NEWS: The massive Chinese hack of U.S. telecoms breached firms Charter, Consolidated and Windstream as part of a historic espionage campaign. Security vendor Fortinet was a key intrusion point. Investigators are still grappling with the damage. That and much much more: www.wsj.com/tech/cyberse... - ThreadSky

dustinvolz.bsky.social • 56 days ago

NEWS: The massive Chinese hack of U.S. telecoms breached firms Charter, Consolidated and Windstream as part of a historic espionage campaign. Security vendor Fortinet was a key intrusion point. Investigators are still grappling with the damage.

That and much much more:

https://www.wsj.com/tech/cybersecurity/typhoon-china-hackers-military-weapons-97d4ef95

Comments

dustinvolz.bsky.social•56 days ago

In one telecom intrusion hackers had access to wiretap systems for 18 months. That and much more in this deep dive into both Salt Typhoon and Volt Typhoon, cyberattacks that have upended U.S. understanding of Chinese cyber ops. https://www.wsj.com/tech/cybersecurity/typhoon-china-hackers-military-weapons-97d4ef95

dustinvolz.bsky.social•56 days ago

Come for the months of reporting, stay for the Whataburger cameo. https://www.wsj.com/tech/cybersecurity/typhoon-china-hackers-military-weapons-97d4ef95

baseless-fabric.privac.ie•56 days ago

Does the upending of U.S. understanding of cyberops include the notion that there is no such thing as a backdoor only for the "good guys"?

coldwarkiid.bsky.social•56 days ago

With the caveat that the back door has a shelf life for the “good guys” until it’s discovered. They usually know this going in and don’t care if they’re getting the access and advantage up front.

wadewarrens.bsky.social•56 days ago

Will the Chief Information Officers of these companies face any consequences for their dereliction of duty to secure their computer systems?

Or do company stockholders simply remain insufficiently aggrieved?

catgirlhacks.com•56 days ago

this! are they gonna axe their IT teams who're underfunded and whose leadership forced them into using known-vulnerable, exploited, and unpatched systems and blame them, or are we firing some CISOs and having some actual accountability for why they were so irresponsible with our telecom infra?

argyel.com•56 days ago

FortiWhoops

mkwilson27.bsky.social•56 days ago

The Cold War never ended. We need to understand this and act accordingly…

backlitkeyboard.bsky.social•56 days ago

Wasted effort. Trump would have given them anything they wanted for a Trump Hotel in Beijing.

edsjoh.bsky.social•56 days ago

This is cyber warfare by china. Let’s wake up to this.

drinkhat.bsky.social•56 days ago

How is your average person supposed to relate to or care about this? I have to pick up groceries and pack for a move. These are real things.

waxmonkey.bsky.social•56 days ago

easily

you can both pick up groceries and care about things

drinkhat.bsky.social•56 days ago

What does me caring accomplish? What could I possibly do to make massive telecom companies care about security? Nothing I do or will ever do will affect the things at play in this story.

They just want people to get mad at China.

waxmonkey.bsky.social•56 days ago

you should be mad at the actions of the chinese government and this story lays out why

you can choose to care or choose not to care but dont be surprised when normal people care

drinkhat.bsky.social•56 days ago

I’m 100% certain the US Government is involved in the exact same shit against China and many others. So why China, specifically? I prefer not to let the National Security apparatus choose my opinions.

waxmonkey.bsky.social•56 days ago

read the story

tapaseaswar.com•56 days ago

This isn't even close to being a full or proper answer here, but start by using encrypted messaging as your default.

https://www.tapaseaswar.com/2025-01-02-stop-using-sms-encrypted-messaging-signal-whatsapp-rcs/

drinkhat.bsky.social•56 days ago

You’re kinda missing the point of my flippancy. The average person is not even capable of understanding the significance of this.

They think “China bad” which is, imagine this, the entire point.

catgirlhacks.com•56 days ago

i agree with you that the effects should be made more clear, but the point is this: cops and hackers can/are reading our text messages and listening to our calls, including the codes you use to access your bank, etc. it's significant when you put it that way

saemg.bsky.social•56 days ago

yeah

the story should be the US, along with forcing its "allies", foisted insecure systems upon us, and the entirely predictable consequence happened

make this, along with other things, a voting issue going forward

or just stick with only this one super power is villainous

amarkit.bsky.social•56 days ago

Keep your software and the firmware on your home network devices updated.

drinkhat.bsky.social•56 days ago

Seems like something that the ISPs could be doing on our behalf?

amarkit.bsky.social•56 days ago

Very possibly, depending on whether you own or rent your gear from your ISP. Some may actually be doing this, I don’t know to be honest. Apparently, according to the reporting, the FBI did it for some without their knowledge.

catgirlhacks.com•56 days ago

some do, i can confirm. i have personal in-depth experience with updating rented routers from the ISP side of things.

drinkhat.bsky.social•56 days ago

Nice!! This needs to become absolutely standard! People can’t be trusted to do their own infosec

drinkhat.bsky.social•56 days ago

Well congress should get to work because expecting the average Joe to know how to even log into their router is already accepting defeat.

valerietheitalian.bsky.social•56 days ago

Good lol

Comments

Posting Rules

Reply