DanSec

Vendor

TP-Link

In 20 briefs, most recently 9 October 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

6 TP-Link vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

Coverage in DanSec Daily

  1. ASOS customer data theft, the FakeGit GitHub malware campaign with 17,000+ repos, and Flax Typhoon disruption by the FBI, plus new exploited flaws.
  2. The ASOS breach, Google domain hijacking via .gh/.sl/.as registries, FortiBleed attacks on Fortinet FortiGate, and Atlassian CVE-2026-21589 exploitation.
  3. Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
  4. Unitel cyberattack before its IPO, a tl;dv Firebase flaw exposing private meetings, and ChainDrop malware compromising 1,300+ npm packages.
  5. Vercel breach tied to Context AI, Apple-notification phishing via legitimate Apple emails, and NIST dropping severity scores for low-priority CVEs.
  6. The Grinex $13.7M crypto hack, the Rockstar Games breach by ShinyHunters, and Apache ActiveMQ CVE-2026-34197 exploitation in the wild.
  7. Bitcoin Depot $3.6M crypto theft, Signature Healthcare hospital cyberattack, and TeamPCP supply chain breach exposing Cisco source code.
  8. APT28 router DNS hijacking stealing Microsoft 365 tokens, a SaaS integrator breach hitting a dozen-plus firms, and Flowise RCE flaw under active exploitation.
  9. Covers the European Commission's Amazon cloud breach, the hack of FBI Director Kash Patel's email, and TeamPCP's Telnyx PyPI supply chain attack.
  10. LeakBase admin arrest, HackerOne employee data breach via Navia, and Microsoft 365 device code phishing hitting 340+ organizations.
  11. French FICOBA bank registry access exposing 1.2M accounts, Figure breach by ShinyHunters, and Ivanti zero-day exploitation surge.
  12. Ingram Micro breach hits 42,000+ people, AMD StackWarp flaw breaks SEV-SNP protections, and TP-Link VIGI camera bug exposes 2,500+ devices.
  13. Gainsight breach expands to more Salesforce customers, Shai-Hulud v2 npm-to-Maven supply chain attack, and Qilin ransomware hits South Korean MSP. Plus London …
  14. Swiss warning on iPhone lost-device SMS phishing, three runC container escape flaws, and a reported US ban on TP-Link networking gear sales.
  15. Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
  16. The PassiveNeuron espionage campaign, the actively exploited Oracle E-Business Suite SSRF flaw (CVE-2025-61884), and a WatchGuard Firebox RCE flaw affecting …
  17. PowerSchool sued by Texas over 62M-student breach; Sitecore zero-day exploited with WeepSteel malware; APT28 deploys NotDoor Outlook backdoor.
  18. Jaguar Land Rover cyberattack disrupts operations, Workiva breach via Salesforce CRM, and Salesloft/Drift fallout hits Cloudflare, Palo Alto Networks and …
  19. Salesloft Drift OAuth breach hits Cloudflare, Palo Alto Networks and Zscaler; Jaguar Land Rover cyberattack halts production; WhatsApp zero-day exploited …
  20. The Zoomcar breach affecting 8M+ users, Veeam's critical CVE-2025-23121 backup RCE, and the Langflow flaw exploited to deploy the Flodrix botnet.