AWS published a report on GRU's hacks of critical infrastructure

The report highlights a shift from vulnerability exploitation to targeting misconfigured devices