Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Reverse-Engineering YouTube's InnerTube Search API (WEB Client + Continuations)

Reverse-Engineering YouTube's InnerTube Search API (WEB Client + Continuations) YouTube search in a browser loads HTML. YouTube search as a client sends JSON. Same query, two paths.

  • YouTube InnerTube search API can be reverse-engineered via web client and continuations
  • WEB client loads HTML and sends JSON, while continuation path costs only one fetch
  • JSON path is more efficient, requiring just one fetch to retrieve search results

Agentic SQL Injection Is Just SQL Injection Wearing a Trench Coat

Nobody clapped for this one. Zero points, zero comments on HN, and yet CVE-2026-18830 is a better predictor of where agentic AI security is headed in the next two years than most of the funded-startup…

  • Agentic SQL injection is a repeat of traditional SQL injection vulnerabilities.
  • Researchers named it agentic SQL injection, but root cause is same as old SQL injection bugs.
  • Issue appears in multiple agent harness implementations, indicating architectural mistake.

More from Monday 24 August →