LUCAMEA vulnerability has been found in the way Chromium-based browsers handle video, tracked as CVE-2026-118313. It's a use-after-free bug, which means the browser can be tricked into accessing memory it's already freed up, and that's the kind of thing attackers can exploit to run malicious code. Both Google Chrome and Microsoft Edge are affected, since Edge is built on Chromium. Google has already issued a fix through their Chrome Releases channel, and Microsoft will follow with an Edge update.
What this means for your business
If your staff are using Chrome or Edge day-to-day, and that covers most UK businesses, you'll want to make sure those browsers are updated as soon as possible. In a managed environment we'd push that update out centrally, but if you're handling it yourself just open the browser, go to the About section, and let it check for updates. It's a straightforward fix and there's no need to panic, but don't sit on it.