Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-06 03:00 PDT
- Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
The Hacker News • 2026-09-06 02:32 • thehackernews.com
Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska’s attack warning, published on September 5.Successful attacks date to at least September 2. The Hacker News’s September 6 review of the warning found no victim count or
https://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.html - Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
The Hacker News • 2026-09-06 01:34 • thehackernews.com
Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows information stealer, that remain on an infected machine after the stealer deletes itself.One of them switches off Windows Update and Microsoft Defender before running a cryptocurrency miner.
The company named the four programs ProManager, WinUpdate, SoftManager, and
https://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
