Tech radar: week 10 of 2026
2–8 Mar 2026
In the week of 2–8 Mar 2026, 13 notable open-source releases shipped (including vLLM v0.17.0, LangChain langchain==0.3.28, Node.js 2026-03-05, Version 22.22.1 'Jod' (LTS)), CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Motorola announces a partnership with GrapheneOS” (2358 points).
Releases worth knowing about
AI & machine learning
Known Issue: If you are on CUDA 12.9+ and encounter a CUBLASSTATUSINVALIDVALUE error, this is caused by a CUDA library mismatch. To resolve, try one omentions security
Changes since langchain==0.3.27mentions security
api: The GA ComputerTool now uses the CompuerTool class. The 'computerusepreview' tool is moved to ComputerUsePreview (78f5b3c)
<img width="1080" height="1080" alt="image" src="https://github.com/user-attachments/assets/33603f42-5435-421a-9641-baf72faacb22" /mentions security
Changes since cli==0.4.12mentions security
Languages & runtimes
\[7b93a65f27] - build: test on Python 3.14 (Christian Clauss) 59983mentions security
<a id="1.94.0-Language"</a
Mobile & desktop
Added a reason property to the Notification 'closed' event on Windows to allow developers to know the reason the Notification was dismissed. 50030 <su
<summary<em<h4Cargo Audit</h4</em</summarymentions security
Automation
1.123.23 (2026-03-04)mentions security
Cloud & DevOps
Welcome to the February 2026 release of Visual Studio Code. This release makes agents practical for longer-running and more complex tasks, giving you
Testing & security tools
SHA-256: c3b458661d69e26e203d739c0c82d143cc8a4a29d9e571f099c2cf4bda62a120mentions security
Web frameworks
This release includes fixes for the following security issues:mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 7.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2023-43000 | Apple Multiple Products | Apple Multiple products Use-After-Free Vulnerability | 2026-03-05 |
| CVE-2021-30952 | Apple Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 2026-03-05 |
| CVE-2023-41974 | Apple iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | 2026-03-05 |
| CVE-2026-22719 | Broadcom VMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | 2026-03-03 |
| CVE-2017-7921 | Hikvision Multiple Products | Hikvision Multiple Products Improper Authentication Vulnerability | 2026-03-05 |
| CVE-2026-21385 | Qualcomm Multiple Chipsets | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 2026-03-03 |
| CVE-2021-22681 | Rockwell Multiple Products | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 2026-03-05 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Motorola announces a partnership with GrapheneOS2358 points · 884 comments · 2026-03-02
- 02MacBook Neo1974 points · 2320 comments · 2026-03-04
- 03Meta’s AI smart glasses and data privacy concerns1448 points · 809 comments · 2026-03-02
- 04The Xkcd thing, now interactive1320 points · 158 comments · 2026-03-03
- 05Motorola GrapheneOS devices will be bootloader unlockable/relockable1298 points · 562 comments · 2026-03-04
- 06Global warming has accelerated significantly1196 points · 1210 comments · 2026-03-06
- 07“Microslop” filtered in the official Microsoft Copilot Discord server1182 points · 551 comments · 2026-03-02
- 08British Columbia is permanently adopting daylight time1177 points · 561 comments · 2026-03-02
- 09Tell HN: I'm 60 years old. Claude Code has re-ignited a passion1086 points · 988 comments · 2026-03-07
- 10Wikipedia was in read-only mode following mass admin account compromise1049 points · 384 comments · 2026-03-05
- 11Tech employment now significantly worse than the 2008 or 2020 recessions1031 points · 687 comments · 2026-03-06
- 12GPT-5.41019 points · 805 comments · 2026-03-05
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.