Attackers Exploiting MikroTik Routers via Internet-Exposed SSH Without Authentication

Cybersecurity alerts indicate that attackers are actively exploiting MikroTik routers with internet-exposed Secure Shell (SSH) remote-access services to gain full administrative control without requiring authentication. CERT Polska issued a warning on September 5, with successful attacks dating back to at least September 2. MikroTik has released security updates for affected RouterOS versions, and immediate installation is recommended, along with checking for unauthorized configuration changes.