Security Notices
When a website vulnerability is serious enough to matter to a small business, this is where it gets explained without the jargon: what it does, whether it affects your site, and the one thing worth doing about it this week.
Translation, not commentary
There are people who find these vulnerabilities and people who track who is exploiting them. I'm neither, and these notices never pretend otherwise. Every claim here traces back to the vendor who published the fix, to the researcher who reported it, or to CISA, and the links are in the articles so you can check any of it yourself.
What's missing from that chain is the translation. A security advisory is written for engineers, and the question a business owner has is simpler: does this affect me, and what do I do today. That gap is what these notices fill.
They also won't tell you to panic. Most weeks nothing qualifies, and plenty of the ones that do turn out to be already handled by an update your site installed on its own. Where that's true, it says so.
Security flaws that concern small businesses
Is your SonicWall firewall on a version with the fix for CVE-2026-19868?
SonicWall's advisory lists fixed firmware, and CISA listed the flaw as exploited on 6 November. It only applies when staff log in to the VPN through SAML, and one question settles where you stand.
Read the noticeIs your Next.js website on a version with the 3 November security fixes?
Vercel published fixes for seven issues in Next.js on 3 November. None is listed as exploited. The useful step is finding out the version and who owns it.
Read the noticeIs your WordPress site patched against CVE-2026-119977?
WordPress fixed a flaw in its own upgrade process on 28 October, and CISA listed it as exploited on 3 November. The question worth asking is which version your site runs, and who confirmed it.
Read the noticeAre your iPhone, iPad and Mac covered by the fix for CVE-2024-27834?
Apple released the fix in May 2024, and CISA listed the flaw as exploited on 4 November 2026. The question worth asking is what software your business's Apple devices are running, and who knows.
Read the noticeWebsite Growth Insights
The longer-form articles on websites, local search, AEO and how sites are built sit in the insights hub.
Not sure who looks after your updates?
That's the question underneath most of these notices. If you can't name the person, it's worth sorting out before the next one lands.