09/06/2026
SECURITY ALERT
Several important technology and cybersecurity issues were reported last week. Here’s what local businesses and home users need to know:
TP-Link Security Vulnerabilities
Security flaws were discovered in certain TP-Link Archer routers, Tapo cameras, and Deco mesh systems. Someone connected to the same network may be able to gain unauthorized control of affected devices.
Affected models include certain versions of:
• TP-Link Archer BE800, BE3600 and AX75 routers
• Tapo C120 and C200 security cameras
• Deco XE75, XE5300 and WE10800 mesh systems
Be on the lookout for unexpected reboots, changed settings, unknown connected devices, camera-access problems, or unusual network activity. The exact model and hardware version matter, so don’t assume every TP-Link device is affected.
Microsoft 365 Integration Changes
Microsoft is beginning the process of disabling older EWS connections used by some backup systems, email archiving products, scheduling tools, CRMs and other business applications.
Be on the lookout for email-connected programs that stop synchronizing, calendar problems, failed Microsoft 365 backups, or older business applications that can no longer access mailboxes.
Gitea Server Vulnerability
Businesses running a self-hosted Gitea source-code server should update it immediately. The vulnerability is being actively exploited and could allow attackers to steal source code, passwords, application secrets and other sensitive information.
On-Premises Exchange Calendar Issue
A recent Microsoft security update may prevent publicly shared calendars from updating correctly on businesses running their own Exchange Server. The security update should not be removed, but affected calendars may require Microsoft’s workaround.
WHAT YOU SHOULD DO:
- Keep routers, cameras, computers and servers updated.
- Report unexpected device reboots or configuration changes.
- Verify that Microsoft 365 backups and integrations still work.
- Never approve an unexpected MFA request.
- Do not give passwords or verification codes to unsolicited callers.
- Contact us if anything suddenly stops syncing or behaves unusually.
If you are unsure whether your equipment or business systems are affected, contact Ness City Computer Service / Central Kansas Managed Services. We can review your devices, check firmware versions and help determine whether action is necessary.
620-960-8711
www.ckmsp.com
Please share this alert with other local businesses. Staying informed is considerably cheaper than recovering from an attack.
