THE WEEKLY BRIEFING19 October 2026EDITION 189
The week.
With the context.
Get the gist here. Read the TOP STORIES article for the interpretation and practical guidance. Follow the source link if you want the full feature.
IF YOU READ ONE THING..... / Security
Ransomware gets personal
Ransomware pressure is reaching beyond data and systems. Investigators have seen executives receive photographs of their children’s schools, while Semperis respondents reported physical threats and harm to staff or families. Backups remain essential, but the incident plan must also protect people. Brief families, prepare for intimidation and keep awareness training practical and regular..... a completion certificate will not prepare somebody for a threat at home.
The practical pointAsk whether the incident plan covers threats against people, as well as the loss of systems and data.
Read the TOP STORIES article →
THREE QUESTIONS FOR THE BUSINESS
Turn the reading
into a conversation.
- 01Review whether the incident plan covers threats against people and their families.
- 02Check patch installation and identify Windows devices on unsupported versions.
- 03Match AI capability to a useful business task, with controls and a measured trial.
ALSO IN THE EDITION
The rest of the week.
01
Microsoft / Security
October brought 1,413 fixes, including three zero-days and a Windows Shell issue reported as already exploited. Patch promptly, but check known issues, test business applications and verify installation. There is a separate job too: Windows 11 24H2 Home and Pro have reached the end of support. Installing the monthly patch does not extend that support..... the version and edition both need checking.
The practical pointCheck patch installation AND whether the Windows version remains supported. One does not replace the other.
Read the TOP STORIES article →02
Microsoft
Microsoft is raising auto-expanding archive capacity from 1.5 TB to 3 TB for eligible mailboxes, with licensing conditions attached. This is the online archive, not a larger everyday inbox. Most businesses will not approach the existing ceiling, but some with extensive correspondence and retention requirements will welcome the room. Check eligibility, monitor growth and keep retention decisions separate..... more storage does not decide what the business should keep.
The practical pointUseful breathing room for unusually large archives. Check licence eligibility and retention settings before assuming it applies.
Read the TOP STORIES article →03
Microsoft / Applications
LibreOffice Draw can import Publisher .pub files, offering a route to recover and convert content as Microsoft support ends. That does not promise perfect compatibility. Keep the originals and test the results. There is a wider story too: AI-assisted development may help revive abandoned applications, but someone still has to check file fidelity, security and maintenance..... resembling the original application is only the beginning.
The practical pointKeep the originals, test the alternative and check where the information goes.
Read the TOP STORIES article →04
Hardware / Microsoft
Microsoft’s Windows improvements can release memory and improve selected response times, buying useful breathing room for existing 8GB and 16GB machines. They do not remove the requirements of Teams, business applications, endpoint protection, VPN and management tools. My recommendation for new corporate PCs remains 32GB minimum. A lower purchase price can become years of waiting time, support calls and an earlier replacement.
The practical pointUse efficiency improvements to extend suitable existing equipment. Keep the 32GB minimum for new corporate purchases.
Read the TOP STORIES article →05
Security / Microsoft
Defender for Endpoint is extending to Linux desktops in public preview, with developer workstations a particular focus. Those machines can reach source code, cloud systems and build pipelines. Defender already covered Linux servers; this extends the desktop coverage. Check the required licence, supported distribution and kernel, then identify machines missing from monitoring and assess a controlled pilot. Linux does not make an endpoint invisible to attackers.
The practical pointFind Linux workstations outside the security team’s visibility, then check compatibility and pilot protection.
Read the TOP STORIES article →06
Security
Microsoft and law-enforcement action disrupted the YAM Store, CoGUI and Iron Man phishing ecosystem. The reported billion messages and 75,000 organisations describe targeting, not confirmed breaches. Phishing is being sold as a service, with ready-made impersonation templates and continuing updates. The disruption is welcome, but staff still need regular, relevant training and a reporting process that makes it easy to raise a concern without blame.
The practical pointA takedown disrupts the infrastructure. The business still has to prepare the person receiving the next message.
Read the TOP STORIES article →07
Hardware
RTX Spark notebooks have a credible specialist role for local AI, large shared-memory workloads and NVIDIA’s CUDA ecosystem. That does not make them the next corporate standard. Reviews, pricing and supply all deserve a closer look, and South African availability still needs checking. Keep necessary replacements moving against actual user requirements..... there is always another processor coming, but an employee still needs a machine that works today.
The practical pointMatch the notebook to the workload, and check stock and support before promising a demonstration or delaying a refresh.
Read the TOP STORIES article →08
Cloud & AI
Sergey Brin describes Google moving onto the recursive self-improvement treadmill: AI helping the research and engineering behind better AI. Google’s reported optimisation of one Gemma configuration is an example of infrastructure improvement, not proof that intelligence has tripled. Capability can develop quickly, so revisit useful business tasks regularly. Keep information protected, permissions controlled and results measured as the tools improve.
The practical pointReview the opportunities as capability changes. Keep independent controls around what an AI is allowed to reach and do.
Read the TOP STORIES article →09
Did you know / Sponsored
FirstCore.AI’s NVIDIA GPU infrastructure is running in a South African data centre, with rand billing and local processing. The published examples include voice agents, document processing and quality assessment of call recordings. Match the model to the job, then test a real workload with a metered trial. This provides a place to run suitable AI workloads alongside the governance and security the business still needs.
The practical pointStart with the workload, its data requirements and a metered trial. Ask FirstCore.AI and FirstNet to scope the implementation.
Read the TOP STORIES article →Keep the conversation going.
Questions, corrections or a topic that deserves a closer look? Contact Barry directly.