US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups
US and allies warn of Russian APT groups targeting routers and network devices to compromise critical infrastructure worldwide. The US and allied governments warn that Russian state-sponsored APT groups are scanning and exploiting poorly secured network devices, especially routers, to access critical infrastructure. Groups linked to FSB Center 16, including Berserk Bear, Energetic Bear, Ghost […]

The US and allied governments warn that Russian state-sponsored APT groups are scanning and exploiting poorly secured network devices, especially routers, to access critical infrastructure. Groups linked to FSB Center 16, including Berserk Bear, Energetic Bear, Ghost Blizzard, Crouching Yeti, Dragonfly, and Static Tundra, have targeted organizations in communications, defense, energy, finance, government, and healthcare sectors.
“Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks.” reads the joint advisory.”
Related breach coverage
- US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers2026-07-14
Multiple state-sponsored APTs are compromising poorly secured devices across critical infrastructure sector networks. The post US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers appeared first on SecurityWeek.
- UK and Allies urge critical sectors to improve defences against Russian intelligence targeting2026-07-13
New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers
- UK and Allies urge critical sectors to improve defences against Russian intelligence targeting2026-07-13
New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers
- EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign2026-07-13
The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and carried out sabotage operations against critical infrastructure. The post EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign appeared first on SecurityWeek.
