The FBI has released a PSA warning that Russian FSB cyber actors are exploiting Simple Network Management Protocol (SNMP) and end-of-life networking devices running an unpatched vulnerability in Cisco Smart Install (SMI) to target entities across critical infrastructure sectors.
The actors have used unauthorized access to conduct reconnaissance in the victim networks, which revealed their interest in protocols and applications commonly associated with industrial control systems.
https://www.ic3.gov/PSA/2025/PSA250820