Ping: The SMB Security Week of Oct 5, 2026

Welcome to Ping, a weekly signal for small and mid-sized businesses. Every week we read the security firehose so you don't have to, and boil it down to what a small shop should actually do: what to patch now, what scams are going around, what's aging out, and where AI is quietly changing the risk. One short read, every item sourced, no fear-mongering.

Here's the week.

AI Watch

The newest, least-familiar risk: attacks that target the AI tools your team has quietly started using.

• One Company Found 377 Copilot Agents Nobody in IT Had Registered. A security firm surveying real environments found one business running 377 Copilot agents it never registered and another with 2,500. Any employee with a Microsoft 365 license can spin up agents that hold credentials and act on company data without IT visibility. (source: Spiceworks: Shadow AI agents are a bigger threat than shadow IT)

Patch This Week

Known fixes worth applying now.

• Citrix NetScaler Gets Another Emergency Patch. A SAML Zero-Day Is Already Being Exploited. Citrix shipped out-of-band fixes for CVE-2026-88779, a denial-of-service bug attackers are already triggering against NetScaler appliances, with researchers still checking whether it also enables remote code execution. If your remote access or load balancing runs on NetScaler, the fix needs to go on this week. (source: BleepingComputer)
• Microsoft Will Stop Updating Windows PCs That Miss Next Year's Certificate Rotation. Microsoft is tying Windows Update delivery to a certificate that rotates in 2027, and devices on unsupported Windows builds will quietly stop receiving security patches once the old certificate expires. The fix is to be on a supported build before the swap. (source: BleepingComputer: Outdated Windows devices will stop receiving security updates)
• A Working Exploit for AnyDesk on Linux Gives Attackers Root Before Anyone Approves the Connection. Researchers published a full pre-auth remote code execution exploit against AnyDesk Linux. The fix shipped quietly in June as a crash bug with no CVE, so many installs are still vulnerable. (source: The Hacker News)
• SonicWall Issued Hotfixes for a Pre-Auth 10.0 Flaw in Its SMA1000 Remote Access Appliances. The gateway many businesses use for employee VPN access has a flaw rated 10.0 that an attacker can hit without logging in. SonicWall has released hotfixes and says it has no evidence of exploitation yet, which is the ideal moment to patch. (source: The Hacker News: SonicWall patches CVSS 10.0 pre-auth flaw)
• Atlassian Self-Hosted Jira, Confluence, and Bitbucket: A 9.3 File-Read Flaw Is Out. CVE-2026-21589 lets an unauthenticated attacker read specific files from the web root of eight self-hosted Atlassian products if they know the exact path. Cloud tenants are unaffected, but any on-prem Data Center install needs the October patch applied. (source: BleepingComputer)
• Dell's System Update Tool Has a Critical Root-Privilege Flaw. Patch Every Dell Laptop and Server. Dell's command-line System Update utility (DSU) ships on most Dell business machines and contains a flaw that lets a local attacker gain root. The fix is a straightforward DSU update, but it has to run on every Dell endpoint, not just the ones IT remembers. (source: BleepingComputer: New Dell System Update flaw lets hackers gain root privileges)
• Microsoft Shipped an Out-of-Band Exchange Patch That Stops Authenticated Users From Reading Other Mailboxes. CVE-2026-96940 is a weak-authorization bug in on-prem Exchange Server rated 8.8. Any authenticated user, including a compromised staff account, can escalate privileges and reach other mailboxes. Microsoft released the fix outside the normal Patch Tuesday cycle, which is itself a signal. (source: The Hacker News: Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes)

Scams & Signals

What's actually landing in inboxes and on networks: the social-engineering and breach news to warn your team about.

