CISA DIRECTOR SAYS THREAT HUNTERS SPOTTED SALT TYPHOON ON FEDERAL NETWORKS BEFORE TELCO COMPROMISES

Summary from the TLDR InfoSec newsletter

CISA's director Jen Easterly mentioned that threat hunters found suspicious activity from Salt Typhoon on federal networks before realizing it was part of a larger Chinese hacking campaign targeting U.S. telecommunications. By identifying and seizing virtual private servers leased by the hackers, CISA gained insight into the extent of the hacking campaign against telecommunications companies and provided assistance to potential victims. The incident highlights the ongoing challenge of defending critical infrastructure from foreign adversaries like China and the need for improved cybersecurity measures in vulnerable sectors like telecommunications.