This episode examines three immediate threats facing UK small businesses in November 2026. First, zero-day vulnerabilities in N-able N-central, the remote monitoring platform used by many managed IT providers, created a window of exposure across entire MSP client bases before hotfixes became available. Second, CISA confirmed active exploitation of a Cisco BroadWorks authentication bypass, affecting business telephony infrastructure widely deployed across UK enterprises, often without their knowledge. Third, the ClickFix social engineering technique has matured from simple clipboard tricks into sophisticated attack chains combining malvertising, typosquatting, and engineered consent to deliver remote access trojans. The episode provides specific questions to ask IT and telephony providers, technical mitigations for PowerShell-based attacks, and staff briefing guidance. Also noted: the NCSC’s new Cyber Adversary Simulation scheme, Microsoft’s patch Tuesday addressing 1,328 vulnerabilities including 45 critical remote code execution flaws, and Maersk’s confirmation of a suspected data theft incident.
