What Happened

Multiple severe vulnerabilities in MikroTik RouterOS are being actively exploited, particularly targeting routers with publicly accessible SSH services. MikroTik has released patches in RouterOS versions 6.49.21, 7.23.4, and 7.24.2 to address these issues.

Who Is Affected

Businesses and internet providers using MikroTik RouterOS are at risk, especially those with publicly accessible SSH services. The NCSC Netherlands advises immediate installation of updates to mitigate risks.

Market Impact

• Increased urgency for businesses to secure their networks.
• Potential rise in demand for cybersecurity solutions and IT support services.
• Possible disruptions in business operations due to network vulnerabilities.

What to Watch

Monitor for further updates from MikroTik and NCSC Netherlands. Businesses should ensure their IT providers are implementing necessary security measures, including securing SSH access with VPNs or whitelists.

Related coverage

• Adobe Commerce and Magento Exploit Actively Abused
• Active exploitation of vulnerabilities in SonicWall SMA 1000 devices
• Vulnerability in JFrog Artifactory Self-Hosted