Good morning. The thread running through today’s news is trust in software you did not write and did not choose. A plugin your developer tools install on their own, a phone in your employee’s pocket that is being driven by an AI, a version of Windows that quietly stops getting patched next month. Here are the five stories that matter most if you are running a small or midsize business, or leading its IT.
The four most widely used AI coding assistants all shipped the same flaw, and it lets a plugin update take over the machine without anyone clicking anything. Researchers at AIR Security disclosed a vulnerability they call Plugin4Shell that affects Claude Code, OpenAI’s Codex, GitHub Copilot and Google’s Gemini CLI, and the mechanics come down to a broken promise. These tools pin a plugin to a specific reviewed version of its code by commit hash, but the agent never actually verifies that the code it checked out matches the pin, so an attacker who controls the plugin’s repository can swap in malicious code while the pin still looks honored. There is no user interaction required at all, and a successful attack gets everything the agent can reach, which on a developer laptop usually means source code, cloud credentials and production access. Anthropic patched it in Claude Code 2.1.179 and OpenAI patched Codex in 0.146.0, Microsoft has not shipped a fix for Copilot, and Google has deprecated Gemini CLI and will not patch it at all, which leaves anyone still running it exposed indefinitely. If your company builds any software, even a small internal tool or a website integration, this is worth asking about today, because AI coding assistants moved from experiment to default workflow faster than most companies built any policy around what those assistants are allowed to install. Read more at The Register
A chunk of the Windows 11 machines in your office stop receiving security updates on October 13, and the ones sitting right next to them do not. Microsoft reminded customers this week that Windows 11 version 24H2 reaches end of support next month for the Home and Pro editions, after which those PCs get no more monthly security or reliability fixes. The wrinkle that catches businesses is that Enterprise and Education editions of the exact same 24H2 build run on a 36 month lifecycle and stay supported until October 2027, so two laptops showing the same version number in the same office can be on completely different patch clocks. The upgrade itself is not painful, since Windows 11 25H2 shares the same underlying platform and installs as a small enablement package rather than a full feature update, but somebody has to actually know which machines are on which edition. That inventory question is the real work here, and it is the sort of thing that gets skipped at companies where laptops were bought a few at a time from whatever retailer had stock. Pull a list this week of every Windows device you own along with its edition and version, because four weeks from now the answer stops being an administrative detail and starts being a list of unpatched computers on your network. Read more at BleepingComputer
The FBI seized one of the longest-running services for renting a denial of service attack against somebody else’s business. NightmareStresser had operated since 2022 with more than 566,000 registered users and the ability to throw 200 gigabits per second at a target, and it was used in hundreds of thousands of actual or attempted attacks against schools, government agencies, gaming platforms and ordinary companies. The takedown came out of the FBI’s Anchorage field office working with the Royal Canadian Mounted Police under Operation PowerOFF, which has now charged twelve defendants and seized more than 100 domains tied to these services. What makes this relevant to a smaller business is the price of entry: these platforms have always been cheap enough that a disgruntled former employee, a competitor or a bored teenager could point one at your website for the cost of a lunch, and they are usually the tool behind the extortion emails threatening to take your site down unless you pay. Enforcement helps, but these services resurface under new names within weeks, so the durable answer is knowing whether your website and any customer-facing portal sit behind a provider that absorbs this kind of traffic, and whether you would even know who to call at two in the morning if they did not. Read more at Help Net Security
A new strain of Android malware is using a commercial AI assistant to figure out what to tap on the victim’s screen. Zimperium’s research team published an analysis of RatHat, a banking trojan linked to Chinese-speaking operators, and the notable part is not the theft itself but the automation behind it. The malware reads the phone’s live accessibility tree, converts it to XML, and sends it to a mainstream generative AI assistant asking where a named button sits on screen and what the text actually says, then uses the answer to drive synthetic taps and scrolls. That makes it far more adaptable than the scripted malware that came before it, because it does not break when a banking app changes its layout. On top of that it captures lock screen PINs, intercepts one-time passcodes, overlays fake login screens on banking and crypto apps, and runs a hidden service that reinstalls it after somebody thinks they have removed it. It arrives through malvertising and text message phishing that push people to install an app from outside the Play Store. For most businesses the practical version of this is a mobile policy conversation that has been easy to postpone, because the phone your bookkeeper approves wire transfers on is a company system whether or not the company bought it. Read more at Infosecurity Magazine
Manufacturers got measurably better at patching over two years and made no progress at all on stolen passwords. Black Kite’s new report on the sector, covered Thursday, found the share of the top 1,000 analyzed firms carrying critical vulnerabilities fell from 80% in 2024 to 75% this year, and exposure to flaws known to be actively exploited dropped from 67% to 54%, which the researchers read as proof that prioritizing known-exploited vulnerabilities works when companies commit to it. The part that did not move is credentials. The share of firms with exposed credentials circulating in infostealer logs is the same now as it was two years ago, even as manufacturing held its spot as the most attacked sector for a fourth straight year with attacks up nearly 40% in the first half of 2026. That split is the useful takeaway regardless of what industry you are in, because patching is a project with an end date and credential hygiene is a habit with none. If you have been running a patch program and feeling reasonably good about it, the harder question this quarter is what happens when an employee’s password shows up in a breach dump, and whether anything in your environment would stop that password from working. Read more at Cybersecurity Dive
Follow Up
Follow-up to yesterday’s Windows 11 domain login story: Microsoft has published a temporary fix, and it is a registry change rather than a patch. Administrators locked out of domain-joined machines after installing KB5124008 or KB5124012 can set the MachineIdentityIsolation registry value from 2, which enforces the feature, back to 0, which turns it off, and Microsoft says a future Windows update will temporarily disable Machine Identity Isolation entirely while the feature gets reworked. That is a reasonable stopgap, but it is worth being deliberate about it: you are switching off a security control to restore logins, which means writing down where you made the change and when you intend to put it back. This is also the second consecutive month where a Patch Tuesday update has knocked out a core authentication service, and it is a fair argument for keeping a small pilot group a few days ahead of everyone else. Read more at BleepingComputer
Sponsored by Lucky 13 Solutions
Business in Motion. Tech in Sync. Lucky 13 Solutions is a managed services provider helping small and midsize businesses keep their IT reliable, secure, and well-supported, without needing a full in-house team. Learn more at l13s.com.
If you do one thing with this edition, pull the list of Windows machines and check which edition each one is running, because that October deadline does not move.
Get the Business IT News Roundup in your inbox:
How this gets made: stories come from my own reading and from AI-assisted research and drafting, all reviewed and edited by me before anything goes out. The commentary is mine, sources are linked so you can read the original, and any errors are mine to own. If something looks wrong, reply and tell me.