βThe fundamental issue here is that key pieces of our critical infrastructure, for example network technologies like core routers, remain far too easy to compromise and gain persistence on,β said David Shipley of Beauceron Security. βChinaβs rampant success is the bill come due for insecurity-by-design.β
Critical infrastructure, sensitive comms targeted
This week, intelligence agencies in the US, UK, Canada, Australia, New Zealand, Finland, Germany, Italy, Czech Republic, Japan, Poland, Spain, and the Netherlands issued a joint cybersecurity advisory about Salt Typhoon.
The group became notorious after having breached major US telecom and internet service providers (ISPs), including AT&T, Verizon, T-Mobile, Lumen Technologies, Charter, Consolidated, and Windstream Communications in recent months in an attempt to access sensitive communications. They also hacked the US National Guard for 9 months and accessed networks in every state, stealing credentials, personal data, and network diagrams.
