Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

How to Send Email from Cloudflare Workers

There are two real ways to do this: Cloudflare's own native Email Service binding, or calling an external email API like Notify over fetch() .

  • Native Email Service requires Paid plan, domain registration, DNS records, and Wrangler config
  • External API method (e.g., Notify) is portable, avoids Node.js issues, needs API key as secret

The GNU strip backdoor is the case AI code review can't see

This paper (arxiv 2607.24888) is worth a stop if you evaluate AI code review. It shows Ken Thompson's trusting-trust attack is not compiler-specific: the authors pull it off with GNU strip, a build…

  • GNU strip backdoor can implant payload in ELF binaries
  • AI code review tools cannot detect binary-level malicious code
  • Strip-trust problem requires separate verification from source code review

VeraCrypt Done Right: The Practical Guide That Prevents Lockouts, Data Loss, and False Confidence

VeraCrypt is easy to use badly. You can choose an unnecessarily complicated cipher cascade, forget a custom PIM, leave the only copy of a keyfile on a dying USB stick, sync a mounted container through…

  • VeraCrypt often misused due to complex cipher cascades and neglect of custom PIMs
  • Argon2id introduced for non-system volumes in version 1.26.29 (June 9, 2026)
  • Proper backup of keyfiles crucial, never store backup within encrypted volume

More from Tuesday 8 September →