Critical SSH Auth Bypass CVE-2026-67276 Found in MikroTik RouterOS, Patch Now

·1 views

India's CERT-In has rated CVE-2026-67276 as critical, warning that the flaw allows attackers to bypass SSH authentication on MikroTik routers using a forged RSA key and signature, potentially granting full administrative access. The vulnerability affects RouterOS versions across three branches: 6.x before 6.49.21, 7.0–7.22.x before 7.23.4, and 7.24.x before 7.24.2. MikroTik's September 2026 advisory also addresses two related flaws — a privilege escalation bug and a denial-of-service vulnerability in the bandwidth-test service. Administrators are urged to upgrade to the fixed releases immediately, as CERT-In confirmed no workaround can substitute for patching. Additional mitigations include restricting SSH access to trusted networks, disabling unused services, and monitoring administrative logins for suspicious activity.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Anthropic and Accenture Partner to Scale Claude AI Deployments Into Production

Anthropic and Accenture have announced a multi-year partnership aimed at helping enterprises move beyond AI pilots and deploy Claude-based solutions at scale. A dedicated Accenture Anthropic Business Group will anchor the collaboration, with Accenture planning to train around 30,000 professionals on Claude. The partnership also makes Accenture a premier partner for Claude Code, Anthropic's coding capability, and includes a jointly established Claude Center of Excellence. A co-developed offering will help CIOs measure AI value and accelerate adoption within engineering teams. Initial industry focus will cover financial services, life sciences, healthcare, and the public sector, where regulatory and operational demands are especially complex.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Cloud-Native Portfolio Using Terraform, AWS Lambda, and GitHub Actions

A developer with an IT Operations background completed the Cloud Resume Challenge, hosting a personal portfolio website using cloud-native infrastructure on AWS. Rather than using website builders like Wix or Squarespace, they built the project using Terraform for infrastructure-as-code, which they found more instructive than studying for their Terraform Associate certification. They leveraged an on-premises HashiCorp Vault running on a Kubernetes cluster to manage secrets and JWT authentication, keeping sensitive credentials off the cloud and behind a VPN. CI/CD was handled through GitHub Actions across two repositories — one for the frontend and one for the backend — each with separate testing and production branches. The project also incorporated an AWS Lambda-powered visitor counter with localStorage to prevent duplicate counts on page refresh.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds Spotify desktop pet controller using Godot 4 in first engine project

A developer transitioning from Unity created BelPet, a desktop pet application built with Godot 4 and C# that also functions as a Spotify playback controller. The draggable character sits above the Windows taskbar and lets users play, pause, skip tracks, seek, and adjust volume without opening the Spotify app. Because Spotify's Web Playback SDK is browser-only, the developer embedded a WebView inside Godot using the godot_wry library to run the required JavaScript. BelPet also uses a transparent, borderless, always-on-top window with custom mouse passthrough so clicks register on apps beneath it. Spotify's Development Mode restrictions limit full multi-device control for general users, though a workaround exists by creating a personal Spotify developer application.

0 comments Read more at DEV Community

ProgrammingHacker News ·

BBC Asks Whether Societies Are Psychologically Prepared for Modern War

A BBC article raises concerns about whether populations are mentally and emotionally equipped to face the prospect of armed conflict. The piece examines the psychological readiness of civilians in an era of heightened global tensions. It explores how decades of relative peace in many regions may have left societies unprepared for the realities of war. The article appears to draw on expert perspectives around resilience, fear, and public morale. The discussion reflects growing unease among analysts and policymakers about the shifting security landscape.

0 comments Read more at Hacker News