US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups

Multiple high-impact cybersecurity developments: US and allied governments warn Russian state-linked APT groups are actively targeting poorly secured routers and network devices to access critical infrastructure. A new Windows Privilege Escalation PoC called LegacyHive (targeting ProfSvc) works against fully patched systems, and Microsoft’s July 2026 Patch Tuesday fixed a record 621 CVEs (including exploited zero-days). Active exploitation was confirmed against SonicWall SMA 1000 appliances (two zero-days), and CISA added SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities (KE