Russia-linked hackers have been secretly gathering configuration data from poorly secured routers in critical infrastructure sectors for an extended period. This targeted effort has significant implications for national security, as it potentially allows these hackers to disrupt or manipulate essential systems. The extracted data could be used to inform future attacks, compromising the stability of critical industries such as energy, healthcare, and finance. Cyber agencies have issued warnings to these sectors, emphasizing the need for enhanced security measures to prevent further exploitation. The hackers' ability to remain undetected for so long highlights the importance of robust network security and regular audits to identify vulnerabilities1. This threat matters to cybersecurity practitioners because it underscores the need for proactive measures to protect critical infrastructure from state-sponsored hacking groups.