APT28 exploit routers to enable DNS hijacking operations

The UK NCSC published multiple high‑priority advisories: Russian actor APT28 is exploiting vulnerable routers to perform DNS hijacking for man‑in‑the‑middle attacks and credential/token theft; organisations are urged to investigate and secure edge devices. The NCSC also warns of an unauthenticated remote‑code‑execution vulnerability affecting F5 BIG‑IP Access Policy Manager, multiple recently disclosed Citrix NetScaler ADC/Gateway vulnerabilities, and active exploitation of Cisco Catalyst SD‑WAN — all requiring immediate mitigation and compromise investigation. Additional guidance covers risks