Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

A September 2026 cybersecurity news collection covering active exploitation, zero-days, ransomware and malware campaigns, phishing, supply-chain and third-party breaches, credential theft, and critical vulnerabilities across network appliances, cloud and developer infrastructure, browsers, databases, virtualization products, WordPress, Magento, Cisco, PaperCut, and MikroTik. Several incidents involve unauthenticated remote code execution, actively exploited flaws, credential compromise, disabling security controls, and data exposure.