U.S. telecommunications firms were confirmed by the FBI and Cybersecurity and Infrastructure Security Agency to have had customer call records, private communications of a few individuals, most of whom are in the government, and sensitive information that require law enforcement requests to have been exfiltrated by Chinese state-sponsored threat actors as part of a sweeping cyberespionage campaign, reports The Record, a news site by cybersecurity firm Recorded Future.
Additional details regarding the campaign which was initially reported by the New York Times, the Wall Street Journal, and Politico to have been conducted by Salt Typhoon operation to target the campaigns of President-elect Donald Trump and Vice President Kamala Harris are expected to emerge amid ongoing investigation, said the FBI and CISA in a joint advisory.
Such an attack should prompt federal action against negligent organizations to bolster cyberattack defense, noted Sen. Ron Wyden, D-Ore., in a letter to Federal Communications Commission Chair Jessica Rosenworcel and Justice Department Attorney General Merrick Garland.
"The security of our nation's communications infrastructure is paramount, and the government must act now to rectify these longstanding vulnerabilities," Wyden wrote.
CyberScoop reports that the incoming Trump administration has been urged by Deputy National Security Adviser for Cyber and Emerging Technologies Anne Neuberger to establish a framework for minimum cyber regulations for critical infrastructure organizations and expand cybersecurity partnerships with other countries within its first 100 days.
Mounting tensions in the Middle East have been exploited by Hamas-affiliated threat operation WIRTE which had been linked to the Gaza Cyber Gang, also known as TA402 and Molerats as it sought to broaden intrusions against organizations across Israel, according to The Hacker News.