
OpenAI and Poland’s NASK agree to collaborate on AI safety
In July, CERT Polska used OpenAI models through Daybreak and found six MikroTik RouterOS flaws later fixed.
32 stories, newest first · one card per story

In July, CERT Polska used OpenAI models through Daybreak and found six MikroTik RouterOS flaws later fixed.

Canadian Cyber Centre says MikroTik RouterOS before 7.24.5 is vulnerable and should be updated.

Canada's Cyber Centre urges updates for MikroTik RouterOS before 7.24 over CVE-2026-84411.

Unauthenticated MikroTik RouterOS flaw CVE-2026-84411 could let remote attackers execute code as root.

CISA warns MikroTik RouterOS below 7.24 has critical pre-auth RCE CVE-2026-84411, with no known exploitation.

CISA warns unauthenticated attackers can exploit critical MikroTik RouterOS flaw CVE-2026-84411 for remote code execution.
Unauthenticated integer underflow in MikroTik RouterOS before 7.24 can give remote root code execution.

CISA listed actively exploited SharePoint RCE and MikroTik RouterOS flaws in the KEV catalog.

CISA added exploited Microsoft SharePoint and MikroTik RouterOS flaws to KEV, due September 28.

CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.
CISA added actively exploited SharePoint and MikroTik RouterOS flaws to the Known Exploited Vulnerabilities catalog.

MikroTrick chains two MikroTik RouterOS flaws for unauthenticated admin access, with exploitation seen before patches.

Canada's Cyber Centre warns MikroTik RouterOS before 7.25beta5 is vulnerable and urges updates.

Attackers chained two MikroTik RouterOS SSH flaws to seize internet-exposed routers without authentication; CISA lists one in KEV.

Bishop Fox's MikroTrick chains CVE-2026-67279 and CVE-2026-86060 to gain unauthenticated admin control of internet-exposed MikroTik RouterOS devices, with compromise evidence.

Attackers chained SSH authentication bypass CVE-2026-67276 and privilege flaw CVE-2026-86060 to fully hijack internet-exposed MikroTik routers before patches existed.

Check Point weekly digest: Microsoft's record 974-vuln Patch Tuesday ships two actively exploited Windows zero-days; IDScan.net, Mathspace, Revolut suffer breaches.

Weekly roundup: Cisco FMC and N-able N-central zero-days exploited in the wild, MikroTik RouterOS hijacks, Microsoft Patch Tuesday ships two exploited zero-days.

CISA added five actively exploited JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS flaws to its KEV catalog.

CISA added two actively exploited MikroTik RouterOS flaws, CVE-2026-67277 and CVE-2026-86060, to its KEV catalog with a September 13 mitigation deadline.

Canada's Cyber Centre warns of three exploited MikroTik RouterOS vulnerabilities affecting SSH-exposed devices; CISA added two to its KEV catalog.
CISA added two actively exploited MikroTik RouterOS vulnerabilities, CVE-2026-67277 and CVE-2026-86060, to its KEV catalog, mandating federal remediation.

MikroTik patches six RouterOS flaws, including the actively exploited MikroTrick SSH chain (CVE-2026-67276, CVE-2026-86060) enabling unauthenticated full router takeover.

Canada's Cyber Centre urges MikroTik RouterOS updates as CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060 are reported exploited in the wild.
Today 1.6K readers · 2.5K views · 777 reads · all time 189K views