<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>TP-Link / D-Link / routers security news · Threat Recap</title><link>vendors/tp-link-d-link-routers.html</link><description>Security news, advisories and CVEs for TP-Link / D-Link / routers</description><lastBuildDate>Mon, 19 Oct 2026 12:28:44 GMT</lastBuildDate>
<item><title>Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks</title><link>https://cybersecuritynews.com/hackers-exploit-d-link/</link><guid isPermaLink="false">1pd84ry</guid><pubDate>Fri, 16 Oct 2026 09:02:30 GMT</pubDate><description>Cybersecurity News. A cybercrime campaign has compromised at least 143 devices in 34 countries by exploiting flaws in D-Link, Ubiquiti and SAP products. The attackers installed Pawns.app proxy software on victim devices, turning their internet connections into residential proxy…</description><category>Vulnerability</category></item>
<item><title>Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection</title><link>https://cybersecuritynews.com/midnight-blizzard-linked-hackers/</link><guid isPermaLink="false">45bx6a</guid><pubDate>Fri, 16 Oct 2026 07:23:31 GMT</pubDate><description>Cybersecurity News. Hackers linked to Midnight Blizzard used Anthropic’s Claude AI to rebuild malware after security tools detected it, helping them keep espionage operations running against Ukrainian and European targets. New research shows that changing a file’s code and hash…</description><category>APT</category><category>Malware</category><category>AI</category></item>
<item><title>Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth</title><link>https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/</link><guid isPermaLink="false">lb52vc</guid><pubDate>Thu, 15 Oct 2026 18:20:59 GMT</pubDate><description>BleepingComputer. A proxyjacking campaign has impacted devices in 34 countries, monetizing victims&#39; internet connections through a commercial residential proxy network. [...]</description></item>
<item><title>TP-Link Sued by Four More U.S. States Over Router Security and China Ties</title><link>https://thehackernews.com/2026/10/tp-link-sued-by-four-more-us-states.html</link><guid isPermaLink="false">1rwd6z</guid><pubDate>Fri, 09 Oct 2026 13:22:53 GMT</pubDate><description>The Hacker News. Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how…</description></item>
<item><title>TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws</title><link>https://www.securityweek.com/tp-link-faces-state-lawsuits-and-new-scrutiny-over-isp-router-flaws/</link><guid isPermaLink="false">opu9sb</guid><pubDate>Thu, 08 Oct 2026 10:24:04 GMT</pubDate><description>SecurityWeek. SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.</description><category>Vulnerability</category><category>Law &amp; policy</category></item>
<item><title>US states sue popular kitmaker TP-Link over China risks</title><link>https://www.theregister.com/security/2026/10/07/us-states-sue-popular-kitmaker-tp-link-over-china-risks/5301653</link><guid isPermaLink="false">1aau37t</guid><pubDate>Wed, 07 Oct 2026 17:30:00 GMT</pubDate><description>The Register. Router maker rejects allegations it misled buyers about protection and its reliance on Chinese suppliers</description></item>
<item><title>CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS</title><link>https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/</link><guid isPermaLink="false">2w1dpp</guid><pubDate>Wed, 30 Sep 2026 15:49:29 GMT</pubDate><description>BleepingComputer. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. [...]</description><category>Vulnerability</category></item>
<item><title>MikroTik RouterOS</title><link>https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06</link><guid isPermaLink="false">hg61m</guid><pubDate>Tue, 29 Sep 2026 12:00:00 GMT</pubDate><description>CISA ICS Advisories. View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service. The following versions of MikroTik RouterOS are affected: RouterOS &lt;7.24 (CVE-2026-84411) CVSS Vendor…</description><category>Advisory</category><category>Vulnerability</category></item>
</channel></rss>
