DHS issues internal comms guidance amid telecom breach investigation==================================================================== Pavlo Gonchar/SOPA Images/LightRocket via Getty Images | Get the latest federal technology news delivered to your inbox.||
|| email *** ** * ** ***Stay Connected [](https://twitter.com/NextgovFCW)[](https://www.facebook.com/NextgovFCW/)[](https://www.linkedin.com/company/nextgovfcw/)[](/rss/all/) Featured eBooks  [Health Tech](/assets/health-tech-q424/portal/) [Read Now](/assets/health-tech-q424/portal/)  ### [Next-Generation Computing](/assets/next-generation-computing/portal/)[Read Now](/assets/next-generation-computing/portal/)  ### [Space Tech](/assets/space-tech-q324/portal/)[Read Now](/assets/space-tech-q324/portal/) Insights -& Reports  [Strengthening cloud security for federal agencies](/assets/strengthening-cloud-security-federal-agencies/portal/?oref=ng-sidebar-insights-reports) [Presented By Wiz](/assets/strengthening-cloud-security-federal-agencies/portal/?oref=ng-sidebar-insights-reports) [Download Now](/assets/strengthening-cloud-security-federal-agencies/portal/?oref=ng-sidebar-insights-reports)  [The Future of Government Work](/assets/future-government-work/portal/?oref=ng-sidebar-insights-reports) [Presented By Intel](/assets/future-government-work/portal/?oref=ng-sidebar-insights-reports) [Download Now](/assets/future-government-work/portal/?oref=ng-sidebar-insights-reports)  By [David DiMolfetta](/voices/david-dimolfetta/25968/?oref=ng-post-author), Cybersecurity Reporter, Nextgov/FCW * [](https://twitter.com/share?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&text=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&via=Nextgov)* [](http://www.linkedin.com/shareArticle?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&mini=true&summary=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.&source=Nextgov.com&title=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation)* [](https://www.facebook.com/dialog/feed?picture=https%3A%2F%2Fcdn.nextgov.com%2Fmedia%2Fimg%2Fcd%2F2024%2F11%2F08%2FGettyImages_1865835242_2%2F860x394.jpg&name=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&app_id=622609557824468&redirect_uri=https%3A%2F%2Fwww.nextgov.com&link=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&display=popup&description=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.)* [](mailto:?body=The%20DHS%20Cyber%20Safety%20Review%20Board%20is%20already%20slated%20to%20investigate%20the%20hacking%20collective%2C%20dubbed%20Salt%20Typhoon%2C%20and%20its%20intrusion%20into%20telecommunications%20firms%20and%20wiretap%20infrastructure.%0A%0Ahttps%3A//www.nextgov.com/cybersecurity/2024/11/dhs-issues-internal-comms-guidance-amid-telecom-breach-investigation/400956/&subject=Nextgov.com%3A%20DHS%20issues%20internal%20comms%20guidance%20amid%20telecom%20breach%20investigation) By [David DiMolfetta](/voices/david-dimolfetta/25968/?oref=ng-post-author?oref=rf-post-author)-| November 8, 2024 04:55 PM ETThe DHS Cyber Safety Review Board is already slated to investigate the hacking collective, dubbed Salt Typhoon, and its intrusion into telecommunications firms and wiretap infrastructure.——————————————————————————————————————————————————————————————-* [DHS](/topic/dhs/?oref=ng-article-topics)* [Mobile](/topic/ng-mobile/?oref=ng-article-topics)* [Cyber Threats](/topic/cyber-threats/?oref=ng-article-topics)* [](https://twitter.com/share?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&text=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&via=Nextgov)* [](http://www.linkedin.com/shareArticle?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&mini=true&summary=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.&source=Nextgov.com&title=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation)* [](https://www.facebook.com/dialog/feed?picture=https%3A%2F%2Fcdn.nextgov.com%2Fmedia%2Fimg%2Fcd%2F2024%2F11%2F08%2FGettyImages_1865835242_2%2F860x394.jpg&name=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&app_id=622609557824468&redirect_uri=https%3A%2F%2Fwww.nextgov.com&link=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&display=popup&description=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.)