The US Won't Sanction China for Salt Typhoon Hacking

A security roundup reports several incidents: an AI image startup left a database unsecured exposing over one million user images (many nude, including minors); Kohler's Dekota smart-toilet device falsely claimed end-to-end encryption and exposes user images to the vendor; and large-scale nation-state espionage (Salt Typhoon) allegedly infiltrated major US telecoms, exposing real-time calls and texts, while the Brickstorm malware campaign has infected dozens of organizations since 2022 with average dwell time of 393 days.