Critical Security Update: December 19, 2024 (TP-Link Routers, SonicWall Firewalls, Microsoft Azure / HubSpot)
Critical Security Update
TP-Link Routers, SonicWall Firewalls, Microsoft Azure / HubSpot
Risk 1: High
Issue: The United States government is heavily considering banning all TP-Link-branded routers in the United States. There has been an increasing level of cybersecurity-related risks that expand beyond even the local network where they are installed.
Resolution: Owners of TP-Link routers should replace their routers immediately. These are typically lower-end routers; users should consider replacing with an enterprise-level router with appropriate security protocols available.
Risk 2: High
Issue: A large number of SonicWall VPN Firewalls have a recently exposed vulnerability that allows remote access and control of local devices as well as initializes a critical failure and halts the device. The exposure, while broad, is limited to devices outside of support.
Resolution: Any user with a SonicWall should update to the latest firmware. If you have not subscribed to their firmware updates, now would be the ideal time to pay for the updated subscription. If the subscription is no longer available, users may need to update their SonicWall device entirely.
Risk 3: High
Issue: An escalating phishing attack originating at HubSpot is targeting Microsoft Azure accounts in an attempt to steal their account credentials.
Resolution: Users should be ever diligent in watching for unknown or unexpected e-mails, especially from HubSpot. Per FTC requirements, users of Microsoft Azure should ensure that multi-factor authentication is active on all accounts.
Announced Data Breaches
Texas Tech University
ConnectOnCall / Phreesia
Rhode Island
Cleo
Financial Guardians has partnered with NATP to provide access to our monthly Guardian Tier membership at a 30% discount.
Active NATP members can access the online discount here.
Financial Guardians has partnered with NAEAto provide access to our monthly Guardian Tier membership at a 30% discount.
Active NAEA members can access the online discount here.
Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.
Join today at www.incite.tax.







