Search: “RSA Research”

67 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 243 Malware 162 Vulnerability 155 Exploit / PoC 67 Threat actor 50 Data breach 50 Policy & legal 48 Industry 35 Research 20 Phishing & fraud 19 AI tools & infra 5 Advisory 5 AI industry 4 Tools 3

SeverityAll critical 326 high 307 medium 131 low 91 info 15

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-341971

Customized IOCs, intelligence and SOC automation for orgs of every size

Help Net SecurityApr 20, 00:00 UTC · Apr 20, 2018Exploit / PoC

Ruppersberger calls for DHS to improve threat-sharing, warns of nation

CyberScoopApr 30, 19:45 UTC · Apr 30, 2018Exploit / PoC in the wild

Eyeing IPO, SentinelOne raises $120 million in Series D funding

CyberScoopJun 5, 11:19 UTC · Jun 5, 2019Exploit / PoC in the wild

Trellix Threat Intelligence enhancements accelerate threat analysis and response

Help Net SecurityApr 24, 00:00 UTC · Apr 24, 2023Exploit / PoC in the wild

Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication

CERT Polska confirms attackers exploit chained MikroTik RouterOS SSH flaws to hijack devices without authentication; patches released in four RouterOS versions.

CERT Polska discovered six RouterOS vulnerabilities and confirmed active attacks chaining CVE-2026-67276 (CVSS 9.2, SSH authentication bypass caused by comparing only RSA key moduli) and CVE-2026-86060 (CVSS 9.2, privilege escalation via crafted usernames), dubbed MikroTrick. A third flaw, CVE-2026-67277 (CVSS 8.8) in the bandwidth-test service, can expose kernel memory or crash devices. Shadowserver counted about 122,500 MikroTik devices with SSH exposed; attackers created a privileged 'ops' account from IP 82.192.72.4, active since September 2. Fixes shipped in RouterOS 7.25beta3, 7.24.2, 7.23.4, and 6.49.21, adding startup configuration scanning with a 'Flagged' marker for unauthorized changes.

Help Net SecuritySep 7, 00:00 UTC · 9d agoExploit / PoC in the wildCVE-2026-67276 CVE-2026-86060 CVE-2026-67277

ExtraHop simplifies approach to intrusion detection for security teams with new solutions

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2023Exploit / PoC

MikroTik patches flaws currently being exploited to take over routers

MikroTik patches six RouterOS flaws, including the actively exploited MikroTrick SSH chain (CVE-2026-67276, CVE-2026-86060) enabling unauthenticated full router takeover.

MikroTik released patches in RouterOS 7.25 beta 3, 7.24.2, 7.23.4, and 6.49.21 for six vulnerabilities found by CERT Polska, affecting the SSH server/client, bandwidth-test service, X.509 handling, and WebFig. CVE-2026-67276, an RSA public-key validation flaw in the SSH server, lets an attacker who knows a username and key modulus authenticate as that user; CVE-2026-86060 then escalates privileges to root via special-character username handling. CERT Polska confirmed attackers are exploiting the chain to take full control of RouterOS devices with SSH exposed to the internet. Shadowserver Foundation scans show over 122,500 devices with internet-reachable SSH, concentrated in Brazil, the US, and Indonesia.