Le FBI recommande de sécuriser les routeurs après des cyberattaques du GRU russe

Les agences fédérales américaines ont révélé que les services de renseignement militaire russes ont compromis des milliers de routeurs de petits bureaux et de particuliers, exhortant leurs propriétaires à prendre immédiatement des mesures de protection.

Le FBI et la NSA ont révélé le 7 avril qu'une unité du GRU, connue sous le nom d'APT28 ou Fancy Bear, cible les routeurs SOHO depuis au moins 2024. L'opération impliquait le détournement de DNS pour intercepter des identifiants et des communications, affectant des appareils dans 23 États et impactant plus de 5 000 appareils grand public ainsi que 200 organisations, selon les rapports de Microsoft.

Articles connexes

Illustration depicting FCC ban on new foreign-made routers due to security risks, featuring banned router, US flag, and production shift to America.
Image générée par IA

FCC bans new foreign-made routers as security risk

Rapporté par l'IA Image générée par IA

The Federal Communications Commission announced on March 23, 2026, that new consumer-grade routers manufactured outside the US pose an unacceptable national security risk and will be added to its Covered List. The ban applies to sales of new models but spares existing and previously authorized routers. Manufacturers may seek exemptions by planning to shift production to the US.

The FBI, BND and BfV warn of attacks by Russian state hackers on TP-Link routers and WLAN extenders. The Fancy Bear group has infiltrated thousands of devices worldwide to steal sensitive data. In Germany, 30 affected devices have already been detected.

Rapporté par l'IA

One week after the FCC banned sales of new foreign-made Wi-Fi routers over national security risks, new details emerge on implicated cyberattacks and growing criticism of the broad policy's effectiveness.

The FBI, CISA, NSA, EPA, Department of Energy, and US Cyber Command issued a joint advisory warning of intensified cyberattacks by Iranian-affiliated hackers on programmable logic controllers (PLCs) in US critical infrastructure. Attacks since at least March 2026 have caused operational disruptions and financial losses in government facilities, wastewater, water, energy, and municipal systems, amid escalating tensions in the US-Israel war with Iran.

Rapporté par l'IA

CrowdStrike has issued a warning about the speed of cyber attacks, stating that attackers can move through networks in under 30 minutes. The company describes the situation as an 'AI arms race,' emphasizing the need for security teams to respond faster than adversaries. Researchers highlight breakout time as a key indicator of evolving intrusion methods.

Daniel Stenberg, creator of the widely used curl program, draws parallels between his project and a cyberattack that nearly succeeded two years ago. In an interview in Huddinge, he stresses the importance of trust in open-source software underpinning the internet. An expert warns he could theoretically shut down half the internet.

Ce site utilise des cookies

Nous utilisons des cookies pour l'analyse afin d'améliorer notre site. Lisez notre politique de confidentialité pour plus d'informations.
Refuser