Cybersecurity Alert: Russian Hackers Target Routers Worldwide, CISA Reports Zero-Day Exploits — July 13, 2026

Key points

• •On July 13, 2026, multiple US agencies including NSA, CISA, FBI, and NCSC issued urgent worldwide warnings about Russian hacker groups exploiting vulnerabilities in internet-facing routers, posing a significant risk to critical infrastructure and national security systems globally. These coordinated alerts underscored the need for enhanced router security to prevent further breaches and espionage activities.[LinkedIn][The Manila Times]
• •The U.S. Cybersecurity and Infrastructure Security Agency (CISA) publicly disclosed two severe zero-day vulnerabilities affecting Joomla extensions iCagenda and Balbooa, with active exploitation reported. The inclusion of these flaws on CISA’s vulnerability list on July 13, 2026, signals ongoing threats to websites relying on these widely used CMS plugins.[The Hacker News RSS]
• •The U.S. Department of War revised its Cybersecurity Maturity Model Certification (CMMC) requirements as of July 13, 2026, aiming to bolster cybersecurity compliance across defense contractors and federal agencies. These updates intend to raise security standards amid increasing cyber threats targeting defense infrastructure.[U.S. Department of War (.gov)]
• •CISA shared comprehensive lessons from recent federal cyber incidents on July 13, 2026, emphasizing a shift towards more proactive and resilient cybersecurity practices across government networks to mitigate sophisticated cyber threats and reduce breach impact.[ExecutiveGov]
• •Ransomware groups have adapted their criminal tactics by frequently changing their identities to avoid detection and prosecution, complicating cybersecurity defenses and law enforcement efforts. This tactic, highlighted on July 13, 2026, reflects the ongoing evolution and sophistication of ransomware threat actors.[PYMNTS.com]
• •On July 13, 2026, the UK and allied nations issued a joint appeal to critical infrastructure sectors to strengthen cybersecurity defenses against Russian intelligence operations targeting essential industries. This regional cooperation aims to counteract growing cyber espionage and sabotage risks in geopolitically sensitive sectors.[National Cyber Security Centre]
• •Forg365, a newly identified phishing-as-a-service platform, launched an advanced campaign targeting Microsoft 365 accounts using techniques such as device code phishing, adversary-in-the-middle attacks, and AI-created lures, detected on July 13, 2026. This operation demonstrates the increasing use of AI and sophisticated methods in phishing attacks targeting enterprise environments.[The Hacker News RSS]
• •A novel AI-powered attack method involving an AI-generated PowerShell script aimed at mapping Active Directory structures was reported on July 13, 2026, signaling a new vector of automated and intelligent attack tools escalating threats against corporate directory services.[The Hacker News]
• •NIST released Special Publication 1326 on July 13, 2026, to guide organizations in conducting thorough cybersecurity due diligence on suppliers. This publication addresses supply chain risk management challenges and helps enterprises strengthen cybersecurity postures by vetting third-party vendors more effectively.[Industrial Cyber]

Relevant articles