Risk and Telecommunications - Cyber Security Informer

Chinese Cyber Espionage Campaign Targeting U.S. Telecommunications

SecureWorld News

DECEMBER 6, 2024

State-sponsored threat actors continue to pose significant risks to critical infrastructure worldwide. telecommunications networks and other organizations. Critical infrastructure at risk : Telecommunications networks and organizations with global footprints are prime targets for intelligence-gathering campaigns.

Telecommunications

Telecommunications Risk Cybersecurity Government

Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia

Security Affairs

APRIL 28, 2025

Earth Kurma APT carried out a sophisticated campaign against government and telecommunications sectors in Southeast Asia. Threat actors use custom malware, rootkits, and cloud storage for espionage, credential theft, and data exfiltration, posing a high business risk with advanced evasion techniques.

Telecommunications

Telecommunications Government Malware Hacking

China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

Security Affairs

NOVEMBER 14, 2024

. “The US government’s continued investigation into the People’s Republic of China (PRC) targeting of commercial telecommunications infrastructure has revealed a broad and significant cyber espionage campaign.” The security breach poses a major national security risk.

Government

Government Telecommunications Surveillance Risk

T-Mobile is one of the victims of the massive Chinese breach of telecom firms

Security Affairs

NOVEMBER 18, 2024

“The US government’s continued investigation into the People’s Republic of China (PRC) targeting of commercial telecommunications infrastructure has revealed a broad and significant cyber espionage campaign.” The security breach poses a major national security risk. reads the joint statement issued by CISA and FBI.

Mobile

Mobile Telecommunications Data breaches Hacking

Australia, Canada, New Zealand, and the U.S. warn of PRC-linked cyber espionage targeting telecom networks

Security Affairs

DECEMBER 4, 2024

The US government’s continued investigation into the People’s Republic of China (PRC) targeting of commercial telecommunications infrastructure has revealed a broad and significant cyber espionage campaign.” The security breach poses a major national security risk. reads the report published by the telecommunications company. “To

Telecommunications

Telecommunications Government Mobile Cyber threats

China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

Security Affairs

NOVEMBER 14, 2024

. “The US government’s continued investigation into the People’s Republic of China (PRC) targeting of commercial telecommunications infrastructure has revealed a broad and significant cyber espionage campaign.” The security breach poses a major national security risk.

Government

Government Telecommunications Surveillance Risk

Flaw in Verizon call record requests put millions of Americans at risk

Malwarebytes

APRIL 4, 2025

Security researcher Evan Connelly discovered an enormous flaw affecting one of the largest telecommunications companies in the world that could allow any single person to view the recent incoming call log for potentially any Verizon phone number. “In short, anyone could lookup data for anyone,” Connelly said.

Risk

Risk Wireless Mobile Telecommunications

Germany limits police spyware use to serious crimes

Security Affairs

AUGUST 9, 2025

“When considered in an overall assessment, source telecommunications surveillance causes a very severe interference with both Art. On top of this, the integrity of an IT-system is adversely affected and its confidentiality is at risk.” . “The interference with both the fundamental right protecting IT-systems and Art.

Spyware

Spyware Surveillance Telecommunications Encryption

News alert: Knocknoc raises seed funding to scale its just-in-time network access control technology

The Last Watchdog

MARCH 19, 2025

” Knocknoc orchestrates network infrastructure to remove risk exposure by tying users’ network access to their SSO authentication status. ” Knocknoc is already in use in Australian and US critical infrastructure, large telecommunications networks and media companies.

Technology

Technology Telecommunications Media Authentication

T-Mobile detected network intrusion attempts and blocked them

Security Affairs

NOVEMBER 28, 2024

“Like the entire telecommunications industry, T-Mobile has been closely monitoring ongoing reports about a series of highly coordinated cyberattacks by bad actors known as “Salt Typhoon” that are reported to be linked to Chinese state-sponsored operations. ” reads the report published by the telecommunications company.

