Officials once again warn defenders that Russian hackers are targeting network devices

Russian state-sponsored hackers, known for targeting critical infrastructure, are exploiting vulnerabilities in network devices to breach systems worldwide. Authorities from 13 countries, including the United States, have issued a joint cybersecurity advisory warning defenders to take preventative measures against these attacks. The hackers, tracked under various names such as Berserk Bear and Dragonfly, are associated with the Russian Federal Security Service Center 16 and have been active for over a decade. The advisory emphasizes the need for robust security configurations and vulnerability management to thwart these attacks¹. The shift from criminal to state-aligned activity changes the threat model, requiring a different approach to defense. This matters to practitioners as it necessitates a geopolitical threat mindset, rather than solely focusing on traditional cybercrime tactics.