--- title: U.S., Allies: Russia Abusing Network Devices to Attack... description: U.S. cybersecurity agencies (NSA, CISA, DOJ, DC3) and allies from a dozen countries have issued a joint alert warning that Russian state-sponsored threat... canonical: https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure | daily.dev og:description: U.S. cybersecurity agencies (NSA, CISA, DOJ, DC3) and allies from a dozen countries have issued a joint alert warning that Russian state-sponsored threat... og:url: https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz og:image: https://api.daily.dev/og/posts/FGKGF0Fdz.png og:image:alt: U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 5 min read · 0 upvotes · 0 comments ## Summary U.S. cybersecurity agencies (NSA, CISA, DOJ, DC3) and allies from a dozen countries have issued a joint alert warning that Russian state-sponsored threat groups — linked to FSB Center 16 and known as Berserk Bear/Dragonfly/Ghost Blizzard — are exploiting decades-old vulnerabilities in network devices to attack critical infrastructure. The attackers scan for SNMP agents with default or weak community strings and exploit CVE-2018-0171 (Cisco Smart Install) and CVE-2008-4128 (18-year-old Cisco IOS flaws). Simultaneously, the UK and EU announced sanctions against two dozen Russian individuals and entities, including those behind Lumma Stealer malware and the attack on Poland's power grid. Security experts emphasize that the threat actors are succeeding not through novel techniques but by exploiting long-known misconfigurations and legacy systems that organizations have failed to remediate. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Response to CISA Advisory \(AA25-343A\): Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure](https://daily.dev/posts/response-to-cisa-advisory-aa25-343a-pro-russia-hacktivists-conduct-opportunistic-attacks-against--etypghjmt) · Security Boulevard · 0 upvotes · 0 comments - [EU and UK officially blame Russian spies for cyberattack on Poland's power grid](https://daily.dev/posts/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-poland-s-power-grid-muvagan0j) · The Register · 0 upvotes · 0 comments - [US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide](https://daily.dev/posts/us-disrupts-chinese-hacking-tools-as-7-govts-warn-of-prc-spies-stealing-sensitive-data-worldwide-pfx0sisvi) · The Register · 0 upvotes · 0 comments - [Inside Russia Credential-Based Intrusions & Cyber Risks](https://daily.dev/posts/inside-russia-credential-based-intrusions-cyber-risks-aolztcxcp) · Cyble · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure","url":"https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz"},"datePublished":"2026-07-14T18:46:38.561Z","dateModified":"2026-07-15T18:52:15.600Z","description":"U.S. cybersecurity agencies (NSA, CISA, DOJ, DC3) and allies from a dozen countries have issued a joint alert warning that Russian state-sponsored threat...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/39dee248e4684d76cf041edca973e3c0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/39dee248e4684d76cf041edca973e3c0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/u-s-allies-russia-abusing-network-devices-to-attack-critical-infrastructure-fgkgf0fdz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure"}]} ```