Senator Questions AT&T and Verizon’s Response to Salt Typhoon Cyber Attacks

Senator Maria Cantwell, a prominent member of the Senate Committee on Commerce, Science, and Transportation, has expressed skepticism about the security measures taken by AT&T and Verizon following the Salt Typhoon cyber attacks. These attacks, which have been described as the worst telecom hack in U.S. history, involved Chinese-linked hackers gaining extensive access to the networks of these carriers. The fallout from these breaches has prompted Cantwell to demand that the CEOs of both companies appear before the committee to explain their actions.

In her letter, Cantwell highlighted that both AT&T and Verizon have withheld security assessments conducted by Mandiant after the attacks were disclosed in December 2024. These assessments reportedly detail the steps taken to secure their networks and remove the Salt Typhoon threat. The senator’s concerns are compounded by reports indicating that the telecommunications providers have taken minimal protective actions due to cost considerations.

In addition to the Salt Typhoon incident, the article also mentions a newly discovered Chinese cyber espionage group named Amaranth-Dragon, which is actively targeting Southeast Asian countries. This group has been quick to exploit recently disclosed vulnerabilities, demonstrating the ongoing threat posed by advanced persistent threat (APT) actors.

Implications for Users and Organizations

The lack of transparency from AT&T and Verizon regarding their security assessments raises significant concerns for consumers relying on these networks for communication. Without clear information about the measures taken to mitigate risks, users may remain exposed to potential threats.

Organizations should take note of the ongoing vulnerabilities in telecom networks and consider enhancing their own security protocols. This includes monitoring for any unusual activity on their networks and ensuring that they have robust incident response plans in place.

The emergence of groups like Amaranth-Dragon highlights the need for vigilance against cyber espionage tactics. Users should be aware of the potential for targeted attacks that exploit recent vulnerabilities and stay informed about security updates related to their software and systems.

Overall, the situation underscores the importance of accountability and transparency in the telecommunications sector, as well as the need for consumers and organizations to remain proactive in their cybersecurity efforts.