#mikrotik — Public Fediverse posts

Krytyczne luki w MikroTiku, umożliwiające przejęcie urządzenia przez SSH. Łatajcie się pilnie.

Chodzi o krytyczne podatności, które są aktywnie wykorzystywane przez atakujących, a szczegóły luk są wręcz… nieprawdopodobne. Cytaty za CERT Polska, który zgłosił do MikroTika luki: W skrócie – można dostać się na Mikrotiki z poziomu Internetu, bez jakiegokolwiek uwierzytelnienia… Łatajcie się. ~ms

#WBiegu #Iot #Mikrotik #Podatność #Ssh

https://sekurak.pl/krytyczne-luki-w-mikrotiku-umozliwiajace-przejecie-urzadzenia-przez-ssh-latajcie-sie-pilnie/

Attackers Exploit MikroTik Routers via Exposed SSH

Hackers are actively exploiting MikroTik routers with exposed SSH services to gain full control, with successful attacks dating back to at least September 2. This critical vulnerability allows attackers to bypass authentication and take control of your router, putting your entire network at risk.

https://osintsights.com/attackers-exploit-mikrotik-routers-via-exposed-ssh?utm_source=mastodon&utm_medium=social

#Mikrotik #SshExploitation #EmergingThreats #RouterVulnerability #CertPolska

VLANs on #MikroTik are just guesswork and prayer. Especially with wifi interfaces.

#Mikrotik - if you are using Mikrotik routers you should immediately upgrade to the latest version due to the undisclosed security #vulnerability in RouterOS.

Fixes included in versions:

* 7.25 beta 3

* 7.24.2

* 7.23.4

* 6.49.21

Vendor advisory:

https://mikrotik.com/supportsec/september-2026-vulnerability/

RE: https://www.impulsait.com/actualizacion-de-seguridad-mikrotik-septiembre-2026/

Atención para quienes administran equipos de red de la marca @mikrotik

La empresa Mikrotik ha anunciado una actualización de seguridad importante en su sistema operativo. En nuestro sitio pueden encontrar una guía paso a paso cómo realizar una actualización del software de equipos Mikrotik.

#Mikrotik #Ciberseguridad #RouterOS

Actualización de Seguridad Mikrotik Septiembre 2026

https://www.impulsait.com/actualizacion-de-seguridad-mikrotik-septiembre-2026/

A critical MikroTik RouterOS security update patches a severe vulnerability. Protect your devices immediately from emerging router compromise threats.

#MikroTik #RouterOS #CyberSecurity #NetworkSecurity #TechNews

https://securityonline.info/mikrotik-routeros-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

On the 22nd Sept 2026 we return to Central London to deliver a #MikroTik MTCRE training. Loads of theory, labs and practical tips and examples of how to use OSPF correctly with RouterOS. Seats still available. You can even take or retake the MTCNA exam for free as well. https://mikrotiktraining.co.uk/product/mikrotik-mtcre-training-course/

Aktualizujcie swoje urządzenia #Mikrotik

https://mikrotik.com/supportsec/september-2026-vulnerability/

CERT Polska:
https://moje.cert.pl/komunikaty/2026/161/krytyczne-aktualizacje-bezpieczenstwa-w-urzadzeniach-mikrotik/

#bezpieczeństwo #router #sieć

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

#mikrotik patch day behind me, all good 😅

#mikrotik patch day behind me, all good 😅

#mikrotik patch day behind me, all good 😅

#mikrotik patch day behind me, all good 😅

New @version #mikrotik firmware: "This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information."
Probably a good idea to move to this one ASAP! 😮

New @version #mikrotik firmware: "This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information."
Probably a good idea to move to this one ASAP! 😮

New @version #mikrotik firmware: "This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information."
Probably a good idea to move to this one ASAP! 😮

New @version #mikrotik firmware: "This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information."
Probably a good idea to move to this one ASAP! 😮

New @version #mikrotik firmware: "This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information."
Probably a good idea to move to this one ASAP! 😮

New version! #MikroTik RouterOS 7.23.5 is available in the Long-term channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.23.5 is available in the Long-term channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.23.5 is available in the Long-term channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.23.5 is available in the Long-term channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.23.5 is available in the Long-term channel https://mikrotik.com/download

Как (не) потерять домен за выходные

Пятница, 18:00: сотрудники одной достаточно крупной компании спокойно заканчивают работу. Понедельник, 08:00: все рабочие компьютеры показывают экран восстановления BitLocker, контроллер домена скомпрометирован, а ключи у злоумышленника. Между этими точками четыре шага, и ни один из них не был сложным. Ни одна из уязвимостей не была чем-то необычным. Вы почти наверняка видели каждую из них в какой-нибудь инфраструктуре. Но здесь они сложились в цепочку, и никто не заметил, пока она не отработала до конца. Расследовать инцидент

https://habr.com/ru/companies/garda/articles/1023394/

#CVE202454772 #mikrotik #Web_Enrollment #расследование_инцидентов #кибербезопасность #уязвимости_и_их_эксплуатация #уязвимости_сетевого_оборудования #шифровальщики

Le estaba preguntando a #ChatGPT sobre el servidor DHCP de #RouterOS de #MikroTik, y de la nada el tipo intentó adivinar mi ubicación geográfica sin que yo le haya pedido semejante cosa. 🤨 ¿Qué onda #OpenAI, LPMQTP? :gmail17angry:

:sm64_w: :sm64_t: :sm64_f: :sm64_zq:

#Privacidad #PrivacidadEnLínea #PrivacidadOnline