meta_id 3322119

On July 14, 2026, the Australian Cyber Security Centre (ACSC) released a joint advisory with international partners warning of network device exploitation by cyber actors linked to the Russian Federal Security Service (FSB) Centre 16. The advisory details how these state-sponsored actors target internet-facing networking devices by identifying exposed management services, weak security settings, and known vulnerabilities. Once exploited, cyber actors steal network information and user credentials to conduct further malicious activity. The ACSC identifies organisations in communications, defence, energy, financial services, government, healthcare, and critical infrastructure sectors as facing increased risk from this activity. The advisory emphasises the importance of securing network devices and remediating known vulnerabilities. The ACSC recommends that organisations assess whether this activity could affect their networks and take immediate action to reduce risk. Key mitigation measures include applying security updates, strengthening network security controls, and securing internet-facing network devices. The ACSC notes these recommendations extend beyond Russian state-sponsored threats and can help organisations defend against techniques used by other malicious cyber actors. The advisory is available on the ACSC website and applies to all organisations relying on internet-facing network devices. The ACSC encourages network defenders and organisations across all sectors to review the guidance and implement recommended security measures. Organisations can report cyber security incidents affecting critical infrastructure to the ACSC or report cybercrimes through official channels. The ACSC continues to work with international partners to promote responsible behaviour in cyberspace and support a secure online environment.