FBI urges router security steps after Russian GRU attacks

US federal agencies have disclosed that Russian military intelligence compromised thousands of small office and home routers, urging owners to take immediate protective measures.

The FBI and NSA revealed on April 7 that a GRU unit known as APT28 or Fancy Bear has targeted SOHO routers since at least 2024. The operation involved DNS hijacking to intercept credentials and communications, affecting devices across 23 states and impacting over 5,000 consumer devices plus 200 organizations according to Microsoft reports.

Makala yanayohusiana

Illustration depicting FCC ban on new foreign-made routers due to security risks, featuring banned router, US flag, and production shift to America.
Picha iliyoundwa na AI

FCC bans new foreign-made routers as security risk

Imeripotiwa na AI Picha iliyoundwa na AI

The Federal Communications Commission announced on March 23, 2026, that new consumer-grade routers manufactured outside the US pose an unacceptable national security risk and will be added to its Covered List. The ban applies to sales of new models but spares existing and previously authorized routers. Manufacturers may seek exemptions by planning to shift production to the US.

The FBI, BND and BfV warn of attacks by Russian state hackers on TP-Link routers and WLAN extenders. The Fancy Bear group has infiltrated thousands of devices worldwide to steal sensitive data. In Germany, 30 affected devices have already been detected.

Imeripotiwa na AI

One week after the FCC banned sales of new foreign-made Wi-Fi routers over national security risks, new details emerge on implicated cyberattacks and growing criticism of the broad policy's effectiveness.

The FBI, CISA, NSA, EPA, Department of Energy, and US Cyber Command issued a joint advisory warning of intensified cyberattacks by Iranian-affiliated hackers on programmable logic controllers (PLCs) in US critical infrastructure. Attacks since at least March 2026 have caused operational disruptions and financial losses in government facilities, wastewater, water, energy, and municipal systems, amid escalating tensions in the US-Israel war with Iran.

Imeripotiwa na AI

CrowdStrike has issued a warning about the speed of cyber attacks, stating that attackers can move through networks in under 30 minutes. The company describes the situation as an 'AI arms race,' emphasizing the need for security teams to respond faster than adversaries. Researchers highlight breakout time as a key indicator of evolving intrusion methods.

Daniel Stenberg, creator of the widely used curl program, draws parallels between his project and a cyberattack that nearly succeeded two years ago. In an interview in Huddinge, he stresses the importance of trust in open-source software underpinning the internet. An expert warns he could theoretically shut down half the internet.

Jumanne, 31. Mwezi wa tatu 2026, 02:50:43

Router firms respond to FCC foreign Wi-Fi ban amid cyber threats

Alhamisi, 12. Mwezi wa tatu 2026, 22:40:07

US and Europe disrupt SocksEscort proxy network

Jumatano, 11. Mwezi wa tatu 2026, 14:00:34

Google report warns of shifting cloud threat landscape

Jumatano, 11. Mwezi wa tatu 2026, 07:15:19

14,000 Asus routers infected by takedown-resistant KadNap malware

Jumatano, 11. Mwezi wa tatu 2026, 02:47:16

Dutch intelligence accuses Russia of hacker attacks on WhatsApp and Signal

Ijumaa, 6. Mwezi wa tatu 2026, 15:05:36

FBI investigates claims of compromised systems and hijacked warrants

Alhamisi, 26. Mwezi wa pili 2026, 18:05:06

New AirSnitch attack bypasses Wi-Fi client isolation

Alhamisi, 19. Mwezi wa pili 2026, 09:18:19

Experts claim ransomware attacks increasingly target firewalls

Ijumaa, 13. Mwezi wa pili 2026, 18:27:09

Russia blocks YouTube, Telegram and WhatsApp using DNS and DPI

Ijumaa, 13. Mwezi wa pili 2026, 14:32:48

Fake Chrome AI extensions targeted over 300,000 users

Tovuti hii inatumia vidakuzi

Tunatumia vidakuzi kwa uchambuzi ili kuboresha tovuti yetu. Soma sera ya faragha yetu kwa maelezo zaidi.
Kataa