Cyber News for UK Businesses: Friday 6 November 2026
Here is today’s cyber news for UK businesses, six stories with one practical step for each.
DreamHost confirms its File Manager was breached
DreamHost says an attacker exploited a flaw in its web File Manager and reached FTP/SFTP usernames and passwords of people who logged in between about August and 23 October 2026. A limited number of webmail sessions may also be exposed. If you host with DreamHost, change those passwords now, and anywhere you reused them. Source: The Hacker News.
Stolen app credentials used to reach MSP clients
Todyl reports an unknown actor using stolen Microsoft Entra application credentials to get into MSPs’ Microsoft 365 and Azure environments, reaching at least 27 organisations. Ask your IT provider how they store and rotate app secrets. Source: The Hacker News.
Old Apple flaw now exploited in the wild
CISA added CVE-2024-27834 to its known exploited vulnerabilities list. Sekoia links the activity to a Russia-linked group, using compromised and fake websites to steal browser data. Apple fixed the flaw in May 2024, so check that every iPhone, iPad and Mac in your business is fully updated, including the forgotten ones. Source: The Hacker News.
Network devices wait over a year for patches
Microsoft’s analysis found the median fix time exceeds a year for network appliances, against about two weeks for Windows workstations. List your routers, firewalls and VPNs, and put them on a patch schedule. Source: The Hacker News, citing Microsoft.
75% off Cyber Essentials for small firms
The government’s First Step Fund covers 75% of the fee for micro, small and medium businesses not certified in the last four years. You pay £80 to £125 plus VAT. It runs to March 2027 or until the money runs out, first come, first served. Apply at firststep.iasme.co.uk. Source: GOV.UK.
Ransom note on every PC, nothing encrypted
Kaspersky describes an attack on a Middle East manufacturer where criminals with domain admin control used a Group Policy setting to push ransom notes to every Windows PC, without encrypting files. Lock down admin accounts and review who holds them. Source: The Hacker News.
Stolen logins drove today’s stories (see our entry on credential stuffing). Check whether yours are already exposed with Breachy. To see how your public website looks to an attacker, run the free web vulnerability scan, or read about our penetration testing.