Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

I Found an Undocumented MCP Server on OpenSea — and It Leaked Usernames for Any Wallet

TL;DR: OpenSea runs an undocumented MCP server at mcp.opensea.io/mcp . One of its tools hands out API keys to anyone who asks, and another lets you resolve any Ethereum address with an OpenSea profile…

  • Undocumented MCP server on OpenSea exposed API keys
  • Potential to access usernames for any Ethereum wallet
  • Vulnerability reported to OpenSea's Bugcrowd program

Milestone Reached: YINI Syntax Highlighting Is Now on the VS Code Marketplace

Milestone Reached: YINI Syntax Highlighting Is Now on the VS Code Marketplace A small but important YINI milestone has been reached: the official YINI Syntax Highlighting extension for Visual Studio…

  • YINI Syntax Highlighting extension reaches version 1.0.0
  • Supports YINI Specification 1.0.0 RC 6
  • Enhances VS Code environment with syntax highlighting

Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions

Short answer: use two narrowly scoped API keys, switch traffic with an explicit activation step, and revoke the old key only after logs and live requests prove the cutover.

  • Rotate production API keys in Node.js GitHub Actions to reduce security risks
  • Use two narrowly scoped keys with explicit activation for traffic switch
  • Revoke old key after verification to minimize downtime and prevent disruptions

Digital Sovereignty: Europe's Path to Infra-Independence

Digital sovereignty in the EU: From slogan to practice We're surfing on the wrong server. That's one of the harshest realities we're facing as IT professionals today.

  • "Digital Sovereignty" in EU discussed as political slogan, but operational challenge
  • US-CLOUD Act allows US authorities to demand data access regardless of data center location
  • EU initiatives DGA and GAIA-X aim to create framework for sovereign data markets

More from Sunday 13 September →