As cited
Copy frozen at (site build).
threat intel
Officials once again warn defenders that Russian hackers are targeting network devices
Russian FSB Center 16 (tracked under multiple names including Berserk Bear and Dragonfly) has conducted sustained targeting of critical infrastructure globally by exploiting poorly configured and outdated networking devices, particularly Cisco routers with default credentials and unpatched vulnerabilities. A joint cybersecurity advisory from the United States and 12 allied nations on Monday detailed the group's tactics and recommended defenses including disabling Cisco Smart Install, enforcing strong authentication, and monitoring local account activity. The warning follows a December 2025 attack attributed to FSB Center 16 on Poland's energy grid and comes nearly a year after similar alerts.
Why it matters: Critical infrastructure defenders across defense, energy, communications, financial services, healthcare and government sectors must urgently review Cisco device configurations and apply defensive measures, as this Russian state-sponsored group has demonstrated both capability and intent to disrupt essential services in allied nations.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Officials once again warn defenders that Russian hackers are targeting network devices
Russian FSB Center 16 (tracked under multiple names including Berserk Bear and Dragonfly) has conducted sustained targeting of critical infrastructure globally by exploiting poorly configured and outdated networking devices, particularly Cisco routers with default credentials and unpatched vulnerabilities. A joint cybersecurity advisory from the United States and 12 allied nations on Monday detailed the group's tactics and recommended defenses including disabling Cisco Smart Install, enforcing strong authentication, and monitoring local account activity. The warning follows a December 2025 attack attributed to FSB Center 16 on Poland's energy grid and comes nearly a year after similar alerts.
Why it matters: Critical infrastructure defenders across defense, energy, communications, financial services, healthcare and government sectors must urgently review Cisco device configurations and apply defensive measures, as this Russian state-sponsored group has demonstrated both capability and intent to disrupt essential services in allied nations.
- Source published
- First seen by Cybersecurity Tracker