Three critical software patches demand immediate action this week: Microsoft SharePoint servers are under active attack, Google Chrome version 152 closes 10 critical flaws, and WordPress sites running TranslatePress need an urgent update to prevent admin account compromise. Unpatched systems expose your business to remote code execution, malware installation, and credential theft.
Today's cybersecurity update highlights urgent patching requirements and security awareness needs for small businesses. Microsoft SharePoint users face active exploitation of two critical vulnerabilities allowing remote code execution on unpatched servers. Google Chrome users need to immediately update to version 152, which patches 327 vulnerabilities including 10 critical flaws that could be exploited simply by visiting malicious websites.
Attackers are distributing fake Claude AI desktop applications that disable Windows Defender and install remote access malware, emphasizing the importance of downloading software only from official sources. WordPress site owners using the TranslatePress plugin (affecting 400,000+ sites) must update to version 3.3.2 to prevent admin account takeovers. Additionally, researchers discovered 28,000 exposed git repositories leaking active credentials for AWS, OpenAI, and GitHub, highlighting how simple server misconfigurations can expose critical business secrets.
The key message for small business owners: prioritize software updates, verify download sources, and audit your server configurations to prevent unauthorized access.
Why critical software patches matter for your small business right now
SharePoint servers are currently exploited by attackers using remote code execution chains. Chrome version 152 patches 327 vulnerabilities, 10 of which are critical and trigger simply by visiting a compromised website. WordPress sites with TranslatePress (affecting 400,000+ installations) face admin takeover risk. CISA tracks active exploitation of SharePoint. The single most important action: audit your current versions of SharePoint, Chrome, and WordPress plugins today. Check for unpatched systems on your network. Schedule updates within 48 hours. Verify download sources match official vendor domains only. One misconfiguration exposes credentials to AWS, OpenAI, and GitHub accounts, as recent findings showed 28,000 exposed git repositories.
Key takeaways
- SharePoint servers are under active attack right now. Patch immediately or disconnect unpatched instances from the network.
- Chrome version 152 closes 10 critical vulnerabilities that open malware via website visits. Update all employee browsers today.
- WordPress TranslatePress plugin versions below 3.3.2 allow attackers to create admin accounts. Update or disable the plugin.
- Download all software and plugins from official vendor sources only. Fake Claude AI desktop apps are installing remote access malware.
Frequently asked questions
How long do I have to apply these critical software patches?
SharePoint and Chrome vulnerabilities are under active exploitation now, so update within 24 hours. TranslatePress affects 400,000+ sites, so prioritize that WordPress update within 48 hours. Check CISA alerts for your specific software versions to confirm attack severity.
What happens if I don't patch SharePoint or Chrome?
Unpatched SharePoint allows attackers to execute code and access your files and database remotely. Unpatched Chrome downloads malware automatically when users visit compromised websites. Both lead to ransomware, credential theft, and business downtime.
How do I know if my systems are vulnerable?
Check your SharePoint version against Microsoft security bulletins, Chrome version in Settings/About, and WordPress plugin versions in your admin dashboard. If any are older than the versions mentioned in today's alert, you are exposed to active attacks.
Should I worry about the exposed git repositories?
Yes. If your business uses GitHub, AWS, or OpenAI credentials, audit those accounts immediately for unauthorized access. Change passwords for any exposed credentials and enable multi-factor authentication.
Sources
- https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-sharepoint-rce-chain-with-poc-exploit/
- https://www.malwarebytes.com/blog/bugs/2026/08/update-chrome-before-you-browse-again
- https://cybersecuritynews.com/hackers-use-fake-claude/
- https://gbhackers.com/critical-wordpress-translatepress-flaw/
- https://gbhackers.com/28000-exposed-git-repositories/