Mobile

Mobile Telecommunications Government Internet

Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

Security Affairs

JULY 16, 2025

This info could help future hacks and weaken state-level defenses against Chinese cyberattacks during crises, posing serious risks to U.S. The Salt Typhoon hacking campaign, active for 1–2 years, has targeted telecommunications providers in several dozen countries, according to a U.S. states and several territories.

Telecommunications

Telecommunications Hacking Government Data collection

Exposed eyes: 40,000 security cameras vulnerable to remote hacking

Security Affairs

JUNE 12, 2025

Over 40,000 internet-exposed security cameras worldwide are vulnerable to remote hacking, posing serious privacy and security risks. This highlights a serious privacy risk, as exposed devices can be accessed and monitored simply through direct HTTP requests.

Hacking

Hacking Telecommunications Surveillance Internet

Americans urged to use encrypted messaging after large, ongoing cyberattack

Malwarebytes

DECEMBER 5, 2024

Speaking to Reuters , a senior US official said the attack telecommunications infrastructure was broad and that the hacking was still ongoing. We don’t just report on threats – we help protect your social media Cybersecurity risks should never spread beyond a headline.

Encryption

Encryption Identity Theft Media Telecommunications

News alert: CyTwist launches threat detection engine tuned to identify AI-driven malware in minutes

The Last Watchdog

JANUARY 7, 2025

This incident highlights three key risks of AI-driven attacks: Sophistication: AI allows attacks to evolve in real-time, rendering static defenses obsolete. Advanced detection CyTwist recently demonstrated its advanced detection capabilities during a red team simulation with a major telecommunications provider.

Threat Detection

Threat Detection Engineering Malware Artificial Intelligence

Nation-State Hackers Exploit Windows Shortcut Zero-Day Vulnerability

SecureWorld News

MARCH 20, 2025

A long-standing security risk According to Trend Micro's Zero Day Initiative (ZDI) , the flaw has been present for at least eight years and remains unpatched by Microsoft. Detection and mitigation Despite the lack of an official patch from Microsoft, security professionals can take steps to mitigate the risk. lnk) files.

Cryptocurrency

Cryptocurrency Telecommunications Government Education

Nation-state actors and cybercrime gangs abuse malicious.lnk files for espionage and data theft

Security Affairs

MARCH 18, 2025

The attacks carried out by the threat actors aimed at organizations across the government, financial, telecommunications, military, and energy sectors in North America, Europe, Asia, South America, and Australia. This UI misrepresentation flaw (CWE-451) stops users from assessing file risks, aiding stealthy cyberattacks.

Cybercrime

Cybercrime Telecommunications Government Malware

APT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq

Security Affairs

MAY 13, 2025

The group targets government entities, Kurdish (political) groups like PKK, telecommunication, ISPs, IT-service providers (including security companies), NGO, and Media & Entertainment sectors. Once inside, they could access all user communications, steal data, impersonate users, and compromise credentials, posing major operational risks.

DNS

DNS Telecommunications Architecture Media

Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

Security Affairs

MARCH 27, 2025

Arkana Security, a new ransomware group, claims to have breached the telecommunications provider WideOpenWest (WOW!). is a US-based telecommunications company that provides broadband internet, cable TV, and phone services. The new ransomware group Arkana Security claims to have hacked US telecom provider WOW!, stealing customer data.

Hacking

Hacking Telecommunications Data breaches Surveillance

U.S. agency cautions employees to limit phone use due to Salt Typhoon hack of telco providers

Security Affairs

NOVEMBER 10, 2024

“Do NOT conduct CFPB work using mobile voice calls or text messages,” reads the email sent to the employees referencing a recent government statement acknowledging the telecommunications infrastructure attack.

Hacking

Hacking Internet Internet Government

Hi, robot: Half of all internet traffic now automated

Malwarebytes

APRIL 16, 2025

Similarly, take a minute to update the hardware on your home router, or ensure that your telecommunications provider does it if the router came from them. We dont just report on threatswe remove them Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.

Internet

Internet Internet Passwords Artificial Intelligence

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

In one example, the Chinese group APT5, operating from the most active nation state targeting VPN devices, maintained access to compromised VPN infrastructure in the telecommunications sector for months. Threat Hunting: Through GreyMatter Threat Hunting packages, we empower customers to proactively identify and mitigate risks.

