CISA planning investigation from tomorrow.
Telecommunications firms around the world were breached in attacks by the Chinese state-backed threat operation Salt Typhoon in the past couple of years.
Anne Neuberger, deputy national security advisor for cyber and emerging technology in the U.S Government said in a press briefing that there had been a ‘prolonged compromise‘ of American telco companies.
However there is no evidence so far to suggest the exfiltration of classified communications, reports BleepingComputer.
This week CISA and the FBI revealed the persistence of Salt Typhoon within the infiltrated telco networks, prompting guidance urging the immediate switch to encrypted messaging apps.
CISA director Jen Easterly has confirmed that an investigation into the attack campaign by Salt Typhoon will be commenced by the Cyber Safety Review Board on Friday.
"We wanted to make sure we did it before the holidays, so we could start writing out how we think about the problem, and then ultimately, what are the key recommendations that we need to bring forward to enable us to strengthen the security of the telecommunications networks going forward," said Easterly.
According to The Record, Easterly added that the CSRB will be working toward providing guidance that could be implemented not only among telecommunications firms, but also among other infrastructure with network edge systems.
Written by
Dan Raywood
Senior Editor
SC Media UK
Dan Raywood is a B2B journalist with more than 20 years of experience, including covering cybersecurity for the past 16 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Conference, BSides Scotland, Steelcon and ESET Security Days.
Outside work, Dan enjoys supporting Tottenham Hotspur, managing mischievous cats, and sampling craft beers.
