Attackers are combining two newly disclosed MikroTik RouterOS vulnerabilities, an SSH authentication bypass (CVE-2026-67276) and a privilege escalation bug (CVE-2026-86060), to seize full control of routers with SSH exposed to the internet. Poland's CERT, which found the flaws with AI assistance, calls the combined exploit 'MikroTrick' and confirms it is being used in real-world attacks. MikroTik patched the issues in RouterOS versions released September 3, alongside a related bandwidth-test flaw that can leak memory or crash devices.
bleepingcomputer.com
· 2026-09-07
A critical vulnerability tracked as CVE-2026-82329 in JFrog's Artifactory repository manager allows attackers to bypass authentication and gain administrator-level access to affected systems. Security researchers report that exploitation attempts began soon after the flaw's public disclosure, putting unpatched deployments at immediate risk.
darkreading.com
· 2026-09-01
Microsoft confirmed a widespread outage of Exchange Online on Monday, causing Outlook users to experience delayed or failed emails, authentication errors, and search failures. The company traced the problem to an authentication component and began testing a fix on part of its infrastructure before a broader rollout. Downdetector logged over 5,000 user reports by 2 PM ET, with complaints also flooding social media.
techcrunch.com
· 2026-08-31
Microsoft confirmed it is investigating a major Exchange Online disruption, tracked internally as EX1464935, after a flood of user reports began around 5:30 PM UTC. Tens of thousands of users reported problems sending and receiving emails, logging into accounts, and managing mailboxes through Outlook and admin tools, according to Downdetector data.
bleepingcomputer.com
· 2026-08-31
Security researchers are flagging a fresh wave of email scams that no longer follow the old telltale patterns like poor grammar or suspicious links. These updated schemes are polished, convincing, and designed to slip past users who rely on outdated advice from corporate IT departments.
fastcompany.com
· 2026-08-31
A joint alert from the US State Department, Japan, Canada and the UK warns that North Korean operatives are using falsified identity documents to get hired as remote IT workers at foreign companies, letting them enter corporate networks with legitimate-looking access. Separately, groups like Scattered Spider have used social engineering against help desks to trick staff into resetting passwords or MFA for accounts they don't own, bypassing strong authentication entirely.
bleepingcomputer.com
· 2026-08-25
GoKawiil