mikrotik news
2 stories
Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”
MikroTik has issued an urgent advisory for its RouterOS, confirming active exploitation of a critical vulnerability chain, dubbed "MikroTrick," that allows unauthenticated attackers to gain full control of devices with SSH exposed to the internet. The company released patches on September 3, 2026, but evidence suggests exploitation began as early as September 2, making it a zero-day event.
MikroTik Routers Compromised Via Unauthenticated SSH Access
Reports indicate that MikroTik routers are currently being compromised through their internet-exposed SSH services. The attacks leverage an unauthenticated access vector, allowing threat actors to bypass typical security measures and gain full administrative control over affected devices. This exploitation has reportedly been active since at least September 2.