Bottom line: Nine countries warn that Russian hackers are deliberately exploiting routers as entry points for attacks on critical infrastructure.
Cybersecurity authorities from the USA and eight other countries have issued a joint warning: Russian state-sponsored hackers are using vulnerable and poorly configured routers to penetrate networks of critical infrastructure.
Cybersecurity authorities from the USA and eight allied nations have coordinated a warning about a current campaign by Russian state-sponsored actors. The attackers are targeting routers in critical infrastructure networks that either have known vulnerabilities or are not securely configured.
The joint warning is directed at operators of critical infrastructure such as power utilities, water and wastewater management, transportation systems, and telecommunications networks. The routers serve as entry points to gain deeper network access and establish persistent threats from there. Poorly managed or outdated router configurations enable attackers to overcome this entry barrier.
Organizations should immediately inventory their router assets, change default credentials, update firmware to current versions, and restrict access to administrative interfaces. Monitoring suspicious configuration changes and implementing network segmentation reduce the risk of lateral movement in the event of a successful intrusion.
Source: www.bleepingcomputer.com · Published 13 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.