● Covered by 1 source · 1 reportMedium impact1 neutral
Senators introduce bill for voluntary telecom cybersecurity rules after Salt Typhoon hacks
Key points
- Senators Warner and Cruz introduced a new telecom cybersecurity bill.
- The bill proposes voluntary best practices and an optional certification.
- It creates a Telecommunications Cybersecurity Working Group within NTIA.
- The bill responds to the Salt Typhoon attacks by Chinese hackers.
New Cybersecurity Legislation Proposed
U.S. Senators Mark Warner (D-VA) and Ted Cruz (R-TX) have introduced the Telecommunications Cybersecurity and Resilience Act. This bipartisan bill aims to establish a framework for voluntary cybersecurity best practices within the telecommunications industry and create an optional certification program for companies that adopt these standards.
Response to Salt Typhoon Attacks
The introduction of this bill is a direct response to the Salt Typhoon attacks, which involved Chinese hackers breaching nearly all major U.S. telecommunications giants over several years. Senator Warner stated that the Salt Typhoon intrusion was the "worst telecom hack in our nation’s history," highlighting the vulnerability of critical infrastructure.
The attacks reportedly allowed hackers to gain broad, years-long access to at least nine telecommunications companies, including Verizon, AT&T, and Lumen. The intruders accessed Call Detail Records, which contain granular data on communications, and in some cases, intercepted audio and text.
Working Group Formation
A key component of the proposed bill is the creation of a Telecommunications Cybersecurity Working Group within the National Telecommunications and Information Administration (NTIA). This group will comprise representatives from telecom companies, suppliers, cybersecurity experts, and federal officials. Its mandate is to develop the voluntary cybersecurity best practices for the industry.
Context of Previous Regulations
This legislative effort follows the repeal of previous telecom regulations approximately one year ago, which had been implemented in the wake of the Salt Typhoon incidents. Investigations into these incidents, prompted by bipartisan concern, indicated that the Salt Typhoon campaign would have been significantly more difficult and costly for the attackers if telecoms had maintained minimum practices like secure configurations and up-to-date patching.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Senators Mark Warner and Ted Cruz introduced the Telecommunications Cybersecurity and Resilience Act, which proposes voluntary cybersecurity best practices and an optional certification for the telecommunications industry. This initiative responds to the Salt Typhoon attacks, where Chinese hackers breached major U.S. telecom companies over several years, accessing sensitive call data.