Key Takeaways
- Chinese intelligence is continuing a massive hack of US telecom networks in a cyber campaign known as "Salt Typhoon", which allows them to access the communications of almost every American.
- The hack has been ongoing for at least two years, and despite evidence from several intelligence agencies, the FBI claims US networks are "pretty clean".
- The Trump administration has cut the number of professionals in the government who have the expertise to tackle a campaign such as Salt Typhoon.
- US telecom networks are more vulnerable to hacking than those in Canada and Europe due to their complex and outdated infrastructure.
- Legislation to require telecoms companies to adhere to minimum cyber standards has failed to gain traction due to the estimated billions of dollars it would cost to upgrade the networks.
Introduction to the Salt Typhoon Cyber Campaign
The US is facing a massive cyber threat from Chinese intelligence, who are continuing to hack into US telecom networks through a campaign known as "Salt Typhoon". This campaign has been ongoing for at least two years and has allowed the Chinese to access the communications of almost every American. According to Senator Mark Warner, the top Democrat on the Senate intelligence committee, the Chinese hackers, directed by China’s Ministry of State Security intelligence agency, could access the unencrypted phone communications of almost anyone in the US. This is a serious concern, as it not only puts the personal data of Americans at risk but also poses a significant threat to national security.
Government Response to the Salt Typhoon Cyber Campaign
The government’s response to the Salt Typhoon cyber campaign has been sluggish, with conflicting accounts from different agencies. Senator Warner recently received a briefing on the campaign, which he described as "really frustrating" due to the conflicting information. The FBI claims that US networks are "pretty clean", despite evidence from several intelligence agencies suggesting that the Chinese are still infiltrating the system. This lack of urgency and coordination has led to criticism of the government’s handling of the situation. Jake Sullivan, who served as national security adviser when Salt Typhoon was discovered, described the campaign as unique due to its "sheer scale of access". The government’s failure to address this issue effectively has led to concerns that it may take a "catastrophic event" before the US government becomes more serious about tackling Salt Typhoon.
Vulnerabilities Exposed by Salt Typhoon
The Salt Typhoon cyber campaign has exposed vulnerabilities in US telecom networks, which could be exploited by other countries such as Russia and Iran. According to Senator Warner, Russia is already trying to take advantage of these vulnerabilities, and it is likely that other countries will follow suit. This highlights the need for urgent action to address the issue and prevent further exploitation. The US telecom networks are particularly vulnerable due to their complex and outdated infrastructure, which is a "hodgepodge of a whole series of networks that have been cobbled together" without much attention to cybersecurity. In contrast, telecom networks in Canada and Europe are more secure due to their more streamlined and modern infrastructure.
Legislation and Funding to Address the Issue
Senator Warner is trying to gain support for legislation that would require telecoms companies to adhere to minimum cyber standards. However, this has failed to gain traction due to the estimated billions of dollars it would cost to upgrade the networks. The cost of addressing the issue is a significant barrier, and it may require significant investment to rip out and replace the equipment that needs to be upgraded. The Trump administration has also cut the number of professionals in the government who have the expertise to tackle a campaign such as Salt Typhoon, which has further hindered the government’s ability to address the issue. According to Dennis Wilder, a former top CIA China expert, the administration’s decisions have reduced the federal effort against cybersecurity threats that endanger national security.
Conclusion and Call to Action
The Salt Typhoon cyber campaign is a serious threat to US national security and the personal data of Americans. The government’s sluggish response and conflicting accounts from different agencies have hindered efforts to address the issue. It is essential that the government takes urgent action to address the vulnerabilities exposed by Salt Typhoon and invests in upgrading the US telecom networks to make them more secure. This will require significant funding and a coordinated effort from different agencies. The cost of addressing the issue may be high, but the cost of inaction could be even higher. It is crucial that the government prioritizes cybersecurity and takes a proactive approach to protecting American data and national security.