Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”

Security Affairs RSS collection reports active exploitation of a MikroTik RouterOS SSH zero-day, exploitation of PaperCut vulnerabilities in education organizations, critical VMware Workstation/Fusion VM-escape flaws, a Chromium V8 vulnerability added to CISA's KEV catalog, a large Manchester Airports Group data breach, and a longstanding PostgreSQL code-execution flaw. The highest-priority items are the actively exploited internet-facing device and application vulnerabilities, particularly MikroTik SSH exposure, PaperCut, and Chromium.