This is your Digital Dragon Watch: Weekly China Cyber Alert podcast.
Hey there, I'm Ting, your go-to expert for all things China and cyber. Let's dive right into the latest Digital Dragon Watch: Weekly China Cyber Alert.
Over the past week, we've seen some significant China-related cybersecurity incidents that have left many scrambling. The Salt Typhoon crew, a Chinese government-backed hacking group, has been on a spree, compromising at least seven more devices linked to global telecom providers and other organizations. This is in addition to their previous victim count, which included nine US telecommunications companies and government networks[1][4].
According to Recorded Future's Insikt Group, these intrusions happened between December 2024 and January 2025. The hackers exploited vulnerabilities in Cisco devices, specifically CVE-2023-20198 and CVE-2023-20273, to gain root access and add a generic routing encapsulation (GRE) tunnel for persistent access to the victim's network. The targeted sectors include US internet service and telecommunications providers, a US affiliate of a UK-based telecom provider, an Italian ISP, and two other telecommunications firms in South Africa and Thailand[1][4].
But that's not all. Salt Typhoon also targeted universities, including UCLA, Loyola Marymount University, Utah Tech University, and California State University, to access research related to telecommunications, engineering, and technology[1][4].
Now, let's talk about the US government's response. The Biden administration has been focusing on regulation and intelligence-sharing to combat these cyber threats. However, with the incoming administration, we might see a shift towards retribution. David Sedney, former deputy assistant secretary of defense, warns that things are likely to get worse before they get better[2].
In light of these escalating cyber attacks, experts recommend that organizations prioritize patching their Cisco devices and securing their networks. The FCC has also urged telecom companies to secure their networks from foreign spies, emphasizing that it's a legal requirement[1].
To protect yourself, make sure to keep your software up to date, use strong passwords, and be cautious of phishing attempts. It's also essential to stay informed about the latest cyber threats and take proactive measures to defend your digital assets.
That's all for now. Stay safe, and I'll catch you in the next Digital Dragon Watch.
For more http://www.quietplease.ai
Get the best deals https://amzn.to/3ODvOta