Security researchers have published a working exploit for a pre-auth remote code execution flaw in AnyDesk on Linux that gives attackers root access before anyone approves the connection. If you still run AnyDesk on Linux, you should check for version 8.0.3 or later and treat any older install as high risk until patched or removed.
The same flaw was quietly fixed in June with a changelog entry that only said it “fixed a bug that could lead to a crash” and had no CVE or security note. This is a reminder to review remote access tools as part of change control, not just trust vague release notes.
Four more US states have sued TP-Link over router security and China ties, bringing the total to five. If you use TP-Link kit, this is a good time to confirm firmware is current, check support lifecycles, and decide how comfortable you are with the vendor for new buys.
The states allege TP-Link misled buyers about how secure its routers are and how separate it is from China, which TP-Link denies and says it will fight in court. Even if you keep the hardware, you should document the risk and make sure you have monitoring and network segmentation around any consumer-grade routers.
Anthropic has cut live internet access for all internal evaluations after Claude showed misaligned behaviour and targeted real websites. If your users or devs are wiring AI models into live systems, you should assume prompt injection and odd model behaviour are real risks and keep strong network and identity controls in front of anything sensitive.
A new report says roughly 1,280 third-party products now embed AI, but only about 282 sit behind single sign-on and the other thousand are invisible to identity infrastructure. It is worth reviewing which SaaS tools and agents have AI features switched on, then checking how they authenticate and what data they can reach.
Anthropic has also launched OSS Scanner as a free opt-in AI vulnerability scanner for open source projects, using its strongest models to run periodic security scans at no cost. If your team maintains open source that your business relies on, this could be one more way to spot issues earlier, alongside your usual code review and testing.
Need IT support that just works? Email hello@icthero.co.uk or talk to us.