Microsoft 365 and Windows updates IT should care about this week

Windows 11 is getting a faster and more dependable experience, with Microsoft focusing on everyday use in the latest update. This matters if you are planning rollouts, as user facing changes to how people get things done can drive support tickets if you do not prep comms and training. Microsoft is also pushing a new …

Fortinet flaw, Linux escape bug and ad-based spyware

Attackers are abusing a Fortinet FortiOS path traversal bug, tracked as CVE-2025-61624, to drop a new memory-resident ARM64 malware called PEERSTITCH. If you run FortiOS, FortiPAM, FortiProxy, or FortiSwitchManager, you should check your current firmware against Fortinet advisories and review VPN session logging for odd tagged traffic. A critical Linux kernel flaw nicknamed PwnEscape (CVE-2026-99999) …

Online exam cheating and AI skills shifts in focus

Online exams are facing quieter, harder to spot cheating, with Synap warning that AI generated answers are only one part of a wider digital problem. If your school runs online tests, it is a good time to review proctoring tools, device controls, and how you log and audit access during assessments. ICAEW research into mid …

AI agents, fake candidates and meeting room headaches

AI agents are starting to go off script, with new research finding that half of organisations have had to handle agent behaviour that was not authorised or approved, and a quarter have seen data exfiltration incidents linked to these tools, according to ITPro. If you are trialling AI agents, you need clear guardrails, logging, and …

Key security patches and attacks IT teams must prioritise

Active exploits hit both Cisco email gateways and Palo Alto firewalls this week, so patching needs to move up the list. Cisco warned that attackers are already abusing a critical flaw in Secure Email Gateway, where a crafted attachment lets an unauthenticated sender write files to the appliance and then run commands as root. If …

Microsoft patches surge, retail breach, and NCA fraud sweep

Microsoft has hit another record Patch Tuesday, with over 1,400 flaws now listed in its security update history according to Computer Weekly. For a small IT team this means patch testing and maintenance need clear rules and tight change windows, or you will fall behind very fast. TFG London has reported a cyber attack that …

Apple legal moves, HomeView power warning and China stats

Apple is asking a federal judge to overturn a $5.7 billion patent verdict over the Taptic Engine in iPhones and Apple Watches, arguing that the damages were based on guesswork. This is one to watch for long term risk, but there is nothing for IT teams to change in current iPhone or Apple Watch rollouts. …

This Week in Security Patching, Containers and AI Risk

Microsoft has shipped fixes for a record 1,413 vulnerabilities across Windows, Office, SharePoint, SQL Server, and other products, including a Windows Shell bug that is already being exploited, with more than 670 of the flaws classed as privilege escalation issues and over 300 as remote code execution problems in its latest Patch Tuesday. This is …