Talos Q3 2026 IR trends: help-desk vishing and rising ransomware
Phishing led initial access in just over one-third of engagements, down from over 50 percent, while ransomware rose to 27 percent.
2
Stories per day · 30 days
3 RSS
9 stories, newest first · one card per story
Stories tagged #salt-typhoon
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions
Nation-state actors abuse SS7, BGP, and unpatched telecom routers, including Salt Typhoon persistence via GRE tunnels.
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
Elttam disclosed a pre-authentication remote code execution flaw in the 33-year-old TACACS+ protocol used across nearly all enterprise networks, with patches only partially available.
Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks
Sens. Warner and Cruz introduced a bill for voluntary telecom cybersecurity practices after Salt Typhoon.
Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks
Senators Warner and Cruz introduced a bill for voluntary telecom cybersecurity standards after the Salt Typhoon campaign.
3
China's Salt Typhoon backdoors Latin American orgs with new snooping malware
China-linked Salt Typhoon deployed new modular backdoor SparroWocky against Latin American government agencies since August 2025.
China’s FamousSparrow hackers target Latin America with new backdoor
ESET links a new SparroWocky backdoor campaign against Latin American government agencies to Chinese espionage group FamousSparrow.
Autonomous Threat Operations in action: Real results from Recorded Future’s own SOC team
Recorded Future reports its Autonomous Threat Operations platform enabled 15-20 weekly automated threat hunts in its own SOC.
1
Risky Bulletin: Academics find source code overlaps between Geedge and China's Great Firewall
Academics linked Chinese vendor Geedge Networks' Tiangou Secure Gateway source code to one of the Great Firewall's three traffic filtering capabilities.
3