Flaws, leaks, attacks and regulation. The one section where we do not joke.https://inyourgeek.comen-UShttps://inyourgeek.com/en/articles/2026-09-09-patch-tuesday-record-966-failles-microsoft-deux-zero-dayshttps://inyourgeek.com/en/articles/2026-09-09-patch-tuesday-record-966-failles-microsoft-deux-zero-daysOn 8 September 2026, Microsoft shipped the largest batch of security fixes in its history, including two vulnerabilities already under attack. The sheer volume changes how teams must prioritise deployment.Wed, 09 Sep 2026 05:00:22 GMTsecuritemicrosoftpatchzerodayvulnerabiliteshttps://inyourgeek.com/en/articles/2026-09-08-un-chercheur-factorise-les-cles-rsa-512-bits-dhttps://inyourgeek.com/en/articles/2026-09-08-un-chercheur-factorise-les-cles-rsa-512-bits-dOn 7 September 2026, a developer published the private keys of two 512-bit roots that shipped with Netscape 4.51 in 1999, factored in 61 hours on a desktop PC. Compute always catches up with a key size — the only question is when.Tue, 08 Sep 2026 05:00:18 GMTsecuritesecuritersachiffrementnetscapehttps://inyourgeek.com/en/articles/2026-09-06-153-millions-de-permis-mis-en-vente-idscan-visehttps://inyourgeek.com/en/articles/2026-09-06-153-millions-de-permis-mis-en-vente-idscan-viseA dark web service offered more than 153 million driver's license scans for sale, a database traced back to identity verification vendor IDScan. Several lawsuits have been filed, and the FBI is investigating.Sun, 06 Sep 2026 05:00:21 GMTsecuritefuiteidentitedonneesjusticehttps://inyourgeek.com/en/articles/2026-09-05-cve-2026-85046-une-evasion-du-bac-a-sablehttps://inyourgeek.com/en/articles/2026-09-05-cve-2026-85046-une-evasion-du-bac-a-sableAn NVD entry published on 4 September 2026 documents a sandbox escape in Chromium that is already being exploited. Because the engine is shared by nearly every browser and every Electron application, the scope reaches far past Chrome.Sat, 05 Sep 2026 05:00:20 GMTsecuritechromiumfailleelectronnavigateurhttps://inyourgeek.com/en/articles/2026-09-04-elementor-pro-la-faille-cve-2026-32475-exploitee-depuishttps://inyourgeek.com/en/articles/2026-09-04-elementor-pro-la-faille-cve-2026-32475-exploitee-depuisA critical Elementor Pro vulnerability, fixed on 19 August 2026, has been exploited since that same day to drop a webshell on WordPress sites. Wordfence says it blocked close to 200,000 attempts.Fri, 04 Sep 2026 12:06:18 GMTsecuritewordpresselementorfaillewebshellhttps://inyourgeek.com/en/articles/2026-09-04-le-registre-de-coder-detourne-pour-diffuser-des-moduleshttps://inyourgeek.com/en/articles/2026-09-04-le-registre-de-coder-detourne-pour-diffuser-des-modulesOn 31 August, part of the traffic to Coder's registry was diverted to attacker-controlled servers handing out booby-trapped Terraform modules. Those modules went straight for the keys and tokens held by infrastructure teams.Fri, 04 Sep 2026 11:48:58 GMTsecuritesecuriteterraformcloudflarecoderhttps://inyourgeek.com/en/articles/2026-09-03-fuite-de-524-867-dossiers-patients-500-000-dhttps://inyourgeek.com/en/articles/2026-09-03-fuite-de-524-867-dossiers-patients-500-000-dFrance's CNIL has fined Hôpital privé de la Loire €500,000, a year after the data of 524,867 patients was exfiltrated. The ruling describes basic failures: no VPN, no two-factor authentication, no monitoring of access.Thu, 03 Sep 2026 00:00:00 GMTsecuritecnilsantergpdfuite