This episode examines two active cybersecurity threats affecting UK small businesses: CVE-2026-15748, a critical unauthenticated remote code execution vulnerability in the Forminator Forms WordPress plugin with over 600,000 installations, and Evooo1Bot, a Linux botnet targeting unpatched routers and edge devices using decade-old vulnerabilities. Corrine explains how both threats exploit the absence of basic patching practices, why automated scanning makes business size irrelevant as a defence, and provides practical steps for checking WordPress plugin versions and router firmware. The episode connects these immediate threats to broader patterns covered throughout the series, including Cyber Essentials requirements, UK GDPR obligations when breached through known vulnerabilities, and the commercial value of demonstrable security hygiene. With clear instructions for non-technical business owners and guidance on engaging IT providers, the briefing translates intelligence feed data into actionable tasks that cost nothing but demand attention today.
