Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR

Watch ·

Bulletin for Saturday, September 26, 2026

Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.

+6breaches, in 6 sectors+8advisories, in 8 updates3actively exploited300,582accounts affected, as reported

Deal with these first

  • Exploited · Software

    Microsoft SharePoint

    Apply the vendor’s patch.

  • Critical · 150,114 accounts

    Plurélya

    Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.

  • Exploited · Network

    MikroTik RouterOS

    Apply the vendor’s patch.

Today’s breaches 6

Nonprofits1

Healthcare1

Retail1

Transport and travel1

Public sector1

Insurance1

Today’s advisories 8

  • Microsoft SharePointSoftware · Exploitedvendor patch
  • MikroTik RouterOSNetwork · Exploitedvendor patch
  • WordPress CoreSoftware · Exploitedvendor patch
  • fof/oauthComposer · CVSS 9.8→ 1.7.4
    composer require "fof/oauth:>=1.7.4"
  • knownsnpm · CVSS 8.8→ 0.30.0
    npm install knowns@0.30.0
  • code16/sharpComposer · CVSS 8.7→ 9.22.5
    composer require "code16/sharp:>=9.22.5"
  • CliInvokeNuGet · CVSS 8.4→ 2.8.5
    dotnet add package CliInvoke --version 2.8.5
  • CliInvoke.SpecializationsNuGet · CVSS 8.4→ 2.8.5
    dotnet add package CliInvoke.Specializations --version 2.8.5

Get the bulletin every morning

The same content, no ads, no tracking: priorities, breaches by sector, advisories by update with the command to copy.

RSS feed

An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.