entrustIT Insights

AI is finding security flaws faster: do you know what you run?

AI tools helped find the critical PHP vulnerabilities, and the NCSC says AI is making it easier to find and exploit software flaws at scale. For UK businesses, that points to one thing: less time to react to security updates. The best preparation is a clear picture of what you run and who looks after it, before the next alert lands.

Critical PHP vulnerability (PHP2Shell): what UK businesses need to do now

Last updated 26th October 2026 Two linked PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, could let an attacker run commands on a web server without logging in. The security industry is calling them PHP2Shell. Both are rated critical, and attacks have already been reported. PHP released fixed versions on 21 October 2026: 8.5.12, 8.4.27, 8.3.36 and 8.2.35. If your PHP is older than these, it's vulnerable. PHP 8.1 and earlier won't get an official fix. Our advice is simple. Find out where PHP runs in your business, starting with anything that faces the internet, and update it to a fixed version as soon as you can.

What is business email compromise, and why is it so expensive?

Business email compromise (BEC) is when an attacker takes over or imitates a real email account to redirect a payment or steal data. It is expensive because your own people approve the payment, against a real invoice, at a believable moment. The fix is to lock down mailbox access and to have a written process for changing supplier bank details.

What is social engineering, and what stops it working on your staff?

Social engineering is when an attacker persuades a member of staff to hand over access or money by exploiting trust, fear or urgency, instead of breaking into a system. Phishing, spear phishing and AI voice cloning are all forms of it.

entrustIT shortlisted for two Surrey Business Awards 2026

We're pleased to share that entrustIT has been shortlisted in two categories at the Surrey Business Awards 2026: Large Business of the Year and Best Customer Service.

entrustIT x DWM Company Day 2026

On Friday 2 October we held our 2026 Company Day, entrustIT x DWM, at Thorpe Park. We spent the morning and early afternoon on strategy, followed by an afternoon and evening in the park for anyone who wanted to join us. It was an excellent opportunity to bring our team together from our four regional offices across the UK, in Ringwood, Bedford, Aldershot and East Grinstead.

Will co-managed IT replace my internal team?

No. Co-managed IT is designed to work alongside your internal team, not to replace them. You keep your people, your systems knowledge and control over the parts you own. The provider adds capacity and cover around them. If anything, a well-run arrangement tends to make your team's role clearer and frees them from the work that was burning them out.

What is co-managed IT?

Co-managed IT is where an external IT provider works alongside your existing internal IT team or IT person, rather than replacing them. You keep your own people and your own knowledge of the business, and the provider adds capacity, cover and specialist skills where you need them. It is not full outsourcing, and it is not temporary hired help.

How does strategic IT move your business forward?

Strategic IT moves a business forward by planning where your technology should go next, not just keeping it running today. It is sometimes called strategic IT support, and it works through regular reviews and a clear roadmap, so your technology stays lined up with where the business is heading. Ordinary managed IT keeps your systems stable. Strategic IT uses that stable base to help you reach your objectives.

What is predictive IT, and how does AI make it work?

Predictive IT uses AI to spot the warning signs of a failure before it happens, so problems get fixed before they ever reach your team. Where proactive IT prevents the issues you already know about, predictive IT forecasts the ones you cannot yet see. It is the difference between a provider that keeps things running and one that keeps your business running without you noticing the work at all. (You will also see it called predictive IT support, AIOps, or predictive IT operations.)

AI is finding security flaws faster: do you know what you run?

AI tools helped find the critical PHP vulnerabilities, and the NCSC says AI is making it easier to..

Critical PHP vulnerability (PHP2Shell): what UK businesses need to do now

Last updated 26th October 2026 Two linked PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619,..

What is business email compromise, and why is it so expensive?

Business email compromise (BEC) is when an attacker takes over or imitates a real email account to..

What is social engineering, and what stops it working on your staff?

Social engineering is when an attacker persuades a member of staff to hand over access or money by..

entrustIT shortlisted for two Surrey Business Awards 2026

We're pleased to share that entrustIT has been shortlisted in two categories at the Surrey Business..

entrustIT x DWM Company Day 2026

On Friday 2 October we held our 2026 Company Day, entrustIT x DWM, at Thorpe Park. We spent the..

Will co-managed IT replace my internal team?

No. Co-managed IT is designed to work alongside your internal team, not to replace them. You keep..

What is co-managed IT?

Co-managed IT is where an external IT provider works alongside your existing internal IT team or IT..

How does strategic IT move your business forward?

Strategic IT moves a business forward by planning where your technology should go next, not just..

What is predictive IT, and how does AI make it work?

Predictive IT uses AI to spot the warning signs of a failure before it happens, so problems get..

AI is finding security flaws faster: do you know what you run?

Critical PHP vulnerability (PHP2Shell): what UK businesses need to do now

What is business email compromise, and why is it so expensive?

What is social engineering, and what stops it working on your staff?

entrustIT shortlisted for two Surrey Business Awards 2026

entrustIT x DWM Company Day 2026

Will co-managed IT replace my internal team?

What is co-managed IT?

How does strategic IT move your business forward?

What is predictive IT, and how does AI make it work?

Recent Posts

Posts by tag

AI is finding security flaws faster: do you know what you run?

Critical PHP vulnerability (PHP2Shell): what UK businesses need to do now

What is business email compromise, and why is it so expensive?

What is social engineering, and what stops it working on your staff?

entrustIT shortlisted for two Surrey Business Awards 2026

entrustIT x DWM Company Day 2026

Will co-managed IT replace my internal team?

What is co-managed IT?

How does strategic IT move your business forward?

What is predictive IT, and how does AI make it work?

Subscribe here!

Recent Posts

Posts by tag