TP-Link, Canva, HikVision vulnerabilities

Cisco Talos published multiple posts disclosing and analyzing a range of security issues and research. Key disclosure items include patched vulnerabilities across TP‑Link (10 flaws), Canva (19 flaws), and HikVision, plus disclosures affecting DirectX, OpenFOAM, and the Libbiosig library (vendors have patched most issues where applicable). Talos also covered Microsoft Patch Tuesday (March 2026) which fixed 79 vulnerabilities including three Microsoft‑marked critical issues. In threat actor coverage, Talos disclosed UAT‑9244 — a China‑nexus APT targeting South American telecom providers with at‑