October 2026 Windows Server updates can break Exchange: symptoms and fix
After installing the October 2026 Windows Server updates, on-premises Exchange servers may show OWA errors, growing mail queues and DAG problems. Microsoft has confirmed the issue and published a workaround that does not require removing the update. Here are the symptoms, the affected updates and a step-by-step fix.
Read more →
October 2026 Patch Tuesday summary: 3 zero-days, 9.8-rated server flaws
Microsoft's 13 October 2026 Patch Tuesday updates fixed roughly 1,400 flaws. An exploited Windows Shell zero-day, 9.8-rated RCEs in DHCP/MSMQ/QUIC, Outlook preview-pane flaws and a final Exchange update, summarized with an SMB action plan.
Read more →
Last month for Exchange 2016/2019: ESU program ends with October 2026
Exchange Server 2016 and 2019 reached end of support on 14 October 2025. The paid Extended Security Update (ESU) program now closes at the end of October 2026, and Microsoft has said there will be no further extension. For servers on ESU, this is the last month of updates. Here is what changes, the risks and your options.
Read more →
13 October 2026: Last patch for Windows Server 2012/R2, Windows 10 ESU year one ends
Patch Tuesday on 13 October 2026 will be the last Extended Security Updates (ESU) release for Windows Server 2012 and 2012 R2. On the same day, year one of the commercial ESU programme for Windows 10 ends, and Windows Server 2022 moves from mainstream to extended support. Here are the dates, the costs and an action plan for SMBs.
Read more →
KVKK principle decision: How far can employers monitor work email?
Decision No. 2026/2035 of Turkey's Personal Data Protection Board (KVKK), dated 16 September 2026, was published in the Official Gazette (Resmî Gazete) No. 33394 on 8 October 2026. The principle decision sets out when an employer may monitor the corporate email accounts it gives to staff and the other channels used for work. This article summarizes the main principles and adds a practical checklist for employers. Source: [Resmî Gazete, 8 October 2026, No. 33394](https://www.resmigazete.gov.tr/eskiler/2026/10/20261008-6.pdf) (in Turkish).
Read more →
KVKK data breaches: ISO 27001 lessons for SMBs
On 30 September 2026, KVKK published data-breach notices for nine companies. At least 1,033,853 people were affected in total. This article covers only the causes stated in public and how they map to ISO/IEC 27001:2022 Annex A controls. Source: [memurlar.net report](https://www.memurlar.net/haber/1179657/kvkk-9-sirketin-veri-ihlalini-yayimladi-1-milyon-kisi-etkileniyor.html).
Read more →
Yandex business mail has dropped to view-only mode
Organizations that keep their own domain on Yandex 360 see a "view only" warning when they open the mailbox. This is not an outage. Free business mail has ended, and an account without a topped-up balance cannot process new mail.
Read more →
ISO 27001 consulting: where should an SMB start?
An ISO 27001 certificate is not a software licence. ISO/IEC 27001:2022 is a standard that asks you to manage information security in a regular way.
Read more →
Why is a disaster recovery plan necessary?
Having a backup does not mean the business will pick up where it left off. Disaster recovery means writing down who brings which system back, and how soon.
Read more →