Canada CCCS News

Joint Advisory: Russian GRU Exploiting Vulnerable Routers to Steal Sensitive Information

Russian GRU threat actors are actively exploiting vulnerable SOHO routers to intercept and steal sensitive military, government, and critical infrastructure information worldwide, according to a joint advisory from the Cyber Centre, FBI, NSA, and international partners. International law enforcement has disrupted a GRU network of compromised SOHO routers used to facilitate malicious DNS hijacking operations. Network defenders and device owners are urged to remediate vulnerable edge devices by upgrading end-of-support hardware, applying latest firmware updates, changing default credentials, and disabling internet-facing remote management interfaces.

Cyber Centre Launches CIREN Initiative for Critical Infrastructure Cyber Readiness

The Canadian Centre for Cyber Security launched the Critical Infrastructure Resilience and Escalated Threat Navigation (CIREN) initiative on April 17, 2026, to help critical infrastructure organizations prepare for severe cyber incidents. The initiative addresses threats from state-sponsored actors, non-state cybercriminals, and AI-enabled attacks targeting energy, telecommunications, transportation, and water sectors. CIREN recommends three key actions: preparing to isolate critical systems for up to three months, developing and testing independent operational response plans, and planning for system rebuilding after severe incidents.