CISA Joins NSA, FBI, DC3 and International Partners Warning of Russian Cyber Threat Activity Targeting Communications, Energy, Government and Other Critical Inf
CISA and partners issued a joint advisory warning that Russian state-sponsored actors are targeting vulnerable networking devices in critical infrastructure sectors worldwide, urging immediate mitigation steps.
The Cybersecurity and Infrastructure Security Agency (CISA), alongside the NSA, FBI, DC3, and international partners, released a joint advisory highlighting Russian cyber threat activity targeting vulnerable networking devices in critical infrastructure sectors globally. The advisory emphasizes that threat actors primarily exploit poorly configured routers and known vulnerabilities to gain unauthorized access and exfiltrate sensitive data. The warning covers sectors including communications, energy, government, and healthcare, underscoring the broad scope of the threat. The advisory was led by the NSA and includes actionable mitigation steps to help network defenders counter the activity.
CISA Acting Executive Assistant Director for Cybersecurity Chris Butera stated that the advisory serves as a reminder for critical infrastructure owners to implement mitigation measures. He emphasized the ongoing threat posed by nation-state actors targeting vulnerable network devices and urged defenders to reduce their attack surface. The advisory follows previous warnings, including an August 2025 FBI announcement detailing malicious activity attributed to the Russian Federal Security Service (FSB) Center 16.
The FBI’s Assistant Director Brett Leatherman noted that Russian state-sponsored actors have been extracting configuration data from poorly secured routers for years. He described the advisory as a tool for network defenders to identify and counter this activity, while reaffirming the FBI’s commitment to exposing the tradecraft and holding actors accountable. The advisory builds on prior public service announcements and provides visibility into the tactics used by these threat actors.
As the national cyber defense agency, CISA leads efforts to manage and reduce risks to digital and physical infrastructure. The advisory underscores the urgency of addressing vulnerabilities in networking devices to protect critical infrastructure sectors. For additional details, the public is directed to CISA’s website and social media channels. The advisory reflects a coordinated effort among U.S. and international partners to counter Russian cyber threats.