Strengthening America’s Resilience Against the PRC Cyber Threats - CISA
3 days ago · Over the past two years, CISA and our federal government and industry partners have been laser focused on deterring China’s cyber aggression, working with critical infrastructure entities across the nation to identify and evict Chinese cyber actors, whether they are focused on espionage—such as the recent “Salt Typhoon” campaign against ...
CISA Publishes Salt Typhoon Guidance, Still Unraveling Hacks
Dec 3, 2024 · The Cybersecurity and Infrastructure Security Agency (CISA) published guidance today that provides best practices to protect against cyberattacks by Salt Typhoon – a People’s Republic of China (PRC)-affiliated threat actor that has compromised networks of major global telecommunications providers.
PRC State-Sponsored Actors Compromise and Maintain Persistent ... - CISA
Feb 7, 2024 · Volt Typhoon aims to obtain administrator credentials within the network, often by exploiting privilege escalation vulnerabilities in the operating system or network services. In some cases, Volt Typhoon has obtained credentials insecurely stored on …
CISA director says threat hunters spotted Salt Typhoon on federal ...
3 days ago · Salt Typhoon is the name given to a Chinese hacking group that has compromised at least nine U.S. telecommunications firms, ... CISA maintains a list of nearly 500 “systemically important” critical infrastructure entities that are given extra attention and resourcing from the federal government, including red-teaming and tools for ...
CISA clocked Salt Typhoon in federal networks before telecom …
2 days ago · CISA’s observations didn’t prevent Salt Typhoon from attacking the telecom networks en masse, but Easterly presented the agency’s threat hunting and intelligence gathering capabilities as an ...
CISA Issues Guidance to Telecom Sector on Salt Typhoon
Dec 4, 2024 · Concerns over the extent of China-backed Salt Typhoon's intrusions into US telecom networks have prompted the US Cybersecurity and Infrastructure Security Agency (CISA), the National...
Salt Typhoon breach was first detected on federal networks, CISA …
2 days ago · Easterly expanded on her comments in a blog post that was also published Wednesday, writing that the government’s understanding of the scope of Salt Typhoon “was the fact that CISA threat ...
Hundreds of organizations were notified of potential Salt Typhoon ...
Dec 23, 2024 · CISA last week issued mobile phone security guidelines designed for high-value political officials whose communications were potentially hoovered up by Salt Typhoon.
Infrastructure Security Agency (CISA) is the SRMA for the communications sector (in which the firms hacked by Salt Typhoon belong). Congress may choose to further examine, clarify, and define SRMAs’ roles in cybersecurity risk management. Factors for consideration could include the extent to which SRMAs understand sector companies and their ...
US officials recommend using encrypted messaging after telecom …
Dec 4, 2024 · FBI and CISA officials said Tuesday that attackers connected to Chinese group Salt Typhoon could still have access to US telecommunication networks.