Story perspectives

Russian Hackers Target U.S. Infrastructure via Cisco Vulnerability

8/22/2025

48 10

Summary

Story summary

Russian hackers, linked to the FSB's Center 16, have targeted thousands of Cisco devices in U.S. critical infrastructure.
The group, Static Tundra, exploits a vulnerability (CVE-2018-0171) in Cisco's Smart Install feature.
Key sectors affected include telecommunications, higher education, and manufacturing across multiple continents.
Cisco urges the application of patches and disabling outdated features to reduce risks.
Static Tundra's attacks on Ukrainian entities have increased since the Russia-Ukraine conflict began.

History

Historical Context

In 2016, the U.S. government linked cyberattacks on the Democratic National Committee to Russian hackers, escalating concerns over cyber warfare. By 2020, a major breach attributed to Russian state-sponsored hackers affected thousands of organizations, including U.S. federal agencies. The ongoing threat, exemplified by Static Tundra's exploitation of Cisco vulnerabilities, highlights the urgent need for enhanced cybersecurity and international collaboration against state-sponsored cyber threats.

1 of 2

Story summary

Russian hackers, linked to the FSB's Center 16, have targeted thousands of Cisco devices in U.S. critical infrastructure.
The group, Static Tundra, exploits a vulnerability (CVE-2018-0171) in Cisco's Smart Install feature.
Key sectors affected include telecommunications, higher education, and manufacturing across multiple continents.
Cisco urges the application of patches and disabling outdated features to reduce risks.
Static Tundra's attacks on Ukrainian entities have increased since the Russia-Ukraine conflict began.

1 / 2