--- title: Weak Security Continues to Fuel Russian Cyberattacks description: US cybersecurity agencies and allies from a dozen countries issued a joint advisory warning that Russian FSB Center 16 threat actors (tracked as Energetic... canonical: https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Weak Security Continues to Fuel Russian Cyberattacks | daily.dev og:description: US cybersecurity agencies and allies from a dozen countries issued a joint advisory warning that Russian FSB Center 16 threat actors (tracked as Energetic... og:url: https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g og:image: https://api.daily.dev/og/posts/T0f3ts88G.png og:image:alt: Weak Security Continues to Fuel Russian Cyberattacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Weak Security Continues to Fuel Russian Cyberattacks **[Dark Reading](https://daily.dev/sources/dr)** · 4 min read · 0 upvotes · 0 comments ## Summary US cybersecurity agencies and allies from a dozen countries issued a joint advisory warning that Russian FSB Center 16 threat actors (tracked as Energetic Bear, Crouching Yeti, Ghost Blizzard/Turla, and Static Tundra) continue to exploit weakly secured routers and networking equipment to breach critical infrastructure worldwide. The primary attack vector involves scanning for exposed SNMP services with default or weak passwords, then exfiltrating device configs via TFTP/FTP. Threat actors also exploit known Cisco vulnerabilities and abuse Cisco Smart Install. Targeted sectors include defense, energy, financial services, government, and healthcare. Mitigation guidance includes disabling Cisco Smart Install, upgrading to SNMPv3, replacing default passwords, and blocking unnecessary TFTP/SNMP traffic. Separately, the UK and EU jointly sanctioned 24 Russian individuals and entities for cyberattacks and disinformation campaigns — a first for the two bodies — and formally attributed a failed attack on Poland's power grid to FSB Center 16. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Response to CISA Advisory \(AA25-343A\): Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure](https://daily.dev/posts/response-to-cisa-advisory-aa25-343a-pro-russia-hacktivists-conduct-opportunistic-attacks-against--etypghjmt) · Security Boulevard · 0 upvotes · 0 comments - [Inside Russia Credential-Based Intrusions & Cyber Risks](https://daily.dev/posts/inside-russia-credential-based-intrusions-cyber-risks-aolztcxcp) · Cyble · 0 upvotes · 0 comments - [EU and UK officially blame Russian spies for cyberattack on Poland's power grid](https://daily.dev/posts/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-poland-s-power-grid-muvagan0j) · The Register · 0 upvotes · 0 comments - [Russia Pivots Its Cyberthreats Back to the U.S. and the West](https://daily.dev/posts/russia-pivots-its-cyberthreats-back-to-the-u-s-and-the-west-ld5awdhaz) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cisco](https://daily.dev/tags/cisco) [View this post on daily.dev](https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Weak Security Continues to Fuel Russian Cyberattacks","url":"https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g"},"datePublished":"2026-07-13T21:41:36.527Z","dateModified":"2026-07-15T18:52:15.600Z","description":"US cybersecurity agencies and allies from a dozen countries issued a joint advisory warning that Russian FSB Center 16 threat actors (tracked as Energetic...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a083c7965bc84815cdacde15c2b0fb01?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a083c7965bc84815cdacde15c2b0fb01?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/weak-security-continues-to-fuel-russian-cyberattacks-t0f3ts88g","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cisco","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Weak Security Continues to Fuel Russian Cyberattacks"}]} ```