* [](mailto:?body=The%20DHS%20Cyber%20Safety%20Review%20Board%20is%20already%20slated%20to%20investigate%20the%20hacking%20collective%2C%20dubbed%20Salt%20Typhoon%2C%20and%20its%20intrusion%20into%20telecommunications%20firms%20and%20wiretap%20infrastructure.%0A%0Ahttps%3A//www.nextgov.com/cybersecurity/2024/11/dhs-issues-internal-comms-guidance-amid-telecom-breach-investigation/400956/&subject=Nextgov.com%3A%20DHS%20issues%20internal%20comms%20guidance%20amid%20telecom%20breach%20investigation)The Department of Homeland Security’s chief information officer issued internal guidance to all agency staff on Friday reminding employees to only use DHS-assigned devices for official business, according to email text obtained by *Nextgov/FCW*. The email was sent amid an ongoing governmentwide investigation into a Chinese infiltration of U.S. telecommunications systems.DHS CIO Eric Hysen also advised staff to only use Microsoft Teams to communicate whenever possible and to be cautious about phone calls and SMS text messages. The notice comes amid recent sweeping Chinese infiltration into a slew of telecommunications firms and infrastructure tied to court-authorized wiretap requests via a group dubbed Salt Typhoon, though the email does not explicitly mention the hacking collective or its recent intrusions.The Wall Street Journal on Thursday reported that the Consumer Financial Protection Bureau’s Office of the Chief Information Officer advised staff to [cease phone usage](https://www.wsj.com/us-news/u-s-agency-warns-employees-about-phone-use-amid-ongoing-china-hack-dd459273) for work-related matters, though the agency later said that it had not been compromised by the hackers.A DHS spokesperson did not immediately respond to a request for comment.Representatives from the U.S. intelligence community yesterday [briefed congressional committees](https://www.nextgov.com/cybersecurity/2024/11/intelligence-community-briefed-congress-chinese-telecom-intrusions/400935/?oref=ng-homepage-river) about the breaches.The Department of Homeland Security has previously confirmed its Cyber Safety Review Board will [lead an investigation](https://www.nextgov.com/cybersecurity/2024/10/dhs-cyber-review-board-investigate-chinese-hack-us-telecom-victim-net-widens/400597/?oref=ng-author-river) into the breaches, triggered by the creation of a Unified Coordination Group that’s conducting a full-scale government response to the breach.Salt Typhoon infiltrated several telecom companies including AT-&T, Lumen, Verizon and others. It’s possible the group embedded into the telecom systems around eight months ago, the Wall Street Journal previously reported.A person familiar with Salt Typhoon described the collective as ‘exceptionally talented’ with members who are very skilled and patient. The person, who spoke on the condition of anonymity to relay their knowledge about the infiltration, said that the targeted telecommunications data is high-grade intelligence that any nation-state adversary would want access to.It remains unclear whether other surveillance systems, such as those governed by the Foreign Intelligence Surveillance Act, were penetrated in the hacks. Data from those networks could provide Beijing with insights into U.S. overseas intelligence targets.’If you want to know what diplomats are thinking, it’s in their email, it’s in their texts. And that’s the kind of stuff that I think people have always targeted,’ Kevin Mandia, who founded the eponymously named threat intelligence firm Mandiant, told *Nextgov/FCW* last month.The infiltrations are ‘really concerning,’ former NSA director Gen. Paul Nakasone said in a recent interview. ‘The scope and the scale of allegedly being in American telecommunications companies — that’s a different ballgame,’ he said. ‘I think the follow on question now is, okay, what are we doing about it?’The breach has called into question the security standards governed by the Communications Assistance for Law Enforcement Act, or CALEA, which requires carriers to engineer their systems to allow for law enforcement entities to wiretap them for surveillance.Under current standards, the Federal Communications Commission says that such companies can develop their own solutions tailored to their networks, purchase solutions from their equipment manufacturers or rely on a third party to determine whether they are compliant with CALEA. Some cyber experts say it’s time for those standards to be [overhauled](https://www.nextgov.com/cybersecurity/2024/10/its-time-rethink-how-wiretaps-work-after-chinese-hack-experts-say/400220/). Share This:* [](https://twitter.com/share?