The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Salt Typhoon, a Chinese state-sponsored threat actor, is still present on telecoms networks.
CISA released guidelines to help organizations defend against Salt Typhoon and other similar threats.
Salt Typhoon is part of a wider campaign that targets critical infrastructure and engages in cyber-espionage.
The guidance advises strengthening network visibility, hardening systems and devices, and prioritizing secure-by-design configurations.