No transcript available for this episode.
Today’s threat briefing covers three critical issues affecting UK small businesses. First, AhsayCBS cloud backup software has been actively exploited since 7 October 2026 through two chained vulnerabilities allowing unauthenticated remote code execution. The product sits in MSP infrastructure stacks, meaning businesses often don’t know they’re exposed. Second, a sophisticated phishing campaign targets hospitality customers with fake booking pages containing genuine reservation details including hotel names, dates, prices, and guest information. The personalisation defeats standard phishing detection advice. Third, Microsoft’s stricter email authentication enforcement is bouncing legitimate mail from domains with missing or misconfigured SPF, DKIM, and DMARC records. All three items share a common thread: they exploit infrastructure components that receive minimal scrutiny because they’re assumed to work correctly. Mauven provides specific, actionable steps for each threat, including questions to ask IT providers, staff briefing points, and DNS configuration checks using MXToolbox.