Russian foreign intelligence poses global threat with cyber campaign exploiting established vulnerabilities

"On 10/10/2024, the National Cyber Security Centre (NCSC) issued an update regarding "Russian foreign intelligence poses global threat with cyber campaign exploiting established vulnerabilities". The NCSC and US agencies have shared a new advisory to help organisations guard against online attacks by Russia's Foreign Intelligence Service (SVR), highlighting tactics used to collect foreign intelligence for future cyber operations. The advisory warns of the SVR attackers' mass-scale exploitation of vulnerabilities at scale, with more than 20 publicly disclosed vulnerabilities shared that are assessed to have the capability and interest to exploit."

The advisory advises organisations to rapidly deploy patches and prioritise software updates to prevent systems being accessed by online actors linked to Russia's Foreign Intelligence Service (SVR). The SVR cyber actors are exploiting vulnerabilities at a mass scale as part of a continued global campaign.