Restart Your Routers
The NSA and FBI issued a joint advisory in April warning that Russian GRU-linked cyber actors (APT28, Fancy Bear, and Forest Blizzard) have been exploiting vulnerable routers to steal credentials and sensitive information, targeting military, government, and critical infrastructure organizations worldwide.
The specific risk: small-office/home-office routers with default credentials, unpatched firmware, or remote management interfaces exposed to the internet.
If you allow remote work, this is a direct concern.
Recommended steps: change default router credentials, disable internet-facing remote management, update firmware, and replace end-of-support devices.