4+ day, 16+ hour ago   (649+ words) Networking gear manufacturer MikroTik has released patches for six vulnerabilities in its RouterOS firmware, two of which can be chained together to take over devices without authentication over SSH. The exploit chain, dubbed MikroTrick, is already being used by attackers…...

5+ day, 13+ hour ago   (75+ words) SC Media MikroTik routers targeted by active SSH zero-day exploitation An In-Depth Guide to Network Security Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR HPE patches ArubaOS-CX switches vulnerable to remote code execution Phishing campaign targets widely used…...

1+ week, 4+ hour ago   (601+ words) The activity focused on targets in Romania, Spain, and Turkey, where seemingly ordinary Microsoft Word attachments became the opening move in a staged intrusion. The campaign relies on spearphishing emails carrying macro-enabled documents. Victims are urged to enable content, which…...

1+ week, 6+ hour ago   (425+ words) The attacks primarily target devices with SSH management access exposed to public networks, prompting urgent patching guidance from MikroTik, CERT Polska, and Latvia’s CERT.LV. MikroTik released security updates on September 3, confirming that fixed RouterOS builds are available through supported…...

1+ week, 20+ hour ago   (452+ words) CERT Polska disclosed six MikroTik RouterOS vulnerabilities on September 5, 2026, including a critical SSH authentication bypass attackers were already exploiting three days earlier. The chain, dubbed MikroTrick, lets attackers seize full control of internet-exposed routers with no valid credentials, and Shodan…...

1+ week, 1+ day ago   (517+ words) Rescana Active Exploitation Alert: North Korean APTs Deploy Ted Backdoor in Compromised HAProxy Builds to Hijack Web Traffic Technical Analysis of Malware/TTPs The Ted backdoor is not a vulnerability in the official HAProxy codebase, but rather a malicious plugin…...

1+ week, 1+ day ago   (629+ words) Attackers are actively exploiting an unauthenticated remote access flaw in MikroTik RouterOS, and network administrators worldwide are being urged to patch their devices immediately before compromise turns into a full network takeover. MikroTik confirmed on September 3, 2026, that it had discovered…...

1+ week, 22+ hour ago   (390+ words) Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September 5. Successful attacks date to at least…...

1+ week, 2+ day ago   (461+ words) The activity, documented by PolySwarm, targeted entities in Romania, Spain, and Turkey between late September 2025 and early April 2026. New variants identified during June and July 2026 show that the group continues refining its phishing lures, malware execution chain, and command-and-control (C2) methods....