This Week In Security: It’s Patch Tuesday Again, TVs Spying, Supply Chain Worms Return, Prolonged Hack Impacts, Stolen IDs

Live updates

1. 41d ago

   Smart TV Tracking and TP-Link Camera Flaws Join Microsoft Patch Cycle

   Security risks have expanded beyond Microsoft's 974 patched vulnerabilities to include hardware spying and camera flaws. Every smart TV manufacturer tracks viewer habits by default unless users opt out. Simultaneously, security researchers identified a serious flaw in a TP-Link internet camera marketed for monitoring pets and children. These developments follow a massive Windows security update designed to harden the OS against nearly 1,000 identified holes. The combined threats highlight a broad attack surface across both enterprise software and home consumer electronics.

   Why it matters

   The current security environment shows a shift toward targeting the Internet of Things and consumer data. While software patches address known holes, hardware-level tracking is often a built-in feature rather than a vulnerability. This creates a dual threat of active exploits and passive surveillance.

   Still unconfirmed

   • Every smart TV company tracks what users watch unless they opt out.
   • A TP-Link internet camera marketed for monitoring kids and pets contains a serious flaw.
   • OPSWAT discovered two other TP-Link flaws that were patched last month.

   What to watch next

   • Confirmation of the specific TP-Link camera model affected.
   • Details on which TV companies have the most invasive tracking policies.
   • Reports on whether users successfully opted out of TV tracking.
   Sources used for this update (2)

   1. www.pcmag.com — A TP-Link Internet Camera Contains a Serious Flaw, Security Researchers Say
   2. www.theverge.com — It’s not just LG. Every TV company is spying on you
   confidence 80%
2. 47d ago

   Microsoft patches record 974 security flaws in largest update

   Microsoft released its biggest security update to date, fixing 974 security flaws. The company addressed nearly 1,000 security holes in this month's Patch Tuesday cycle. This massive release aims to secure various components of the Windows ecosystem against potential exploits. While the sheer volume of patches indicates a significant effort to harden the OS, it also highlights the extensive surface area for potential attacks across Microsoft software. Users must apply these updates to mitigate the risks associated with these identified vulnerabilities.

   Why it matters

   Patch Tuesday is a recurring monthly event where Microsoft distributes security fixes to its users. The scale of this specific update is unprecedented compared to typical monthly releases. Large-scale patching cycles often follow the discovery of critical vulnerabilities or a systemic push to clear a backlog of bugs.

   What is confirmed

   • Microsoft patched 974 security flaws in its latest update.
   • The update addresses nearly 1,000 security holes.

   What to watch next

   • Reports of active exploits targeting the 974 patched vulnerabilities
   • Microsoft's detailed breakdown of the most critical CVEs in this release
   Sources used for this update (5)

   1. arstechnica.com — Why this month’s Microsoft patch release is a doozy
   2. Krebs on Security — Microsoft Plugs Nearly 1,000 Security Holes
   3. extremetech.com — Microsoft Patches a Record 974 Security Flaws in Biggest Update Ever
   4. PCWorld — 5 years later, I can finally use Windows 11 the way I want
   5. Hackaday — This Week In Security: It’s Patch Tuesday Again, TVs Spying, Supply Chain Worms Return, Prolonged Hack Impacts, Stolen IDs
   confidence 100%