Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR

Watch ·

Bulletin for Tuesday, September 22, 2026

Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.

+7breaches, in 4 sectors+4advisories, in 4 updates1actively exploited5.3Maccounts affected, as reported

Deal with these first

  • Exploited · Network

    Zyxel GS1900 Series Switches

    Apply the vendor’s patch.

  • Critical · 225,370 accounts

    Ambry Genetics Corporation

    Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.

  • High · 3.2M accounts

    Burger King Russia

    Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.

Today’s breaches 7

Healthcare1

Digital services3

Retail2

Transport and travel1

Today’s advisories 4

  • Zyxel GS1900 Series SwitchesNetwork · Exploitedvendor patch
  • github.com/lucasdillmann/nginx-ignitionGo · CVSS 8.1→ 0.0.0-20260621194639-0586b4e55ab
    go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260621194639-0586b4e55ab
    • CVE-2026-61628Other · CVSS 8.1 · < 0.0.0-20260621194639-0586b4e55abHigh
  • github.com/lucasdillmann/nginx-ignitionGo · CVSS 7.5→ 0.0.0-20260526022344-0c988fc1277c
    go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260526022344-0c988fc1277c
    • CVE-2026-61629Denial of service · CVSS 7.5 · >= 0.0.0-20260126024607-cbaf0fc16ed8, < 0.0.0-20260526022344-0c988fc1277cHigh
  • hatchetGo · CVSS 7.1→ 0.91.1
    go get hatchet@v0.91.1

Get the bulletin every morning

The same content, no ads, no tracking: priorities, breaches by sector, advisories by update with the command to copy.

RSS feed

An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.