The IT Week — WordPress flaw already exploited in attacks, SonicWall firewalls and Zyxel switches to update, and how to check your Windows version

📰 The week's news: WordPress, SonicWall and Zyxel — three security updates not to postpone

WordPress, the system behind a huge number of business websites, has a flaw (CVE-2026-119977) that the US cybersecurity agency CISA has confirmed is already being exploited in attacks. Security vendor Wordfence says it blocked 13,095 attacks against this flaw in the last 24 hours alone. The fix exists: WordPress 7.1.4, released on 28 October. The WordPress team recommends updating sites immediately. If an agency or a technician manages your site, ask them today whether it has been done.

Second item, for anyone with a SonicWall firewall. The flaw CVE-2026-19868 affects remote access (the «door» used to work from outside the office) when it is set up with a certain login system. Someone who already has a valid password can bypass the checks, including two-step verification. SonicWall and CISA indicate that exploitation is under way. Affected versions are 7.3.3-7015 and earlier (Gen7) and 8.2.2-8015 and earlier (Gen8). The fixed versions are 7.3.4-7013 and 8.2.3-8015. There are no workarounds: updating is the only way.

Third item, for anyone with Zyxel GS1900-series network switches (the boxes the office network cables plug into). A group of attackers has compromised 996 of them in 48 countries. The flaw is CVE-2026-107441 and affects ten models; Zyxel released new firmware on 22 October and published its advisory on 3 November. The source does not give the exact version numbers: take them from Zyxel's advisory. What to do in all three cases: check what you have, update, and don't leave it «for when there's time».

♻️ Refurbished world: an old Windows 10 PC is not (yet) ready for the bin

An honest note: this week we found no new, verifiable news on refurbished IT, so here is an in-depth piece that stays valid, based on June articles. Regular support for Windows 10 ended on 14 October 2025, but Microsoft has extended free security updates for personal PCs until 12 October 2027. Anyone already enrolled stays covered automatically.

How to get them: by saving your Windows settings to your Microsoft account, by redeeming 1,000 Microsoft Rewards points, or, in the European Economic Area, by signing in to Windows 10 with a Microsoft account. Alternatively there is a paid option, €31.99 per year according to Punto Informatico. One licence covers up to 10 devices on the same account. Note: the programme is for personal computers only, not for those joined to a company domain or managed remotely by a company.

Why this is a circular-economy story: a PC that works well should not be replaced just because the calendar changes. According to StatCounter, at the end of May Windows 10 was still on 26.21% of computers (a year earlier it was 53.19%), while Windows 11 had risen to 71.84%. If your computer has years ahead of it, there is time to decide calmly. When it is finally time to replace it, don't throw it away or give it away without first erasing the data securely: that is exactly the service we offer, with a certificate.

🪟 The Windows tip: find out which version you have and whether it is up to date

Microsoft is rolling out Windows 11 26H2: according to Punto Informatico it is now available through Windows Update for all eligible computers, even those running Windows 10 if the hardware is compatible, with a gradual rollout. If your PC is eligible, a notice will appear when you open Windows Update.

For those already on Windows 11 versions 24H2 or 25H2, the update is small: according to BleepingComputer it arrives as a lightweight «enablement package», not a full reinstall. Installing it restarts the support period: 24 months for Home and Pro editions. One caveat: PCs running Windows 11 version 26H1 cannot move to 26H2.

How to check in 10 seconds: press the Windows + R keys together, type winver and press Enter: a window shows your Windows version. Then go to Settings → Windows Update and press «Check for updates». If the update does not appear, no problem: the rollout is gradual, try again in a few days.