Cyber agencies share security guidance for network edge devices

Five Eyes cybersecurity agencies (UK, Australia, Canada, New Zealand, U.S.) issued guidance urging manufacturers of network edge devices — firewalls, routers, VPN gateways, IoT/OT devices — to improve forensic visibility, secure-by-default settings, logging, and authentication because these devices are heavily targeted by state-sponsored and criminal actors. The advisory cites active exploitation of vulnerabilities and zero-days (including incidents attributed to groups like Velvet Ant and campaigns such as Volt Typhoon), warns that edge devices often lack EDR/firmware updates and strong authentication, and recommends minimum forensic capability and secure defaults to help defenders detect and investigate intrusions.