Mauven examines three active threats demanding immediate attention from UK small businesses. PHP2Shell vulnerabilities remain widely unpatched despite active exploitation that began days before public disclosure, with automated scanning targeting WordPress, WooCommerce, and Magento installations. New research reveals ransomware affiliates using commercial AI services as operational infrastructure, spending over twenty-three thousand dollars to automate edge device exploitation at scale. Meanwhile, year-end phishing campaigns are already targeting finance and HR staff with fake compensation notices, invoice approvals, and SharePoint lures timed to coincide with Q4 administrative workload. The episode provides specific patching guidance, edge device management questions, and practical phishing defence steps that can be implemented this week. No technical background required, just clear direction on where the exposure sits and what to do about it.