LUCAMEA vulnerability has been found in the Chromium engine that underpins both Google Chrome and Microsoft Edge. It involves memory corruption in the way the browser handles HTML, which in the wrong hands could allow an attacker to run malicious code on an affected machine. The fix originated with Google and Microsoft has pulled it into Edge as part of its normal Chromium update process. Both browsers should receive the patch automatically, but only if they're actually being kept up to date.
What this means for your business
If your staff use Chrome or Edge for day-to-day work, and most do, you'll want to make sure those browsers are on the latest version. It's worth checking this week rather than waiting for the next scheduled maintenance window. In a managed environment we can push that update centrally, but if anyone's running an unmanaged laptop or a personal device for work, they should open the browser, go to the About page, and let it update itself.