The IT Week — critical flaw already exploited in FortiMail email systems, Lombardy funds small businesses working on e-waste recycling, and Windows 11 24H2 stops receiving updates on October 13

📰 This week's news: critical flaw in FortiMail email systems, already exploited in attacks

On October 1 Fortinet warned of a critical flaw in FortiMail, the system many companies use to filter incoming email from spam and scams. It scores 9.8 out of 10 and lets an attacker, without even needing a password, write files on the device through simple web requests and take control of it. Fortinet states it is already being exploited in real attacks, and the US cybersecurity agency (CISA) has added it to its list of flaws under attack.

The bad news: for the most widely used versions there is no fix yet. Affected are versions 8.0.0–8.0.1, 7.6.0–7.6.6, 7.4.0–7.4.8 and 7.2.0–7.2.9. The announced fixes are 7.4.9, 7.6.7 and 8.0.2; those on 7.2 must move to at least the 7.4 branch. In the meantime Fortinet recommends two measures: turn off the IBE feature (encrypted email) or make sure the management panel cannot be reached from the Internet, keeping it on the internal network only.

And it is not the only case: on October 7 it was reported that a flaw in eight Atlassian products (including Jira and Confluence, installed on company servers) saw its first attack attempts within two hours of the technical details being published. In both cases the lesson is the same: whoever runs network or email equipment must check right away the version and whether it is reachable from outside. If you don't know who handles this in your company, this week is the time to find out.

♻️ Refurbished world: Lombardy opens a call for small businesses in electronic recycling and repairability

On October 6 the Lombardy Region opened the call Ri.Circo.Lo – Filiere Prioritarie, aimed at small and medium-sized businesses in the region. Applications close on November 5, 2026. The sectors involved include plastics, textiles, batteries, photovoltaic panels, recovery of critical raw materials and also electronic waste (WEEE).

Among the projects that can be funded, two categories stand out for the refurbished world: design built for repairability (products that are easier to open, repair and upgrade) and production lines that reuse materials recovered from waste. It is the same principle a refurbished computer is built on: keep what already exists alive longer instead of throwing it away.

An honest note: the source we consulted states neither the total budget nor the share of costs covered, so we do not quote them. Businesses in Lombardy working in these sectors can find the details in the Region's official notice.

🪟 Windows tip: on October 13 Windows 11 24H2 stops receiving updates, here is how to check

According to Microsoft's official calendar, Windows 11 version 24H2 in the Home and Pro editions ends support on October 13, 2026 (Redmond time): after that, no more security fixes. If your PC is stuck on that version, it stays on and working but becomes more exposed to every new flaw.

How to check in 10 seconds: press Windows + R, type winver and press Enter. A window shows the version. If it reads 24H2, open Settings → Windows Update and click Check for updates.

The good news: since September 29 version 26H2 (the Windows 11 "2026 Update") is available. Those on 24H2 or 25H2 get it like a regular monthly update, a small package that installs quickly. Once installed, the support clock for Home and Pro restarts: until October 10, 2028. For comparison, 25H2 is covered until October 13, 2027. In companies with many PCs, test it on a single one first, then roll it out.