Unauthenticated access news

LIVE · cybersecurity feed

Latest Archive CVE Tracker Report SearchRansomware Vulnerability Breach Malware Nation-state Phishing Zero-day AI Cloud

Live wire

Attackers conceal phishing lures using invisible Unicode characters CVE-2026-67276 · Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”CVE-2026-81578 · PaperCut NG/MF Flaw Exploited Before CVE Publication CVE-2026-82078 · PaperCut NG/MF Flaw Exploited Before CVE Publication CVE-2026-83549 · SonicWall SMA1000 OS Command Injection Exploited Same Day as Disclosure CVE-2026-83548 · SonicWall SMA1000 SSRF Flaw Exploited Same Day as Disclosure CVE-2026-82329 · JFrog Artifactory Flaw Exploited Same Day as Disclosure MikroTik Routers Compromised Via Unauthenticated SSH Access OpenAI Announced $1B in Defensive Tools for Water Utilities Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials Attackers conceal phishing lures using invisible Unicode characters CVE-2026-67276 · Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”CVE-2026-81578 · PaperCut NG/MF Flaw Exploited Before CVE Publication CVE-2026-82078 · PaperCut NG/MF Flaw Exploited Before CVE Publication CVE-2026-83549 · SonicWall SMA1000 OS Command Injection Exploited Same Day as Disclosure CVE-2026-83548 · SonicWall SMA1000 SSRF Flaw Exploited Same Day as Disclosure CVE-2026-82329 · JFrog Artifactory Flaw Exploited Same Day as Disclosure MikroTik Routers Compromised Via Unauthenticated SSH Access OpenAI Announced $1B in Defensive Tools for Water Utilities Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Loading

Subscribe to zeroday.news

The day's cybersecurity headlines, CVEs and threat intel, summarized in plain English, straight to your inbox.

No spam. A short daily digest — opt out anytime with one click.

Aggregated · summarized · original

unauthenticated access

1 stories

mikrotikSep 6, 2026high

MikroTik Routers Compromised Via Unauthenticated SSH Access

Attackers are exploiting MikroTik routers by accessing their internet-exposed SSH service without requiring any authentication. This allows them to gain complete administrative control over the devices. The exploitation has been ongoing since at least September 2.