Urgent.News

What's breaking now, across thousands of outlets.

Wednesday, 2 September 2026 Reading Room

Tech

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated at the United Nations Food and

thehackernews.com ·

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

TLS certificates, actually explained, no hand-waving

Most developers use TLS constantly and understand it vaguely, "it's the padlock, it means encrypted," without a clear picture of what's actually happening or, more usefully, what actually breaks and…

  • TLS encrypts data and authenticates servers separately
  • TLS certificates bind public keys to identities via CAs
  • Proper validation checks authority, date range, revocation, and domain matching

·dev.to

Kubernetes network policies: your cluster is flat until you say otherwise

Here's a fact that surprises people new to Kubernetes and should genuinely alarm them a little: by default, every pod in your cluster can talk to every other pod, unrestricted, regardless of…

  • Default Kubernetes clusters allow unrestricted pod communication.
  • Network policies restrict communication to enhance security.
  • Start with critical workloads using default-deny posture.

·dev.to

I Built a Calm Decision Tool for Questions That Do Not Fit in a Spreadsheet

I keep noticing the same moment in conversations: someone has a decision in front of them, but what they really want is a little space to think.

  • Yi Ask is a web app inspired by I Ching and Meihua Yishu for yes-or-no questions.
  • Users select two numbers via a slow, circular interaction to structure their question.
  • The app provides structured results answering four key questions to aid judgment.

·dev.to

Common Reasons for App Store Review Rejection: Screenshot Specs and Permission Description Pitfalls

Anyone who does iOS development has likely encountered this situation: after submitting your app with great effort, you receive an App Store review rejection email the next day with a variety of…

  • Screenshots must follow App Store size guidelines for iPhone and iPad
  • Privacy policies must cover all data collection methods for data-collecting apps
  • Permission descriptions must be explicit, providing specific reasons for each request

·dev.to

More from Wednesday 2 September →