CISA, NCSC-UK, and Partners Release Advisory on Russian SVR Actors Targeting Cloud Infrastructure

Summary:

The Cyber and Infrastructure Security Agency (CISA), in collaboration with the UK National Cyber Security Centre (NCSC) and other US and international partners, has released a joint advisory on the tactics, techniques, and procedures (TTPs) used by Russian Foreign Intelligence Service (SVR) cyber actors, also known as APT29, to gain initial access into cloud environments. The advisory provides recent TTPs and encourages network defenders and organizations to review it for recommended mitigations.