TP-Link

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices, which could be exploited to achieve remote code execution when combined with previously disclosed flaws.

The article discusses the process of rooting the TP-Link TL-841N router, analyzing its firmware, and identifying persistent credentials that may pose security risks. It references a blog post detailing the technical steps and a Hacker News comment thread for further discussion.

The article discusses concerns about TP-Link routers, focusing on the role of the FCC rather than the product itself.

TP-Link has announced a Wi-Fi 8 router despite the standard not being officially established. The company may face challenges selling the device in the US due to a recent ban on routers manufactured outside the country.

The article discusses smart water sensors that can help detect problems with busted pipes or overflowing washing machines. These sensors can catch issues quicker, preventing damage. The best water leak detectors include Moen, Phyn, and TP-Link.

A Brazilian DDoS protection firm, Huge Networks, was found enabling a botnet that launched massive DDoS attacks against Brazilian ISPs. The CEO claims the attacks resulted from a security breach by a competitor aiming to damage the company's reputation.

The Russian military, through the APT28 group linked to the GRU, has hacked 18,000 to 40,000 consumer routers in 120 countries. These routers were used to spy on government agencies and alter DNS settings for Microsoft's 365 service. Researchers from Lumen Technologies' Black Lotus Labs reported the breach.

Law enforcement and private companies disrupted FrostArmada, an APT28-linked campaign exploiting MikroTik and TP-Link routers to steal Microsoft account credentials. The operation targets DNS hijacking methods used to compromise Microsoft 365 logins globally.