Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR

Watch ·

Bulletin for Thursday, September 17, 2026

Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.

+10breaches, in 7 sectors+14advisories, in 8 updates3actively exploited7.9Maccounts affected, as reported

Deal with these first

  • Exploited · Software

    Acronis Backup

    Apply the vendor’s patch.

  • Critical · 7.5M accounts

    CenterPoint Energy

    Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.

  • Exploited · Network

    Cisco Identity Services Engine

    Apply the vendor’s patch.

Today’s breaches 10

Healthcare2

Energy1

Public sector1

Education1

Retail2

Digital services2

Nonprofits1

Today’s advisories 14

  • Acronis BackupSoftware · Exploitedvendor patch
  • Cisco Identity Services EngineNetwork · Exploitedvendor patch
  • Google PixelSoftware · Exploitedvendor patch
  • @zereight/mcp-gitlabnpm · CVSS 9.8→ 2.1.27
    npm install @zereight/mcp-gitlab@2.1.27
  • lmdeployPyPI · CVSS 9.8→ 0.10.2
    pip install --upgrade "lmdeploy>=0.10.2"
    • CVE-2025-59953Unsafe deserialisation · CVSS 9.8 · >= 0.9.1, < 0.10.2Critical
  • djustPyPI · CVSS 9.1 · 6 failles→ 1.0.7
    pip install --upgrade "djust>=1.0.7"
  • rmcpRust · CVSS 8.2 · 2 failles→ 2.0.0
  • @nuxtjs/mdcnpm · CVSS 8.1→ 0.22.1
    npm install @nuxtjs/mdc@0.22.1

Get the bulletin every morning

The same content, no ads, no tracking: priorities, breaches by sector, advisories by update with the command to copy.

RSS feed

An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.