Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

I Built a Full PDF Editor That Runs 100% in Your Browser — No Uploads, No Servers

Every PDF tool I tried had the same problem: upload your file to some server, wait, download it back — and hope the site deletes it. Contracts, ID cards, bank statements...

  • PDF editing done entirely in user's browser, no uploads or server involvement
  • Rendering, editing, merging, splitting, and converting happen locally in canvas elements
  • Local-first approach prioritizes privacy, speeds up experience, and keeps tools free

PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws

The PHP project released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on Oct. 21 to address CVE-2026-109618 and CVE-2026-109619.

  • PHP releases patches for two critical unauthenticated RCE flaws
  • CVE-2026-109618 and CVE-2026-109619 vulnerabilities rated 9.2
  • Public-facing services in Netherlands, Finland, Denmark, France affected

Field Notes: 25 seconds to detect and hand off. Nothing executes until a human says yes.

A Strands agent on Amazon Bedrock AgentCore found a real CloudWatch alarm, worked out what it meant, and handed the finding to a LangGraph agent over A2A. Median time, five runs: 25.3 seconds.

  • Strands agent on Amazon Bedrock detected CloudWatch alarm in 25.3 seconds
  • LangGraph agent proposed fix, required human approval for execution
  • Cedar policy on AgentCore Gateway enforced approval process

More from Friday 23 October →