Weak Security Continues to Fuel Russian Cyberattacks
ID: f49cb244-ab77-5207-9ee5-43a5d9e6f185
STIX ID: report--f49cb244-ab77-5207-9ee5-43a5d9e6f185
Feed Name: Dark Reading
Threat Score
State-sponsored actors affiliated with Russia's FSB Center 16 are actively compromising weakly protected routers and networking equipment worldwide—targeting defense, energy, finance, government, and healthcare—by abusing exposed SNMP (default/guessable passwords), Cisco Smart Install, and known Cisco vulnerabilities to export device configurations via TFTP/FTP; agencies advise improving router hygiene, disabling SMI, upgrading SNMP, enforcing strong passwords, and blocking unnecessary network services.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.