A joint advisory from US and allied agencies warns that Russian actors are exploiting weak credentials and old flaws to compromise critical infrastructure devices globally. The attacks specifically target misconfigured routers and networking equipment.