Worrying TP-Link router flaws could let botnets attack your Microsoft 365 accounts - so update now

Abstract image of robots working in an office environment including creating blueprint of robot arm, making a phone call, and typing on a keyboard.

• TP-Link patches two vulnerabilities in older SOHO routers
• Chinese threat actor Quad7 used the botnet for broad password-spraying attacks
• The flaws were severe enough to warrant firmware updates, despite the routers being end-of-life

TP-Link has patched two vulnerabilities affecting some of its small office/home office (SOHO) routers, which were apparently used by Chinese actors to create a malicious botnet used to target Microsoft 365 accounts.