In-the-Wild Exploitation

Exposed MikroTik SSH hands over full administrative control without authentication

CERT Polska dated successful attacks to at least September 2 and published its warning on September 5, so operators who deferred the RouterOS update have three days of configuration changes to read as well as a patch to install.