Welcome to WebCraft

Crafting the Future of
Web Development

Discover what's possible on the web.
Technical deep dives, industry updates, and lessons from the field.

Articles

Long-form writing

Reposts

Worth reading elsewhere

View all →

GCP Security Bulletin: Cloud Service Mesh vulnerability GCP-2026-035

Google Cloud published a security patch for Cloud Service Mesh affecting GKE clusters using Gateway API (GCP-2026-035). Proxy version csm_mesh_proxy.20260423_RC03 is rolling out across all Managed Cloud Service Mesh release channels, superseding the June 3 announcement with additional fixes.

Google Cloud2026-06-10

Oracle Security Alert Advisory - CVE-2026-35273

A critical unauthenticated remote code execution vulnerability (CVSS 9.8) in PeopleSoft Enterprise PeopleTools 8.61 and 8.62 is being actively exploited in the wild. Oracle published out-of-band mitigations while a patch is pending.

Oracle2026-06-10

Anthropic releases Claude Fable 5 and Claude Mythos 5

Anthropic released Claude Fable 5, the first Mythos-tier model available to the public, alongside a restricted Claude Mythos 5 for government and cybersecurity use. Fable 5 leads benchmarks in software engineering, knowledge work, vision, scientific research, and autonomous tasks. It is included at no extra cost on Pro, Max, Team, and Enterprise plans until June 22, 2026; from June 23 onward it consumes usage credits.

Anthropic2026-06-09

WWDC 2026: Everything announced on Siri, AI, OS 27, Apple Intelligence and more

Apple rebuilt Siri on a customized Google Gemini model with three-tier routing: on-device for simple tasks, Private Cloud Compute for medium workloads, and Google Cloud for heavy inference. Developer betas for iOS, iPadOS, macOS, watchOS, tvOS, and visionOS 27 were also released.

TechCrunch2026-06-08

Working Notes

Shorter thoughts from the field

View all →

Newsletter

Thoughts on tech, development, and building for the web.
No spam, ever.

Subscribe →