Has a nation-state pwned your routers?

This advisory summarizes an NSA-led joint Cybersecurity Advisory warning that Russian FSB (Center 16) and other adversaries are stealing router configurations by scanning for devices with default SNMPv1/v2 community strings, issuing SNMP commands, and exfiltrating data via TFTP; it lists affected sectors (communications, defense, energy, financial services, government, healthcare) and provides concrete mitigations (disable Cisco Smart Install, move to SNMPv3 with authPriv, restrict management protocols, patch EOL devices) along with detection queries for runZero.