-02-06
- 12My AI Adoption Journey984 points · 401 comments · 2026-02-05
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.