OpenAI and Poland’s NASK agree to collaborate on AI safety
In July, CERT Polska used OpenAI models through Daybreak and found six MikroTik RouterOS flaws later fixed.
46
Organization
CERT Polska
- Mentions · 7d0
- Mentions · 30d3
- All mentions23
- First seenAug 21, 2026
- Last mentioned8d ago
Timeline
23 articles · newest first3 Vulnerabilities in GNU Aspell before 0.60.8.3
GNU Aspell before 0.60.8.3 has three flaws, including CVE-2026-75818, per CERT Polska.
38
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure
Attackers exploited Zimbra CVE-2026-73570 for unauthenticated RCE after patching but before public disclosure.
78
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Attackers exploit patched Zimbra CVE-2026-73570 to plant web shells and steal mailbox and authentication secrets.
84
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
CISA warns MikroTik RouterOS below 7.24 has critical pre-auth RCE CVE-2026-84411, with no known exploitation.
74
Hackers exploit SQL injection flaw to steal patient data from Polish medical software provider
Attackers used SQL injection to steal Polish patient identities from Qbusoft's Medyc medical software.
76
Cyberattack on Polish medical software provider exposes patient data
Hackers exploited an SQL injection flaw in Polish medical platform Medyc, stealing patient data potentially covering 5 million patients, after the MyDr breach.
72
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
CISA listed actively exploited SharePoint RCE and MikroTik RouterOS flaws in the KEV catalog.
88
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
CISA added exploited Microsoft SharePoint and MikroTik RouterOS flaws to KEV, due September 28.
85
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two MikroTik RouterOS flaws for unauthenticated admin access, with exploitation seen before patches.
86
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Attackers chained two MikroTik RouterOS SSH flaws to seize internet-exposed routers without authentication; CISA lists one in KEV.
86
OpenAI extends cyber access to Ukraine for civilian defense
OpenAI will give Ukraine Daybreak access to find and fix vulnerabilities in civilian infrastructure.
62
Hackers Exploit MikroTik Vulnerabilities to Take Over MikroTik Routers Without Authentication
Attackers chained SSH authentication bypass CVE-2026-67276 and privilege flaw CVE-2026-86060 to fully hijack internet-exposed MikroTik routers before patches existed.
85
AL26-020 - Vulnerabilities Impacting MikroTik RouterOS - CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060
Canada's Cyber Centre warns of three exploited MikroTik RouterOS vulnerabilities affecting SSH-exposed devices; CISA added two to its KEV catalog.
72
MikroTik patches flaws currently being exploited to take over routers
MikroTik patches six RouterOS flaws, including the actively exploited MikroTrick SSH chain (CVE-2026-67276, CVE-2026-86060) enabling unauthenticated full router takeover.
82
MikroTik router flaws allow takeover without a password
Attackers actively exploit chained MikroTik RouterOS SSH flaws CVE-2026-67276 and CVE-2026-86060, bypassing authentication and escalating to admin to seize edge routers.
78
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Attackers actively exploit a MikroTik RouterOS SSH authentication bypass and privilege escalation chain, dubbed MikroTrick, to fully hijack internet-exposed routers.
82
Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication
CERT Polska confirms attackers exploit chained MikroTik RouterOS SSH flaws to hijack devices without authentication; patches released in four RouterOS versions.
82
Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”
MikroTik RouterOS SSH auth-bypass chain MikroTrick (CVE-2026-67276 plus CVE-2026-86060) is actively exploited; patch to 7.24.2/7.23.5/6.49.21.
88
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
CERT Polska warns attackers exploit internet-exposed MikroTik SSH for unauthenticated full admin control; attacks observed since at least September 2.
75
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CERT Polska and CISA report active exploitation of Zimbra RCE CVE-2026-73570, with 267 instances compromised per Shadowserver.
75
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Zimbra flaw CVE-2026-73570 (unauthenticated OS command injection RCE) to its KEV catalog, setting an August 24, 2026 federal patch deadline.
76
Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw
CERT Polska confirms active exploitation of critical unauthenticated RCE CVE-2026-73570 in Zimbra Collaboration Suite, patched July 20.
78
Related CVEs
by mentions- CVE-2026-860606%9.2Argument-Injection Flaw in MikroTik RouterOS SSH Login Enables Privilege Escalation
- CVE-2026-672769%9.2SSH RSA Authorized-Key Bypass in MikroTik RouterOS 7.x
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2026-672792%6.9Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS
- CVE-2026-672772%8.8Unauthenticated Kernel Crash and Memory Leak in MikroTik RouterOS btest
- CVE-2026-656608%8.8Authenticated Code Injection RCE in Microsoft SharePoint Server
- CVE-2025-6637620%6.1Stored Cross-Site Scripting in Synacor Zimbra Collaboration Suite Classic UI
- CVE-2026-84411<1%9.3Pre-auth integer underflow RCE in MikroTik RouterOS
- Heap buffer overflow in GNU Aspell prezip-bin
Appears with
- MikroTikvendor · 13
- RouterOSproduct · 13
- CISAorganization · 8
- OpenAIorganization · 5
- Zimbravendor · 5
- Zimbra Collaboration Suiteproduct · 4
- GPT-5.5-cyberai model · 4
- GPT-5.6-solai model · 3
- Shadowserver Foundationorganization · 3
- MyDrorganization · 2
- Daybreakproduct · 2
- Microsoftvendor · 2
- Bishop Foxorganization · 2
- Shadowserver Foundationvendor · 2
- CISAvendor · 2
- MikroTikorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.