Agencies warn about Russian government hackers going after unpatched vulnerabilities

A joint US-UK advisory warns that SVR-linked Russian government hackers are actively exploiting known, unpatched vulnerabilities and performing mass scans to both target high-value organizations (governments, defense contractors, tech firms) and opportunistically compromise exposed systems; reported techniques include exploiting TeamCity and Zimbra flaws, Microsoft Teams impersonation, TOR usage, and infrastructure destruction upon discovery, with agencies recommending disabling unnecessary internet-exposed services, enforcing multi-factor authentication, and auditing cloud accounts.