U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

The U.S. Treasury designated a VPN service (1VPNS) and individuals for enabling ransomware and other cybercriminal operations, while the U.K. and E.U. sanctioned Russian cyber networks and operators linked to GRU/FSB activities; separately, the FBI warned that FSB Center 16 actors exploit poorly configured routers (via SNMP abuse and known CVEs such as CVE-2018-0171 and CVE-2008-4128) to exfiltrate configurations and gain access to critical networks, and CISA added CVE-2008-4128 to its KEV list.