Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Why Cursor Ships Your OpenAI Key to Every Visitor (CWE-522)

TL;DR When the OpenAI SDK throws "It looks like you're running in a browser-like environment", AI editors usually fix it by adding dangerouslyAllowBrowser: true and moving the key into a VITE_ or…

  • Developers add dangerouslyAllowBrowser flag to use OpenAI SDK in browsers.
  • API key exposed to every visitor due to JavaScript bundle and Authorization header.
  • Mitigation involves removing flag, rotating key, and moving model calls to server.

Upgrade Jenkins to pass the security audit, and your AIX and old RHEL build agents go offline

If you run CI at a company with a long tail of platforms, you may know this one. I've worked on CI and Jenkins for years, and I keep seeing the same problem in the community and among peers.

  • Agent8 allows old AIX and RHEL 6 agents to connect to Java 21+ Jenkins controllers
  • Agent8 preserves labels, executors, and steps for old hosts
  • Developer tested Agent8 extensively, but not an official Jenkins project

Linux Mint 27 "Adrien" expected for Christmas 2026, while new applications are in the works

Linux Mint 27, codenamed Adrien, is expected at Christmas 2026 and will use Ubuntu 26.04 LTS as its base. The release also starts a new series of codenames, returning to A and switching from women’s…

  • Linux Mint 27 named Adrien for Christmas 2026 release
  • Switching from female to male names for codenames
  • New applications in development include Clockenstein, Book Reader, Superlight, Unfold, and Velocity

More from Tuesday 13 October →