🕵️ RESEARCH & DEEP DIVES
- Salt Typhoon Targeted Telecom Infrastructure for Long-Term Communications Visibility
Salt Typhoon targeted telecommunications infrastructure for communications intelligence collection.- U.S. telecommunications providers and critical-infrastructure networks were affected.
- The group accessed telecom infrastructure, call-record metadata, communications data, and lawful-investigative information.
- Attackers targeted routers, telecom systems, network-edge devices, and network-management platforms.
- Compromised infrastructure enabled observation of endpoints, routing relationships, traffic timing, volume, and session metadata.
📄 Source: dispersive.io · 📎 Coverage: securityboulevard.com · 👁 via securityboulevard.com (discovered)
🔓 CVEs & KEV
-
CVE-2026-81700 — CVSS 9.3 — openssl_encrypt Signature Bypass Leads to Plugin Execution
-
CVE-2026-81707 — CVSS 9.3 — openssl_encrypt ANSI Escape Sequence Injection (CVE-2026-81707)
📋 ADVISORIES
- 📄 Source for Unit 42 says agentic AI is shifting cyber power toward attackers — crowdstrike.com