Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended

CERT Polska disclosed six high-severity RouterOS vulnerabilities (notably two SSH flaws permitting authentication bypass and privilege elevation) that can be chained ("MikroTrick") to fully compromise devices with SSH exposed to the internet; active exploitation has been observed with specific IoCs (log entries, creation of an "ops" account, and attacker IPs 82.192.72.4 and 103.102.31.18). Administrators are urged to apply published patches immediately (RouterOS 7.25beta3, 7.24.2, 7.23.4, or 6.49.21), inspect devices for the vendor's "Flagged" marker and unauthorized configuration changes, and follow containment and remediation guidance if compromise is suspected.