VPN

VPN Authentication Ransomware Risk

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

SecureWorld News

MAY 16, 2025

Google's report confirms that UNC3944 continues to "demonstrate persistence and adaptability in targeting organizations, particularly those in the retail, hospitality, and telecommunications sectors." However, organizations with valuable data and critical availability needs are equally at risk." With active campaigns across the U.K.,

Retail

Retail Social Engineering Engineering Telecommunications

A cyber attack briefly disrupted South African Airways operations

Security Affairs

MAY 9, 2025

. “I want to assure all stakeholders, including our partners, customers, and dedicated employees, that we are taking every necessary step to determine the root cause of this incident, strengthen our security framework, and mitigate any potential risks. SAA remains committed to delivering safe, reliable, and resilient service.”

Cyber Attacks

Cyber Attacks Data breaches Telecommunications Financial Services

Canada Releases 2025 National Cyber Security Strategy

SecureWorld News

FEBRUARY 12, 2025

With cybercrime, state-sponsored attacks, and digital risks evolving rapidly, the strategy aims to modernize Canada's cyber defenses through enhanced collaboration, industry leadership, and proactive threat mitigation. Promote AI security guidelines to mitigate risks posed by generative AI and deepfake-driven cyber threats.

Cyber threats

Cyber threats Cybercrime Cybersecurity Government

Authorities Unsure if Spain, Portugal Power Outage Was a Cyber Attack

SecureWorld News

APRIL 29, 2025

The blackout, which began around midday local time, halted public transportation, grounded flights, and disrupted critical services such as hospitals and telecommunications. While the exact cause remains under investigation, authorities have not ruled out the possibility of a cyberattack.

Cyber Attacks

Cyber Attacks Energy and Utilities Telecommunications Government

Operation SyncHole: Lazarus APT goes back to the well

SecureList

APRIL 23, 2025

The campaign, dubbed “Operation SyncHole”, has impacted at least six organizations in South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, and we are confident that many more companies have actually been compromised.

Malware

Malware Software Encryption Internet

Securing Critical Infrastructure Against Cyberattacks

SecureWorld News

JULY 1, 2025

officials revealed that the Chinese group Volt Typhoon had maintained undetected access to power grids, ports, and telecommunications providers for as long as five years—long enough to map every breaker, valve, and switch they might someday wish to sabotage. Supply chain weaknesses compound the risk. In February, U.S.

Social Engineering

Social Engineering Engineering Phishing Healthcare

Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture

Security Boulevard

JUNE 6, 2025

There’s another PQC standard called Covercrypt from the European Telecommunications Standards Institute (ETSI). Embrace change: Stay attuned to emerging cyber risks and be ready to modify cybersecurity processes accordingly. Earlier this year, NIST picked its fifth PQC algorithm , expected to be available for use in 2027.

CISO

CISO Cybersecurity Cyber threats Government

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

OCTOBER 27, 2024

Chinese cyber spies targeted phones used by Trump and Vance Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement Change Healthcare data breach impacted over 100 million people OnePoint Patient Care data breach impacted 795916 individuals From Risk Assessment to Action: Improving Your DLP Response U.S.

Data breaches

Data breaches Healthcare Cybercrime Hacking

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JUNE 29, 2025

Petersburg Anthropic study: Leading AI models show up to 96% blackmail rate against executives Serial Hacker “IntelBroker” Charged For Causing $25 Million In Damages To Victims Police arrest five high-profile French hackers behind a notorious data theft forum Cybercriminals Abuse Open-Source Tools To Target Africa’s Financial Sector FBI Warns of Scattered (..)

Data breaches

Data breaches Ransomware Social Engineering Telecommunications

Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

FEBRUARY 15, 2025

Sorry, It’s Windows Malware Malware Mobile Indian Cyber Heist: FatBoyPanel And His Massive Data Breach Google Tag Manager Skimmer Steals Credit Card Info From Magento Site From South America to Southeast Asia: The Fragile Web of REF7707 Deep Learning-Driven Malware Classification with API Call Sequence Analysis and Concept Drift Handling Hacking (..)

