The snooze button is what attackers count on

Most of us have clicked Remind me tomorrow on an update. The computer still works, the prompt is annoying, and tomorrow feels soon enough. That habit is the one attackers count on, because they can read the same patch notes we do, and an unpatched computer gives them more time.

As at 11 November 2026, if you’re a managed IT client, we’ll be rolling out this week’s updates on the business computers we manage for you. If a restart prompt appears, please restart when you can. Phones, tablets and home devices still need the steps below.

What’s out this week

As at 11 November 2026, Google says an exploit for a Chrome flaw is being used in the wild, and a fix is out this week. Microsoft says it has fixed an Outlook flaw that is already being used. Opening a crafted message file in affected versions of Outlook can leak a Windows sign in hash an attacker may be able to use to pose as you. Microsoft says the Preview Pane is not a way in for this one. You would have to open the file.

Apple also released updates for iPhone, iPad, Mac and Apple Watch this week, including fixes for iMessage group chats and Bluetooth pairing. Those Apple flaws are not reported as being used in attacks, as at 11 November 2026.

What to update this week

Work through this short list, then restart when you are asked.

1. Your web browser. In Chrome, go to Menu, then Help, then About Google Chrome, and relaunch. If you use Edge, check for its matching update too. It may not be out yet.




2. Your computer operating system. Run Windows Update. On a Mac, use System Settings, then General, then Software Update.




3. Your office apps. In an Office app, go to File, then Account, then Update Options, then Update Now. Windows Update alone does not update Office.




4. Your phones and tablets. On iPhone and iPad, go to Settings, then General, then Software Update. On Apple Watch, open the Watch app on your iPhone, then General, then Software Update. watchOS 27.2.1 got the same fixes.

Don’t open unexpected attachments, especially an Outlook message file you were not expecting.

The step people skip

Installing is only half the job. The step people skip is the restart, so the update actually finishes. An update can already be waiting on your computer, and you can still be running the old version until you restart the program or the device.

When a prompt asks you to restart, do it when you can, rather than clicking Remind me tomorrow.

To check it’s done:

1. Open the program’s About or Settings page, or the device’s software update screen.




2. Confirm it shows you are on the latest version, and that no restart is still waiting.




3. If it offers Relaunch, Restart or Update now, take that step, then look at the same screen again.

Finishing this week’s updates lowers the risk. It does not mean a computer or phone cannot be caught out later.

If you are unsure

This is a practical checklist you can do yourself. If you’d rather Tech TroubleShooters looked after updates for your business computers, send us a message.

If you want updates on your business computers looked after for you, have a look at our managed IT services.

Unsure if you’re up to date? Call 0448 017 919 or email contact@techtroubleshooters.com.au. You’ll talk to Carisa or Kelly, not a call centre. Your call.

Sources

1. CISA: https://www.cisa.gov/news-events/alerts/2026/11/10/cisa-adds-six-known-exploited-vulnerabilities-catalog




2. Microsoft (CVE-2026-124194): https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194




3. The Hacker News (Chrome): https://thehackernews.com/2026/11/google-issues-chrome-security-update.html




4. SANS (Apple): https://isc.sans.edu/diary/rss/33506




5. The Record: https://therecord.media/patch-tuesday-microsoft-1000-bugs-again