Cyber

What changed

During the Black Hat USA 2026 conference, Forescout disclosed a series of 15 vulnerabilities affecting TP-Link products. These flaws have the potential to expose sensitive information such as Omada credentials and VPN keys, leading to unauthorized internal access.

Additionally, the vulnerabilities could impact VIGI camera feeds, raising concerns about the security and privacy of surveillance data.

Who is affected

Organizations utilizing TP-Link's Omada controllers and VIGI cameras are at significant risk due to these vulnerabilities. The flaws could lead to unauthorized access and data breaches.

Users of TP-Link's networking equipment and services should be particularly vigilant, as the vulnerabilities may allow attackers to gain internal network access.

• TP-Link Omada Controllers
• TP-Link VIGI Cameras
• Organizations relying on TP-Link networking solutions
• Businesses with remote access configurations using TP-Link products

What to do

Security teams should prioritize assessing their TP-Link deployments for the disclosed vulnerabilities. Immediate action is recommended to mitigate potential risks.

Updating firmware and applying security patches as they become available will be crucial in protecting against exploitation.

• Review and update TP-Link device firmware promptly.
• Implement network segmentation to limit access to vulnerable devices.
• Monitor network traffic for unusual activity that may indicate exploitation attempts.
• Educate staff on security best practices related to device management and access controls.

What changed

During the Black Hat USA 2026 conference, security researcher Novee disclosed critical vulnerabilities in GitHub workflows that could severely impact AI development environments. These flaws allow for remote code execution (RCE), credential theft, and unauthorized control over agents within coding pipelines.

• Discovery of vulnerabilities affecting major AI coding tools.
• Potential for attackers to exploit these flaws for malicious purposes.
• Increased scrutiny on GitHub workflows in enterprise settings.

Who is affected

The vulnerabilities identified pose a risk to various stakeholders in the AI development community, particularly those utilizing specific tools and workflows.

Organizations relying on AI coding tools should be particularly vigilant.

• Users of Claude Code, a prominent AI coding assistant.
• Developers employing Gemini CLI for command-line interactions.
• Teams utilizing Codex for code generation and assistance.
• Enterprises that integrate these tools into their development pipelines.

What to do

Organizations should immediately review their GitHub workflows and assess the potential impact of these vulnerabilities. Implementing security best practices is crucial to mitigate risks.

Regular updates and patches should be applied to all affected tools and workflows.

• Conduct a security audit of GitHub workflows in use.
• Ensure that all AI coding tools are updated to the latest versions.
• Educate development teams on secure coding practices and the importance of monitoring for vulnerabilities.