• The FBI Says 86,644 Fortinet VPN Credentials Were Harvested. Rotate Yours This Week. FortiBleed is still actively collecting logins from internet-facing FortiGate firewalls and SSL VPNs, exploiting reused passwords and legacy SHA-256 storage. Any business with a Fortinet appliance should force a password reset and audit admin accounts now. (source: The Hacker News)
• A Lapsed Cisco Meraki License Starts a 30-Day Countdown to a Dead Network. When a Meraki license expires, a 30-day grace period begins quietly in the background. If nobody renews, the dashboard stops managing the gear and switches, APs, and firewalls stop passing traffic. The default license model doesn't even surface the remaining days. (source: Spiceworks: A lapsed Meraki license can take the network down with it)
• Attackers Are Hiding Fake Claude Installers Behind Legitimate Bing Redirects in Google Ads. A live campaign uses real Bing search-result redirect URLs as the click destination of Google ads, so the preview looks clean while the final page serves a fake Claude installer that triggers ClickFix PowerShell. Hover-to-verify no longer catches this one. (source: BleepingComputer: Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks)
• Five US States Are Now Suing TP-Link Over Router Security. If Your Office Uses One, Read This. Florida, Iowa, Montana, Nebraska, and Texas allege TP-Link misled buyers about security and its China ties. The suits turn a widely used SMB router brand into a procurement and risk question your IT provider should weigh in on. (source: The Hacker News)
• The CEO of a Ransomware Recovery Firm Was Charged With Secretly Paying the Attackers He Claimed to Beat. Federal prosecutors say the owner of MonsterCloud marketed proprietary decryption technology while quietly wiring ransom payments to the gangs that hit his customers. If you ever need a recovery vendor in a crisis, the time to vet one is before the call. (source: BleepingComputer: Ransomware recovery CEO charged over secret ransom payments)
• ClickFix Attacks Now Hide the Payload Inside Your Browser Cache. A new ClickFix variant pre-fetches a script into the browser cache disguised as a PNG, so the Windows Run box only pulls a tiny local file instead of a long remote URL. That sidesteps the length limit defenders were using to spot these lures. (source: The Hacker News)
• Preinstalled Malware Is Turning Cheap Android Phones Into Residential Proxies. A campaign called Midnight Mimosa was found on low-cost Android handsets with the malware baked into firmware from the factory. Infected phones silently install apps, commit ad fraud, and route stranger traffic through your home or office network.
• ASOS Confirmed Attackers Reached Customer Data Through Social Engineering and Stolen Credentials. ASOS says the breach started with a social engineering attack combined with credential theft, not a software exploit. Help desk and account reset processes are where modern retail breaches now begin. (source: BleepingComputer: ASOS links breach to social engineering)
• Outlook Starts Blocking .msix and .msixbundle Attachments in November. Microsoft is adding Windows app installer files to Outlook's blocked attachment list after attackers used them to deliver malware. Legitimate software distribution should move to a managed channel before the cutover. (source: BleepingComputer: Microsoft Outlook to block MSIX attachments)
• Attackers Took Over Three Country-Code Domain Registries and Issued Valid HTTPS Certificates for Google Addresses. By modifying authoritative DNS at the registries for Ghana, Sierra Leone, and American Samoa, attackers obtained trusted TLS certificates for several Google-owned domains. The padlock in a browser proves encryption, it does not prove the site is who you think it is. (source: BleepingComputer: Hackers hijack Google domains after breaching ccTLD registries)
• A LibreOffice Spreadsheet Can Run Code the Moment You Open It. Java Support Is the Switch. Researchers showed that malicious .ods files can execute attacker code in LibreOffice and Apache OpenOffice with no macro warning, as long as Java support is enabled. Disabling Java in Tools > Options neutralizes the attack on machines that don't need it. (source: The Hacker News)
• Android 17 Locks Accessibility Permissions to Vetted Apps. Turn On Advanced Protection for Work Phones. Android's accessibility API is the main pipeline mobile malware uses to read screens, tap buttons, and drain bank apps. With Advanced Protection enabled on Android 17, only verified accessibility tools can use it, which closes off most banking-trojan tactics on a company phone. (source: The Hacker News)

End of the Road

Deadlines that reward planning ahead. A rushed migration is an expensive one.

Runway note: Windows Server 2022 leaves mainstream support on Oct 13, 2026, which means no new features or non-security fixes. Security updates continue under extended support until Oct 14, 2031, so this one is a planning milestone, not a cut-off.

See the runway above for what's coming; nothing new was flagged this week.

Trends & Signals

Because Ping runs every week, we can show the trajectory, not just this week's list. (These track the SMB-relevant items we flag each week: our editorial signal, not a full vulnerability census.)

How we help

Most of what's above is routine when someone owns it: patch on a schedule, watch the gear that gets forgotten, plan the upgrades before the deadline, warn the team about the live scams, and keep an eye on the newer AI risks. That's the boring, durable work we do for the businesses we manage, with a 24/7 team so the 3 a.m. items are handled before you wake up. If your patching and planning currently live in someone's head, let's talk about making it a system.

See you next Ping.