Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI Agents
Prompt injection
Vulnerability Disclosure
Recursive Self-Improvement
Email Security
Zero-Day Exploitation
Chain-of-Thought Monitoring
Detection Engineering
Small Model Strategy
Incident Response

How this is made

Today For You My Stack Off Radar Search

MikroTrick — other — Clarity Today

other

MikroTrick

Name given by CERT Polska to an exploit chain against MikroTik RouterOS that combines an SSH authentication bypass with a session privilege escalation.

Current clusters

security1 publisher

Attackers forged RouterOS SSH keys a day before MikroTik shipped the fix

CERT Polska's MikroTrick chain turns a known username and a public key into unauthenticated administrator access on any RouterOS box with SSH open. The confirmed traces are a login named -2 and an account called ops.

Publishers:securityaffairs.com

Reality

Evidence62
Adoption48
Hype gap+15
Incentives30

Confidence58