# Russian state-sponsored APT clusters > As of 2026-07-30, Russian state-sponsored APT clusters is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning threat intel. - **Tracked threats:** 1 - **Categories:** THREAT_INTEL - **As of:** 2026-07-30 ## Tracked threats - [Sen. Wyden Urges Binding Federal Mandate to Purge Internet-Facing Legacy VPNs for Zero-Trust Remote Access](https://intel.threadlinqs.com/threat/TL-2026-1774) — MEDIUM ## Related CVEs 21 CVEs referenced by tracked Russian state-sponsored APT clusters activity. - [CVE-2025-41244](https://intel.threadlinqs.com/cve/CVE-2025-41244) - [CVE-2025-22226](https://intel.threadlinqs.com/cve/CVE-2025-22226) - [CVE-2025-22225](https://intel.threadlinqs.com/cve/CVE-2025-22225) - [CVE-2025-22224](https://intel.threadlinqs.com/cve/CVE-2025-22224) - [CVE-2025-0282](https://intel.threadlinqs.com/cve/CVE-2025-0282) - [CVE-2024-37079](https://intel.threadlinqs.com/cve/CVE-2024-37079) - [CVE-2024-24919](https://intel.threadlinqs.com/cve/CVE-2024-24919) - [CVE-2024-21887](https://intel.threadlinqs.com/cve/CVE-2024-21887) - [CVE-2024-20359](https://intel.threadlinqs.com/cve/CVE-2024-20359) - [CVE-2024-20358](https://intel.threadlinqs.com/cve/CVE-2024-20358) - [CVE-2024-20353](https://intel.threadlinqs.com/cve/CVE-2024-20353) - [CVE-2023-46805](https://intel.threadlinqs.com/cve/CVE-2023-46805) - [CVE-2023-27997](https://intel.threadlinqs.com/cve/CVE-2023-27997) - [CVE-2021-22900](https://intel.threadlinqs.com/cve/CVE-2021-22900) - [CVE-2021-22894](https://intel.threadlinqs.com/cve/CVE-2021-22894) - [CVE-2021-22893](https://intel.threadlinqs.com/cve/CVE-2021-22893) - [CVE-2020-8243](https://intel.threadlinqs.com/cve/CVE-2020-8243) - [CVE-2020-5902](https://intel.threadlinqs.com/cve/CVE-2020-5902) - [CVE-2019-19781](https://intel.threadlinqs.com/cve/CVE-2019-19781) - [CVE-2019-11539](https://intel.threadlinqs.com/cve/CVE-2019-11539) - [CVE-2019-11510](https://intel.threadlinqs.com/cve/CVE-2019-11510) ## Full data Infrastructure, IOC values and detection queries (Splunk SPL / Microsoft KQL / Sigma) require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp Canonical: https://intel.threadlinqs.com/actor/Russian%20state-sponsored%20APT%20clusters