State-sponsored campaigns target global network infrastructure
Summary: Cisco Talos reports an increase in high-sophistication, state-sponsored attacks on routers and firewalls globally, observing both espionage and pre-positioning for future destructive attacks. The UK's NCSC documented a Russian intelligence campaign called "Jaguar Tooth" exploiting CVE-2017-6742, a router vulnerability Cisco patched in 2017, and Talos says Russian contracting documents show one scanning component targeting almost 20 different router and switch manufacturers.
What you should know: Talos attributes the attackers' success to out-of-date software, end-of-life equipment and always-on connectivity, and notes that compromised infrastructure ranges from an organization being an unwitting participant in criminal activity to events of true national security impact.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026