Joint Advisory Warns of Russian FSB Attacks on Critical Infrastructure

On July 13, 2026, cybersecurity agencies from 12 countries issued a joint advisory about Russian state hackers from the FSB Center 16 targeting vulnerable routers worldwide. These actors exploit weak Simple Network Management Protocol (SNMP) passwords and known vulnerabilities in Cisco devices, specifically CVE-2018-0171 and CVE-2008-4128. The sectors most at risk include communications, defense, energy, financial services, government, and healthcare. The advisory emphasizes the need for organizations to implement SNMPv3, disable legacy SNMP versions, and adopt strong password policies. The UK government also sanctioned 24 individuals and entities linked to these cyber operations. Recent attacks attributed to FSB Center 16 include a failed attempt to compromise Poland's energy grid, which could have impacted 500,000 citizens. The advisory builds on previous warnings and highlights the ongoing threat posed by Russian cyber actors.

Key Points: • Russian FSB Center 16 is targeting critical infrastructure through vulnerable routers. • Organizations are urged to implement SNMPv3 and secure their network devices against known CVEs. • The UK has sanctioned 24 individuals and entities linked to these cyber operations.