Cyber news for UK businesses, Wednesday 11 November 2026
Barracuda email gateway flaws are now being exploited
Barracuda says attackers are using two flaws in its Email Security Gateway against “a small number of organisations”, according to The Register. Install Barracuda’s patch for your firmware and keep the admin page off the internet. Daily CyberSecurity reports CISA has listed the flaws as exploited. Our full Barracuda guide has a checklist.
Outlook zero-day can leak sign-in hashes
Microsoft’s November updates fix an Outlook flaw that was already being exploited. Opening a crafted message file can leak a user’s NTLMv2 hash, which an attacker could try to reuse to sign in as them. Install the updates and patch Outlook first.
Two Microsoft bugs need no click
The same update fixes two critical flaws that need no user interaction. One reaches Exchange through an email attachment. The other hits Windows LDAP, so The Register says patch Exchange and domain controllers first.
Chrome zero-day fixed
Google says it is aware that an exploit for CVE-2026-125350 exists in the wild. Update Chrome to 157.0.8103.50 or later, then restart it.
Fortinet publishes eight critical advisories
The flaws cover FortiOS, FortiManager and FortiAnalyzer. Daily CyberSecurity reports no attacks so far and says some fixes are still “upcoming”. Apply the updates, disable the JSON API if you do not use it, and keep the FortiManager FGFM and OFTP ports off the internet.
Not sure what your website shows to attackers? Run our free web vulnerability scan, or talk to us about penetration testing.
Yesterday’s roundup: Cyber news for UK businesses, Tuesday 10 November 2026