TP-LINK PATCHES 15 OMADA VULNERABILITIES
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
TP-Link has released security patches for 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices. The flaws could be chained with previously disclosed exploits to enable remote code execution.
■ MORE FROM THE SECURITY DESK
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.
Two security researchers purchased commonly-used generic email domains and discovered hundreds of companies automatically sending sensitive corporate data to their listening services. The experiment reveals a widespread failure in email configuration practices across organizations.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.