Tech radar: week 7 of 2026
9–15 Feb 2026
In the week of 9–15 Feb 2026, 16 notable open-source releases shipped (including OpenAI Python SDK v2.21.0, Svelte [email protected], Electron electron v39.6.0), CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “An AI agent published a hit piece on me” (2346 points).
Releases worth knowing about
AI & machine learning
api: container networkpolicy and skills (d19de2e)
GLM-5: A strong reasoning and agentic model from Z.ai with 744B total parameters (40B active), built for complex systems engineering and long-horizon
llama-index-callbacks-wandb [0.4.2]mentions security
Web frameworks
- feat: Use TrustedTypes for HTML handling where supported (16271)
➖ Drop support for Python 3.9. PR 14897 by @tiangolo.
Remove type hint in favor of return type by @WendellAdriel in https://github.com/laravel/framework/pull/58621
Please refer to CHANGELOG.md for details.
Mobile & desktop
Added a disclaim option to the UtilityProcess API to allow for TCC disclaiming on macOS. 49696 <sup(Also in 40, 41)</sup
ReactNativeDependencies dSYMs:
Cloud & DevOps
What's new highlightsmentions security
Today, we are excited to share the 7.4.0 stable release 🎉mentions security
This is the General Availability release of Redis 8.6 in Redis Open Source.
The update addresses these issues, including a fix for a security vulnerability.mentions security
Automation
Add source to credentials open menu on telemetry (25519) (2ba2404)
Testing & security tools
SHA-256: 90d3fffb20b00030dcef8d2a24dd0f422d3a61e432b3ad43f77233ac6d667981mentions security
Languages & runtimes
\[47df4328d7] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) 61456mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 11.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-1731ransomware use | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 2026-02-13 |
| CVE-2026-20700 | Apple Multiple Products | Apple Multiple Buffer Overflow Vulnerability | 2026-02-12 |
| CVE-2024-43468 | Microsoft Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | 2026-02-12 |
| CVE-2026-21513 | Microsoft Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 2026-02-10 |
| CVE-2026-21525 | Microsoft Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | 2026-02-10 |
| CVE-2026-21510 | Microsoft Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 2026-02-10 |
| CVE-2026-21533 | Microsoft Windows | Microsoft Windows Improper Privilege Management Vulnerability | 2026-02-10 |
| CVE-2026-21519 | Microsoft Windows | Microsoft Windows Type Confusion Vulnerability | 2026-02-10 |
| CVE-2026-21514 | Microsoft Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 2026-02-10 |
| CVE-2025-15556 | Notepad++ Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | 2026-02-12 |
| CVE-2025-40536 | SolarWinds Web Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 2026-02-12 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01An AI agent published a hit piece on me2346 points · 951 comments · 2026-02-12
- 02Discord will require a face scan or ID for full access next month2046 points · 2041 comments · 2026-02-09
- 03Fix the iOS keyboard before the timer hits zero or I'm switching back to Android1627 points · 793 comments · 2026-02-13
- 04I’m joining OpenAI1449 points · 1131 comments · 2026-02-15
- 05The Singularity will occur on a Tuesday1381 points · 756 comments · 2026-02-10
- 06EU bans the destruction of unsold apparel, clothing, accessories and footwear1210 points · 851 comments · 2026-02-15
- 07uBlock filter list to hide all YouTube Shorts1172 points · 343 comments · 2026-02-14
- 08Europe's $24T Breakup with Visa and Mastercard Has Begun1132 points · 1030 comments · 2026-02-10
- 09Claude Code is being dumbed down?1085 points · 701 comments · 2026-02-11
- 10Gemini 3 Deep Think1081 points · 693 comments · 2026-02-12
- 11Warcraft III Peon Voice Notifications for Claude Code1006 points · 301 comments · 2026-02-12
- 12I love the work of the ArchWiki maintainers960 points · 172 comments · 2026-02-15
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.