Automatic translation from Italian. The Italian version is the reference text.

1. October Patch Tuesday: Microsoft fixes over 1,400 vulnerabilities, three zero-days

   source: IT-Connect · 14 Oct 2026

   Microsoft's 13 October security updates address 1,407 flaws, over 400 more than last month, across Windows, Office, SharePoint, SQL Server and Exchange. Three are zero-days: one already exploited in attacks and two publicly known before the fix, including a bypass of the Mark of the Web protection in Windows Shell. The critical ones include Outlook flaws that can be triggered just by previewing a message.

   For a small businessinstall the Windows and Office updates on every PC within a few days, and if you run an on-premises Exchange server have your IT supplier update it right away.

2. Chrome 155: 37 security fixes, seven of them critical

   source: Malwarebytes · 15 Oct 2026

   On 13 and 14 October Google released Chrome 155.0.8059.79 with 37 fixes, seven rated critical. Some affect the built-in PDF viewer and could allow code execution. The article does not report any attacks in progress.

   For a small businessopen Chrome's menu, go to About and restart the browser to finish updating on every computer; the same applies to Edge and other Chromium-based browsers.

3. Ivanti Connect Secure VPNs attacked through a flaw exploited before the patch

   source: CyberScoop · 13 Oct 2026

   Ivanti has fixed CVE-2026-104935, which lets an attacker run commands on the VPN appliance without logging in; Volexity says it was exploited from at least 1 October and the US agency CISA has listed it among actively attacked flaws. Another part of the attack chain is still awaiting an update. The vendor's checking tool may not detect an intrusion.

   For a small businessif your office uses an Ivanti VPN, have your technician install the update immediately and check for unusual access; if you don't use one, nothing to do.

4. Fake fine SMS in the name of the Polizia di Stato: CERT-AGID warns

   source: CERT-AGID · 16 Oct 2026

   SMS messages are circulating about a fine on Rome's ring road, asking for 17 euros within the day and threatening a 291 euro penalty and loss of licence points. The link leads to an unofficial domain imitating the Polizia di Stato that collects personal and card details. CERT-AGID advises not to click and to report the message to malware@cert-agid.gov.it.

   For a small businesstell staff and collaborators not to tap the link; anyone who entered card details should call their bank at once to block the card.

Roundup compiled automatically with AI from the sources listed: the original articles are the reference for details.