TYO Store Blog
Guides, product insights and announcements from the TYO Store team.
8/17/2026
A newly disclosed path traversal flaw in Zyxel's ZLD firewall firmware lets an already-logged-in administrator plant and run a malicious configuration file. It needs admin credentials first — which is exactly why admin account hygiene matters as much as patching.
8/13/2026
Attackers are actively exploiting an unauthenticated flaw (CVE-2026-20349) that lets them crash Cisco ASA and FTD firewalls through the Remote Access SSL VPN. Here's what it really means and the calm, no-upsell steps to take.
8/7/2026
Zyxel has patched two flaws in its business access points: an admin-only command injection in the WAX650S line (CVE-2026-6837, CVSS 7.2) and a guest Wi-Fi captive-portal bypass (CVE-2026-8508, CVSS 6.5). For many small businesses, the lower-scored one is the more relevant risk.
8/7/2026
Cisco's August 2026 hardening release patches seven IOS XE vulnerabilities — one rated CVSS 9.8 — found by its own engineers using internal testing and frontier AI models. None are being exploited, but there's no workaround: here's how to check whether your gear is affected and what to do about it.
7/24/2026
NETGEAR's July 2026 advisory lists six flaws, including one described as letting someone 'remotely take control' of Nighthawk and Orbi routers. We read the fine print so you don't have to — what's real, what's overstated, and why 'automatic updates' quietly did most of the work already.
7/23/2026
A new command-injection flaw (CVE-2026-6952) affects dozens of Zyxel DSL, fibre and Wi-Fi extender models — but it needs an admin login first and isn't being exploited. Here's the honest read and what to actually do.
7/20/2026
CISA has added an actively exploited cross-site request forgery flaw in an older Cisco small-business router to its Known Exploited Vulnerabilities catalog. Here's what it means for your network, and the simple steps worth taking.
7/15/2026
A fresh cluster of root-level flaws in Cisco's old RV small-business routers — and an 18-year-old Cisco flaw now confirmed as actively exploited — are a timely reminder about end-of-life gear. This one's a heads-up, not a sales pitch.
7/8/2026
A newly disclosed backdoor in several Tenda routers hands full admin access to anyone who knows the trick — and the vendor hasn't responded or shipped a fix. Here's why this is really a story about what you're actually paying for when you buy business gear.
6/30/2026
A friendly, honest look at what the Meraki AI Assistant actually does for a small business, how it compares to Juniper Mist, Aruba, TP-Link and UniFi, and why it's a genuinely good fit for Australian SMBs.
6/29/2026
A fast-spreading malware family called AryStinger is hijacking old, unpatched routers and NAS devices. Here's why this is really a forgotten-gear story for Australian small businesses — and what to do about it.
6/25/2026
Most network gear starts ageing the day it's installed. A cloud-managed Cisco Meraki MX is different — the same box keeps gaining features, security and even speed across its supported life.