U.S. and UK Warn of Russian Cyber Threats: 9 of 24 Vulnerabilities in the Advisory Are Being Probed Right Now | Grey Noise Blog
Summary: A joint U.S. and UK advisory identifies 25 vulnerabilities tied to an exploitation campaign by Russia's APT 29, the group behind the SolarWinds hack. GreyNoise tracks 12 of the 25 and has detected nine of them being actively probed by attackers, activity it describes as mass, opportunistic scanning rather than targeted operations.
Bottom line: The advisory's own language says opportunistic exploitation widens the threat surface to virtually any organization with vulnerable systems, with the SVR using compromised victims to host malicious infrastructure and pivot to other networks.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026