A Salt Typhoon Is Always Bad News

Sadly we can’t go a day without a major data breach being announced, nor with a lot of security professionals facepalming as the obvious consequences of companies ignoring their advice are revealed.  This one has the possibility to be a bit worse than average, with three major broadband companies being the target.  Salt Typhoon is the name Microsoft gave to a Chinese based hacking group, they have a few other names which are listed in the Bleeping Computer article.  Regardless of what you call them, they’ve had their tendrils reaching into huge volumes of network traffic for an indeterminate amount of time.

Apparently the affected companies are doubling down on security through obscurity, as are talking to the public so we have no idea what has been intercepted nor how long the intrusion has been active.  We shall see how this develops, but with the history Salt Typhoon has of successfully penetrating networks across the globe, the news is unlikely to be good.