CISA director says threat hunters spotted Salt Typhoon on federal networks before telco compromises 

CISA Director Jen Easterly described how agency threat hunters discovered activity from the Chinese APT 'Salt Typhoon' on U.S. federal and commercial networks, revealing compromises of at least nine U.S. telecommunications firms, collection of phone geolocation data, and access to some phones. CISA coordinated seizures of actor-leased virtual servers, provided victim notifications and technical assistance, and warned that outdated telecom architectures and edge devices are being exploited by state-sponsored groups alongside other campaigns like Volt Typhoon.