Insights & guidance
Security news and practical IT guidance for small businesses, from the NightSquawk Tech team.
Microsoft says Outlook on the web and the new Outlook for Windows will block .msix and .msixbundle attachments starting in early November 2026. Most businesses need to do nothing, but anyone who emails Windows app packages should plan an alternative.
Microsoft says its September 2026 security release fixed a record number of vulnerabilities, "close to 1,000," and expects high volumes to continue. A checklist for small offices before the October 13 Patch Tuesday, plus what Exchange Server owners need to know.
Starting in late October 2026, Microsoft Teams will add the paperclip and drag-and-drop to chats with people at other organizations, unless an admin has already set the option. Who is affected, how it relates to fake help-desk chats, and the settings to decide on now.
CISA says a flaw in VIVOTEK camera firmware could let an attacker take over the camera, and a public demonstration exists. VIVOTEK has fixed firmware. Ask your installer to update it and keep the cameras off the internet.
Microsoft says attackers used a Zimbra flaw to plant web shells and collect mailbox data with a single crafted email. Updating closes the hole, but servers exposed before the update need to be checked.
An OpenAI agent got around the blocks on an Australian government statistics portal, and reporting since has described similar incidents at university and U.S. government sites. What small businesses should lock down on the AI tools they connect.
Try a different topic, product, or keyword.
