11 article(s) in our index mention this organisation.
Two security flaws – CVE-2026-65660 in Microsoft SharePoint and CVE-2026-67279 in Mikrotik RouterOS – are actively being exploited in the wild. Federal Civilian Executive Branch (FCEB) agencies have a deadline to apply p…
A MikroTik RouterOS vulnerability chain, dubbed MikroTrick, allows attackers to gain full administrative control of internet-exposed routers without a password or SSH key. The chain combines a state-machine flaw (CVE-202…
A multi-platform malware campaign, dubbed BambooToken, is leveraging the MQTT protocol to control Windows and Linux systems, originating from a Chinese threat actor. The malware, active since at least February 2023, util…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities to its KEV catalog, impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. Attack…
Google released Chrome 153 to address 230 vulnerabilities, including a seventh exploited zero-day. This latest update focuses on fixing a critical out-of-bounds write issue within Chrome’s V8 JavaScript and WebAssembly e…
MikroTik has released critical patches to address six vulnerabilities in RouterOS, with two now confirmed to be actively exploited by attackers. The ‘MikroTrick’ campaign, leveraging these flaws, allows attackers to take…
A critical vulnerability in MikroTik routers allows attackers to bypass SSH authentication, and exploitation is already underway. Due to the ease of exploitation, assume that many devices are already compromised, and imm…
Attackers are exploiting unsecured MikroTik routers with exposed SSH services to gain administrative control. CERT Polska issued a warning about this issue, and MikroTik has released security updates to address the vulne…
A critical vulnerability (CVE-2026-14227) exists in MikroTik RouterOS, allowing an attacker with low-privilege API access to extract the router's WireGuard private key and decrypt VPN traffic. This could enable full VPN…
A critical vulnerability (CVE-2026-16347) exists in MikroTik RouterOS and Cloud Hosted Router, allowing attackers to rapidly guess passwords and gain unauthorized access by repeatedly attempting logins. No fix is current…
Russian military intelligence, operating under the ‘Forest Blizzard’ (APT28/Fancy Bear) moniker, has been conducting a sophisticated cyber espionage campaign targeting over 18,000 routers globally. The attackers exploite…