Spyware

Spyware Firewall Artificial Intelligence Malware

Security Affairs newsletter Round 522 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

MAY 4, 2025

Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog The Turmoil Following BreachForums Shutdown: Confusion, Risks, and a New Beginning Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia A large-scale phishing campaign targets WordPress WooCommerce (..)

Cybercrime

Cybercrime Cyber Attacks Phishing Malware

The Seabed: A New Digital Frontier to Protect from Threats

SecureWorld News

JULY 22, 2025

Disrupting a single subsea telecommunications cable can incur "more than 24 million euros per day" in costs, while damages to oil and gas pipelines can easily reach "tens of billions of euros" for repairs alone. As one expert noted, "The maritime industry's digital transformation has heightened the risk of cyberattacks."

Surveillance

Surveillance Technology Artificial Intelligence Digital transformation

Securing US Telecom: Senator Proposes Law in Wake of Salt Typhoon Hack

SecureWorld News

DECEMBER 11, 2024

seeks to close critical cybersecurity gaps in the United States telecommunications infrastructure. telecommunications system. The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have since advised consumers to adopt encrypted messaging apps to mitigate the risks of interception. A wake-up call for U.S.

Telecommunications

Telecommunications Hacking Government Encryption

Cybersecurity Snapshot: NIST Aligns Its Privacy and Cyber Frameworks, While Researchers Warn About Hallucination Risks from GenAI Code Generators

Security Boulevard

APRIL 18, 2025

Plus, learn why code-writing GenAI tools can put developers at risk of package-confusion attacks. Both frameworks have a Core section, which outlines detailed activities and outcomes aimed at helping organizations discuss risk management. Check out NISTs effort to further mesh its privacy and cyber frameworks.

Risk

Risk Cybersecurity Data privacy Software

Don’t Be a Statistic: Proactive API Security in the Age of AI

Security Boulevard

JUNE 4, 2025

While these are prominent examples, numerous other API-related security incidents highlight the growing threat landscape: Optus: In 2022, the Australian telecommunications company suffered a major data breach where personal details of almost 10 million customers were exposed. The fine in this case was $13,000,000.

Data breaches

Data breaches Government Telecommunications Wireless

China-linked APT Salt Typhoon breached a ninth U.S. telecommunications firm

Security Affairs

DECEMBER 29, 2024

telecommunications company. “A White House official said Friday the US identified a ninth telecommunications company impacted by a wide-ranging Chinese espionage effort and that further steps are planned to curb cyberattacks from Beijing.” telecommunications firms were compromised in the attack. national security.

Telecommunications

Telecommunications Government Hacking Cyber threats

What Is Exposure Management and Why Does It Matter?

Security Boulevard

MARCH 17, 2025

In practice, even with reasonable service level agreements (SLAs), IT usually has to mitigate those risks. Just as alarming, the Tenable Cloud Risk Report 2024 shows that 74% of organizations have publicly exposed storage assets, including those containing sensitive data. As a result, security has become disjointed.

Risk

Risk Technology IoT Mobile

The Signal Chat Leak and the NSA

Schneier on Security

MARCH 31, 2025

Now, if the agency does that, it risks someone else finding the same vulnerability and using it against the US government. The biggest risk of eavesdropping on a Signal conversation comes from the individual phones that the app is running on. Smartphones present a similar trade-off.

Government

Government Telecommunications Hacking Spyware

Turning 56 Billion Attacks into a Proactive Defense Strategy: A CISO’s Guide to HYAS Insight

Security Boulevard

FEBRUARY 27, 2025

As the CTO of a telecommunications company said to me, HYAS doesnt just find the needle in the haystack, you find the needle in the stack of needles. This isnt a theoretical risk; its a reality for many organizations operating in an era where cyber threats are not only increasing in volume but also evolving in sophistication.

CISO

CISO Artificial Intelligence Internet Internet

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

SecureList

DECEMBER 18, 2024

targets companies from Russia and Belarus in various industries, including government and commercial organizations, entertainment and technology firms, telecommunications companies and industrial enterprises. Following these instructions will minimize the risks of compromise and increase your system’s resistance to possible attacks.

