Host of House panels getting briefed on major Chinese hacker telecom breaches

The reported scope of the Salt Typhoon hacks has expanded in recent days and weeks, from the incoming president to top U.S. officials.

Executive branch agencies were briefing a slate of House committees Thursday about a Chinese hack that infiltrated major telecommunications companies and reportedly targeted the phones of top members of the Donald Trump campaign — including the president-elect himself — and top U.S. officials, according to a source familiar with the plans.

The committees receiving the briefing are the Energy and Commerce, Homeland Security, Intelligence and Judiciary panels, as well as the Appropriations subcommittees that oversee spending at the Department of Homeland Security, the Commerce Department, the Justice Department and science budgets, and the Select Committee on the Chinese Communist Party.

The briefing agencies include the FBI, the Justice Department’s National Security Division, the Office of the Director of National Intelligence, the Cybersecurity and Infrastructure Security Agency and the National Telecommunications and Information Administration.

Across the Capitol, Senate members are set to get their own briefing next week, and the Senate Intelligence Committee has been getting regular briefings, said Rachel Cohen, a spokesperson for Chairman Mark Warner, D-Va.

A cascading set of revelations has attracted congressional attention about the scope of the breach, said to be the work of the Chinese government-connected hacking group known as Salt Typhoon. A number of panels had requested a briefing from the Biden administration, while others have sought information from the telecommunications companies themselves. The House Energy and Commerce Committee got a briefing from Lumen, but AT&T and Verizon directed the committee’s questions to the FBI, according to a source familiar with the development.

In the past week, The Wall Street Journal and The Washington Post have spilled additional details about the breach, suggesting that the number of people who are affected or who could have been spied upon has expanded beyond the initial disclosures.

Federal agencies say they are investigating the “unauthorized access to telecommunications commercial infrastructure” by Chinese hackers. The Cyber Safety Review Board is also set to probe the incident. And the Consumer Financial Protection Bureau reportedly instructed employees to reduce their cell phone usage in response to the intrusions.

Among the policy questions at stake are the implications for law enforcement access to telecommunications carriers under the Communications Assistance for Law Enforcement Act, the means by which Salt Typhoon was said to have gained access.

This story was updated Nov. 7, 2024, with information from Sen. Warner’s spokesperson.

House intel bill includes provisions on state and local threat intelligence, election security, AI

The House Intelligence Committee advanced its fiscal 2027 authorization legislation Monday.

Closed briefing sets stage for House hearing on Anthropic’s Mythos and cyber risks

One House Democrat is pressing Commerce on the government’s spyware use

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure