Key Points:
– Australia, Canada, New Zealand, and the U.S. warned of PRC-affiliated cyber espionage targeting telecommunications providers
– Threat actors (known as Salt Typhoon) remain active in U.S. telecommunications networks
– T-Mobile reported attempted infiltration but confirmed no customer data breach

Security Recommendations:
1. Network Security:
– Monitor network device configurations
– Implement strong network flow monitoring
– Isolate device management from production networks
– Enforce strict access control lists (ACLs)
– Establish robust network segmentation

2. Authentication & Access:
– Require phishing-resistant multi-factor authentication
– Implement Role-Based Access Control
– Limit session token durations
– Regular account review and cleanup

3. Protocol & Service Security:
– Use TLS v1.3 for data encryption
– Disable unnecessary discovery protocols
– Secure VPN gateways
– Remove default passwords
– Implement secure password hashing

4. Maintenance:
– Monitor vendor end-of-life announcements
– Regular software updates and patches
– Verify software integrity
– Maintain secure logging systems

Context:
This advisory comes amid U.S.-China trade tensions, including restrictions on semiconductor exports and critical minerals trade between the two nations.