Three critical vulnerabilities confirmed as actively exploited demand immediate attention from UK small businesses. CVE-2026-55040 allows unauthenticated attackers to bypass SharePoint authentication entirely, no credentials required. CVE-2026-65400 lets attackers on your local network gain full control of unpatched Macs through Screen Sharing without valid credentials. CVE-2026-24301, now patched, demonstrated how a single crafted link could silently exfiltrate data from Microsoft Copilot Personal. Corrine walks through the practical threat model for each vulnerability, why CISA’s Known Exploited Vulnerabilities catalogue additions matter, and the specific actions UK small businesses must take today: patch SharePoint or restrict access immediately, update all Macs to macOS Tahoe 26.6.2, verify Copilot versions and audit connected services. This episode emphasises the gap between Cyber Essentials compliance timelines and the reality of active exploitation, the false security of local network restrictions, and the emerging attack surface created by AI tools with broad data access.
