TP-Link fixes critical flaws in Tapo C200 cameras
TP-Link has issued a firmware update for its Tapo C200 security cameras after researchers found two high-severity vulnerabilities that could let attackers gain unauthorized access or crash devices. The authentication bypass bug could allow those on the same network to watch live streams and control the camera. A second vulnerability could cause the camera’s management interface to become unavailable. TP-Link patched both flaws in August and users are urged to update.
- Researchers found two zero-day bugs in Tapo C200 cameras
- Authentication bypass allowed unauthorized admin access
- Denial-of-service flaw could crash the camera's service
- TP-Link fixed both vulnerabilities in August firmware update
Sources covering this
More in Cybersecurity
Microsoft releases record number of security patches
Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.
Microsoft releases record September patch for Windows
Microsoft issued its largest-ever security update for Windows, addressing over 960 vulnerabilities in its September release. More than 100 of these flaws are rated critical, and at least two are actively exploited. Several issues from previous updates, including failures in Microsoft Teams and Outlook on ARM devices, have been resolved. The volume of fixes is part of an industry-wide trend linked to increased use of AI for identifying software vulnerabilities.
OpenAI pledges $1 billion for AI cyber defense program
OpenAI has pledged $1 billion in credits to help organizations defending critical U.S. infrastructure—including water utilities, electric grids, local governments, banks, and nonprofits—access its AI-powered cybersecurity tools, training, and support. The "Daybreak for Frontline Defenders" initiative aims to help these sectors strengthen their defenses as AI-driven cyberattacks become more advanced. OpenAI says it will expand the program to partner countries in the coming weeks.
Google fixes Pixel modem flaw amid targeted attacks
Google has fixed a high-severity vulnerability in its Pixel phone modem after evidence that the flaw was being used in targeted attacks. The company confirmed the privilege escalation bug, known as CVE-2026-58704, could be exploited without user action. Google said attacks appear limited and did not name the attackers. The September 2026 Pixel update addresses over 100 security issues, including this flaw.