Encryption

Encryption Passwords Accountability Ransomware

Disbanding of DHS Cyber Safety Review Board a 'Gift' to China

SecureWorld News

JANUARY 23, 2025

telecommunications infrastructure, compromising critical systems and threatening national security. image or embed] Senator Ron Wyden ( @wyden.senate.gov ) January 21, 2025 at 2:32 PM Beyond the CSRB, other advisory boards focusing on artificial intelligence, critical infrastructure, and telecommunications were also disbanded.

Telecommunications

Telecommunications Artificial Intelligence Cyber threats Cybersecurity

Denmark warns of increased state-sponsored campaigns targeting the European telcos

Security Affairs

MARCH 16, 2025

The Danish Social Security Agency published a new threat assessment for the cyber threat to the telecommunications sector that highlights the risks for the telecom companies in Europe. This is because the extent of cyber espionage against the telecommunications sector in Europe has likely increased.” and Italy, a U.K.

Telecommunications

Telecommunications Cyber threats Hacking Mobile

3 Percent ($30B) of U.S. Military Funding Dedicated to Cybersecurity

SecureWorld News

JANUARY 9, 2025

Key cybersecurity provisions Securing communications networks Five billion dollars is allocated to help local telecommunications providers replace potentially insecure Chinese technology (e.g., Also driving the growth in cyberattacks is the lack of cost or risk imposed on perpetrators of these crimes. Huawei and ZTE equipment ).

Cybersecurity

Cybersecurity Manufacturing Surveillance Ransomware

Chinese Cyber Espionage Campaign Targeting U.S. Telecommunications

Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia

Trending Sources

China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

T-Mobile is one of the victims of the massive Chinese breach of telecom firms

Australia, Canada, New Zealand, and the U.S. warn of PRC-linked cyber espionage targeting telecom networks

China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

Flaw in Verizon call record requests put millions of Americans at risk

Germany limits police spyware use to serious crimes

News alert: Knocknoc raises seed funding to scale its just-in-time network access control technology

T-Mobile detected network intrusion attempts and blocked them

Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

Exposed eyes: 40,000 security cameras vulnerable to remote hacking

Americans urged to use encrypted messaging after large, ongoing cyberattack

News alert: CyTwist launches threat detection engine tuned to identify AI-driven malware in minutes

Nation-State Hackers Exploit Windows Shortcut Zero-Day Vulnerability

Nation-state actors and cybercrime gangs abuse malicious.lnk files for espionage and data theft

APT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq

Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

U.S. agency cautions employees to limit phone use due to Salt Typhoon hack of telco providers

Hi, robot: Half of all internet traffic now automated

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

A cyber attack briefly disrupted South African Airways operations

Canada Releases 2025 National Cyber Security Strategy

Authorities Unsure if Spain, Portugal Power Outage Was a Cyber Attack

Operation SyncHole: Lazarus APT goes back to the well

Securing Critical Infrastructure Against Cyberattacks

Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 522 by Pierluigi Paganini – INTERNATIONAL EDITION

The Seabed: A New Digital Frontier to Protect from Threats

Securing US Telecom: Senator Proposes Law in Wake of Salt Typhoon Hack

Cybersecurity Snapshot: NIST Aligns Its Privacy and Cyber Frameworks, While Researchers Warn About Hallucination Risks from GenAI Code Generators

Don’t Be a Statistic: Proactive API Security in the Age of AI

China-linked APT Salt Typhoon breached a ninth U.S. telecommunications firm

What Is Exposure Management and Why Does It Matter?

The Signal Chat Leak and the NSA

Turning 56 Billion Attacks into a Proactive Defense Strategy: A CISO’s Guide to HYAS Insight

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Disbanding of DHS Cyber Safety Review Board a 'Gift' to China

Denmark warns of increased state-sponsored campaigns targeting the European telcos

3 Percent ($30B) of U.S. Military Funding Dedicated to Cybersecurity

Stay Connected