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&text=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&via=Nextgov)* [](http://www.linkedin.com/shareArticle?url=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&mini=true&summary=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.&source=Nextgov.com&title=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation)* [](https://www.facebook.com/dialog/feed?picture=https%3A%2F%2Fcdn.nextgov.com%2Fmedia%2Fimg%2Fcd%2F2024%2F11%2F08%2FGettyImages_1865835242_2%2F860x394.jpg&name=DHS+issues+internal+comms+guidance+amid+telecom+breach+investigation&app_id=622609557824468&redirect_uri=https%3A%2F%2Fwww.nextgov.com&link=https%3A%2F%2Fwww.nextgov.com%2Fcybersecurity%2F2024%2F11%2Fdhs-issues-internal-comms-guidance-amid-telecom-breach-investigation%2F400956%2F&display=popup&description=The+DHS+Cyber+Safety+Review+Board+is+already+slated+to+investigate+the+hacking+collective%2C+dubbed+Salt+Typhoon%2C+and+its+intrusion+into+telecommunications+firms+and+wiretap+infrastructure.)* [](mailto:?body=The%20DHS%20Cyber%20Safety%20Review%20Board%20is%20already%20slated%20to%20investigate%20the%20hacking%20collective%2C%20dubbed%20Salt%20Typhoon%2C%20and%20its%20intrusion%20into%20telecommunications%20firms%20and%20wiretap%20infrastructure.%0A%0Ahttps%3A//www.nextgov.com/cybersecurity/2024/11/dhs-issues-internal-comms-guidance-amid-telecom-breach-investigation/400956/&subject=Nextgov.com%3A%20DHS%20issues%20internal%20comms%20guidance%20amid%20telecom%20breach%20investigation)**NEXT STORY:** [Veterans’ military skills can help them fill cyber vacancies, State official says](/cybersecurity/2024/11/veterans-military-skills-can-help-them-fill-cyber-vacancies-state-official-says/400955/?oref=ng-next-story) | [Human operators must be held accountable for AI’s use in conflicts, Air Force secretary says](/artificial-intelligence/2023/12/human-operators-must-be-held-accountable-ais-use-conflicts-air-force-secretary-says/392457/?oref=ng-earthbox-post) | [Why NIST is prioritizing creating a dictionary of AI development](/artificial-intelligence/2023/12/why-nist-prioritizing-creating-dictionary-ai-development/392427/?oref=ng-earthbox-post) | [SSA restructures tech shop to center on the CIO](/modernization/2023/11/ssa-restructures-tech-shop-center-cio/392377/?oref=ng-earthbox-post) | [How a push to the cloud helped a Ukrainian bank keep faith with customers amid war](/modernization/2023/11/how-push-cloud-helped-ukrainian-bank-keep-faith-customers-amid-war/392375/?oref=ng-earthbox-post) | [The people problem behind the government’s AI ambitions](/artificial-intelligence/2023/11/people-problem-behind-governments-ai-ambitions/392212/?oref=ng-earthbox-post) | [NG/FCW eBook: Health Tech](https://www.nextgov.com/assets/health-tech-q424/portal/) | [Human operators must be held accountable for AI’s use in conflicts, Air Force secretary says](/artificial-intelligence/2023/12/human-operators-must-be-held-accountable-ais-use-conflicts-air-force-secretary-says/392457/?oref=ng-earthbox-post) | [Why NIST is prioritizing creating a dictionary of AI development](/artificial-intelligence/2023/12/why-nist-prioritizing-creating-dictionary-ai-development/392427/?oref=ng-earthbox-post) | [SSA restructures tech shop to center on the CIO](/modernization/2023/11/ssa-restructures-tech-shop-center-cio/392377/?oref=ng-earthbox-post) | [How a push to the cloud helped a Ukrainian bank keep faith with customers amid war](/modernization/2023/11/how-push-cloud-helped-ukrainian-bank-keep-faith-customers-amid-war/392375/?oref=ng-earthbox-post) | [The people problem behind the government’s AI ambitions](/artificial-intelligence/2023/11/people-problem-behind-governments-ai-ambitions/392212/?oref=ng-earthbox-post) | [| NG/FCW eBook: Health Tech](https://www.nextgov.com/assets/health-tech-q424/portal/)
Related Tags:
NAICS: 923 – Administration Of Human Resource Programs
NAICS: 517 – Telecommunications
NAICS: 92 – Public Administration
NAICS: 51 – Information
Blog: NextGov
Create or Modify System Process: Windows Service
Create or Modify System Process
Software Discovery: Security Software Discovery
Software Discovery
Associated Indicators: