China’s Salt Typhoon Spies Are Still Hacking Telecoms—Now by Exploiting Cisco Routers
China’s Salt Typhoon Spies Are Still Hacking Telecoms—Now by Exploiting Cisco Routers
Despite high-profile attention and even US sanctions, the group hasn’t stopped or even slowed its operation, including the breach of two more US telecoms.
Almost as if those "backdoors only for the good guys" ideas are bad ideas afterall...
something something leopards and faces
If only the US had a cohesive, cooperative, positive reinforcing, mutually benefiting coordinated government organization staffed by people that mutually trusted one another and their leadership for the protection and benefit of their nation.
Best I can do is a hollow shell piloted by the most corrupt individuals which only exists to the extent that it channels tax dollars into donors pockets.
no good. beyond using a VPN and dnssec, how can end users protect themselves from this?
Probably make sure you have your own firewall on your private network, and if anything is exposed to the internet, make sure it's locked down as tight as you can. For the record, very few people outside of professionals and enthusiasts are running Cisco equipment in their homes.
Against this specifically?
- Don't ever expose your firewall/router management access to the Internet.
- Install firmware updates asap.
- Don't be a an attractive target for nation-state hackers.
Additionally, ensure that you are following best practices for your own data by enabling MFA wherever you can and dont re-use passwords for any service.
Meanwhile, the UK is asking for blanket access to all data from Apple.
Also, how expensive is it to get updates from Cisco and patch those routers?