08 August 2026
1. What is being reported?
A security weakness has been found in some Microsoft and Apple software that could allow someone to get around the usual login checks. This is called an authentication bypass vulnerability. Both companies have issued updates to fix this issue.
2. What this means in plain English
If this weakness is not fixed, an attacker might be able to access your business systems or data without needing a valid username or password. This could lead to data theft, disruption, or other security problems.
3. Could this affect a small business?
Small businesses using Microsoft products like SharePoint or Azure, or Apple devices and software, could be affected if they have not installed the latest security updates. If you do not use these products, or your IT provider manages updates regularly, you are less likely to be at risk.
4. What to do now
- Check with your IT provider or software supplier whether the latest Microsoft and Apple security updates have been applied.
- If you manage your own devices, install all pending updates for Microsoft and Apple software immediately.
- Ensure your IT provider is aware of this issue and confirm they have addressed it.
- Review your login and access controls to detect any unusual activity.
5. Ask your IT provider
Have the latest Microsoft and Apple security updates addressing the authentication bypass vulnerability been applied to all our systems and devices?
6. Bottom line
Applying these security updates promptly helps prevent unauthorised access to your business systems.
Information based on reputable security reporting and CISA KEV.