russian threats

The russian threats tag covers reporting on a Russian intelligence campaign linked to Centre 16 of Russia’s Federal Security Service. The featured advisory describes attackers scanning networks worldwide for exposed routers and other network devices, then exploiting weak Simple Network Management Protocol (SNMP) settings and publicly accessible management services. The activity affects communications, defence, energy, finance, government and healthcare organisations, and does not rely on a new zero-day vulnerability. Coverage focuses on practical defensive steps, including hardening routers, securing administrative interfaces, reviewing configurations and reducing unnecessary exposure. It is useful for IT and security teams monitoring state-linked activity targeting network infrastructure.