More victims of China's Salt Typhoon crew emerge: Telcos just now hit via Cisco bugs

China's Salt Typhoon spy crew exploited vulnerabilities in Cisco devices to compromise at least seven devices linked to global telecom providers and other orgs, in addition to its previous victim count. The intrusions happened between December 2024 and January 2025 with the Chinese government snoops attempting to exploit more …

[IGotOut]

So what they going to do?

The current US government doesn't give a shit.

The telcos won't give a shit unless it means free money (see above).

So looks like China will be able to keep checking that their buddy Musk is doing his job for them.

[sanmigueelbeer]

Reluctantly, I will "understand" why some of the affected users are unable to upgrade to the fixed versions, however, I see no excuse whatsoever to the reluctance to apply the non-disruptive workaround and disable HTTP/HTTPS.

[Giles C]

It a

The first thing I would do is look for the mitigation step (in this case disable web services) do that to remove the vector and then get a change raised to upgrade the software.

Failing to close down the vector is just stupid. It is either incompetence or a very slack attitude. Do these people not run penetration test8ng against their own kit or at least employ a company to do so….

It is akin to a farmer having cattle escape through a broken gate. Yes a new gate may be needed but a makeshift barrier will stop escapes until you can do the work properly.

If you don’t do that then prepare to spend hours searching for rogue cows.

[UnknownUnknown]

Sorry … there is no excuse. Esp fixes from 2023.

Sloppy, lazy and complacent.

This is basically digital warfare, with no apparent counter-insurgency. Keep importing those iPhones and tat for sale in Walmart, Target, Tesco, Aldi and B&M.

Tariffs for Fentanyl- tick

Tariffs for digital terrorism - Nada.

<\shrug>

[Omnipresent]

A war unlike the previous

We are at war people. The worst part about it is that the very people that were supposed to protect us, were more than willing to play right into the bad guys hands. Our "protections" are 19 year old kids that are more than willing to run and join the red army after being turned into monsters on social media. The software and hardware of our addiction was provided by the enemy. You might as well have turned everyone into opium addicts. Everything was a dream, and nothing is real. Guess where it all leads back to? The man in the kremlin. Does he still have a twitter account? I haven't been anywhere near that site since the early days, when I was completely hacked by the russians.