2026-09-08 19:57 UTC

MikroTik vulnerabilities!

We added MikroTik SSH identification to our daily scans on 2026-09-04. Follow links below for MikroTik vulnerabilty information and patches.

Links

• MikroTik devices with SSH exposed over time (no vulnerability assessment)
• Distribution of MikroTik devices with SSH enabled (World Map view)

References

• https://x.com/Shadowserver/status/2096678032744280476
• https://mikrotik.com/supportsec/september-2026-vulnerability
• https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

2026-06-19 13:05 UTC

FortiBleed Fortinet compromised devices!

We shared a one-off "FortiBleed" dataset of compromised Fortinet devices in our Compromised Website Report https://www.shadowserver.org/what-we-do/network-reporting/compromised-website-report/ thanks to collaboration with SOCRadar! IP data tagged 'fortibleed' with timestamp set to 2026-06-18

Links

• World map breakdown of "FortiBleed" compromised Fortinet devices
• Tree map breakdown of "FortiBleed" compromised Fortinet devices

References

• https://www.shadowserver.org/what-we-do/network-reporting/compromised-website-report/
• https://x.com/Shadowserver/status/2067951401553240361