A Windows flaw already being used, and a warning for firewall owners

Week of 10 to 16 August 2026

Patch week: August's Windows updates fix a flaw criminals are already using, and some office firewalls quietly need the same treatment.

1. 1

   Install August's Windows updates: one flaw is already being exploited11 Aug

   Everyone: any business running Windows computers or servers.

   This month's Microsoft updates fix a flaw in a core Windows networking component (CVE-2026-68820) that attackers are actively using to take control of computers. It affects everyday Windows PCs and servers alike. The fix shipped in the regular August update. The only businesses at risk are the ones that postpone it.

   Do this

   Approve and install the August Windows updates on every machine this week; if a provider manages your updates, ask them to confirm they're applied.

   Essential Eight: Patch operating systemsISM: System patching

   Sources: CISA KEV: Windows WinSock flaw ↗CVE-2026-68820 · CWE-416

2. 2

   Own a Cisco firewall? It needs this month's fix11 Aug

   Businesses with a Cisco ASA or Firepower firewall at their internet connection. If you're not sure what your firewall is, that's worth finding out anyway.

   A flaw in Cisco Secure Firewall ASA and Firewall Threat Defense devices (CVE-2026-20349) is being actively exploited. These appliances sit at the edge of many small business networks, often installed years ago and rarely updated. A firewall that protects you only if someone maintains it is a common blind spot.

   Do this

   Ask whoever manages your network: "Is our firewall a Cisco ASA or Firewall Threat Defense, and has this month's security fix been applied?"

   Essential Eight: Patch operating systemsISM: Network security

   Sources: CISA KEV: Cisco ASA/FTD flaw ↗CVE-2026-20349 · CWE-244

Latest ISM release: ISM September 2026: What Changed and What to Check →What the ISM is and how we assess it →