Bill C-26 Advances: What Canadian Organizations Should Prepare For
November 20, 2024Clop Returns Through Managed File Transfer: The Cleo Exploitation Campaign
December 13, 2024In early December 2024, cybersecurity agencies including Five Eyes partners published hardening guidance for communications infrastructure in response to the Salt Typhoon telecom intrusions. Alongside the technical recommendations came a striking piece of public advice: use end-to-end encrypted messaging and calling for sensitive communications, because the underlying networks could not be assumed clean.
The signal in the guidance
When government agencies openly recommend encrypted messaging over standard calls and texts, the message is clear. Rather than promising the networks were secure, they advised users to protect their content directly. That principle scales down to every organization.
Practical steps you can take
- Use end-to-end encrypted messaging for sensitive conversations rather than SMS.
- Harden network devices with strong authentication, disabled unused services, and current firmware.
- Centralize and protect logging so quiet, long-dwell intrusions can be detected.
Takeaway: Encrypt sensitive communications end to end, harden your network gear against the exact techniques described, and make sure your logs would actually reveal a patient intruder.