Telcos aren't saying how they fought back against China's Salt Typhoon attacks

A roundup of recent infosec events: OpenClaw AI skills will be scanned via VirusTotal but risks remain; US senators press AT&T and Verizon over the Salt Typhoon telecom breaches; Checkpoint reveals a new Chinese-linked APT (Amaranth-Dragon) rapidly weaponizing fresh vulnerabilities (including a WinRAR flaw) against Southeast Asian targets; Ukrainian authorities arrested a gang running a POS refund fraud; SmarterMail had multiple high-severity CVEs (including RCE and auth bypass) added to CISA's KEV list and are being exploited in ransomware campaigns; and several crypto-related kidnappings were reported in France.