Tech radar: week 23 of 2026
1–7 Jun 2026
In the week of 1–7 Jun 2026, 10 notable open-source releases shipped (including Anthropic Python SDK v0.107.0, VS Code 1.123.0, Ghidra Ghidra 12.1.2), CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “The newest Instagram “exploit” is the goofiest I've seen” (2210 points).
Releases worth knowing about
AI & machine learning
api: small updates to Managed Agents types (72923f9)
api: responses.moderation and chatcompletions.moderation (87e46c2)
Cloud & DevOps
https://code.visualstudio.com/updates/v1123
Testing & security tools
SHA-256: b62e81a0390618466c019c60d8c2f796ced2509c4c1aea4a37644a77272cf99dmentions security
👉 https://github.com/aquasecurity/trivy/discussions/10767mentions security
Web frameworks
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.mdv7170
[13.x] Register the lazy refresh hook on all connections by @tontonsb in https://github.com/laravel/framework/pull/60359
| Commit | Description |mentions security
Languages & runtimes
- KT-83867 OVERLOADRESOLUTIONAMBIGUITY false positive with assertEquals in IJ repo
Potential changes to macOS Universal Binary availabilitymentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 5.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2025-48595 | Android Framework | Android Framework Integer Overflow Vulnerability | 2026-06-02 |
| CVE-2022-0492 | Linux Kernel | Linux Kernel Improper Authentication Vulnerability | 2026-06-02 |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 2026-06-03 |
| CVE-2024-21182 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 2026-06-01 |
| CVE-2026-28318 | SolarWinds Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 2026-06-05 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01The newest Instagram “exploit” is the goofiest I've seen2210 points · 491 comments · 2026-06-01
- 02They’re made out of weights1529 points · 711 comments · 2026-06-03
- 03S&P 500 rejects SpaceX, also blocking entry for OpenAI and Anthropic1484 points · 502 comments · 2026-06-06
- 04Gmail thinks I'm stupid, so I left1193 points · 828 comments · 2026-06-02
- 05LLMs are eroding my software engineering career and I don't know what to do1151 points · 1074 comments · 2026-06-07
- 06SpaceX, Other Mega IPOs Denied Fast Index Entry by S&P1062 points · 517 comments · 2026-06-04
- 07Gemma 4 12B: A unified, encoder-free multimodal model1062 points · 401 comments · 2026-06-03
- 08Elixir v1.20: Now a gradually typed language992 points · 411 comments · 2026-06-03
- 09Please don't spam people looking for employment. It's just cruel969 points · 273 comments · 2026-06-02
- 10How LLMs work948 points · 276 comments · 2026-06-03
- 11Building from zero after addiction, prison, and a felony912 points · 415 comments · 2026-06-07
- 12Changing how we develop Ladybird900 points · 570 comments · 2026-06-05
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.