TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Multiple U.S. states have sued TP-Link alleging deceptive security claims and undisclosed China-related risks while researchers disclosed five high-severity vulnerabilities in ISP-supplied TP-Link (Aginet) devices that allow unauthenticated or low-privileged attackers to achieve root or persistent access; the report also cites Microsoft and FBI findings that state-backed actors and other threat groups have operated large botnets of compromised TP-Link routers and used router flaws (e.g., CVE-2023-50224) to alter DNS and harvest credentials.