Loading story…
The Federal Communications Commission approved new cybersecurity rules for the Emergency Alert System and Wireless Emergency Alerts, adding baseline controls such as strong passwords, timely patching, and firewalls to reduce the risk of hijacking, duplicate, or unauthorized alerts. The agency also said it will introduce an authentication ID mechanism to verify alerts before submission, warning that compromise of emergency communications by foreign governments, cybercriminals, or other malicious actors could spread disinformation, cause public panic, and disrupt coordination during real crises.
The FCC also adopted its first major overhaul of submarine cable security oversight in decades, expanding licensing requirements to cover submarine line terminal equipment (SLTE) operators and updating safeguards for equipment, third-party providers, and supply-chain risks. The framework tightens scrutiny of undersea cable infrastructure that carries most global internet traffic, including restrictions on equipment tied to China and other designated foreign adversaries, while allowing some low-risk, U.S.-headquartered providers to receive streamlined approval if they self-certify to high security standards and accept ongoing oversight.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
The FCC approved its first comprehensive submarine cable regulatory update in decades, expanding oversight with new licensing requirements for submarine line terminal equipment operators, stricter supply-chain safeguards, and streamlined treatment for low-risk providers that self-certify to high security standards and accept ongoing oversight.
The Federal Communications Commission approved new cybersecurity requirements for the Emergency Alert System and Wireless Emergency Alerts, including strong passwords, timely patching, firewalls, and an authentication ID mechanism intended to prevent hijacked, duplicate, or unauthorized alerts.
See what this changes for your reporting obligations and which controls it puts on the clock.
5 references tracked. Mallory keeps watching after this page renders.
cysecurity.news
Open sourcescworld.com
Open sourcetherecord.media
Open sourcecyberscoop.com
Open sourcesdxcentral.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Federal Communications Commission (FCC) announced plans to vote on rescinding cybersecurity regulations that were enacted in response to major breaches of U.S. telecommunications companies by Chinese state-sponsored actors, specifically the Salt Typhoon group. These regulations, introduced at the end of the Biden administration, required telecom providers to implement enhanced network security measures and submit annual certifications of their cybersecurity risk management plans. The breaches included the theft of sensitive correspondence belonging to President Donald Trump and Vice President JD Vance, prompting the initial regulatory response. FCC officials, including Chairman Brendan Carr and Secretary Marlene Dortch, argued that the existing rules were overly broad, inflexible, and imposed unnecessary burdens on telecom providers, many of whom have already adopted voluntary security measures. The FCC contends that a more targeted, collaborative approach between federal agencies and private industry would be more effective in addressing sophisticated threats like those posed by Salt Typhoon, rather than blanket regulations. The upcoming vote will determine whether these Biden-era cybersecurity requirements for telecoms will be officially rescinded.
Jun 29, 2026
The Federal Communications Commission (FCC) is preparing to vote on whether to repeal cybersecurity regulations that were introduced following the Salt Typhoon attacks on U.S. telecommunications providers. These Biden-era rules, enacted in early 2025, required telecom carriers to implement basic security controls to prevent unauthorized access, but are now facing reversal under the Trump administration. Industry groups have petitioned the FCC, arguing that the agency overstepped its legal authority by interpreting the Communications Assistance for Law Enforcement Act (CALEA) to impose broad cybersecurity mandates, which they claim were not intended by Congress. The move to rescind these rules comes amid ongoing concerns about the security of the U.S. telecommunications sector, highlighted by the Salt Typhoon incident and subsequent calls from lawmakers for stronger, mandatory cybersecurity standards. Despite bipartisan pressure, including a Senate resolution and letters from Senators Wyden and Warner, the Cybersecurity and Infrastructure Security Agency (CISA) has not released a critical report on telecom sector vulnerabilities. The debate underscores the tension between regulatory authority, industry resistance, and the urgent need to address persistent cyber threats targeting national communications infrastructure.
Jun 29, 2026
The United States Congress has introduced the Strategic Subsea Cables Act of 2025, a bipartisan bill aimed at strengthening the nation's ability to defend undersea fiber-optic cables from both cyber and physical threats, particularly those attributed to China and Russia. The proposed legislation would empower the Department of State to increase international cooperation on cable security and authorize the Department of Treasury to impose sanctions, including exclusion from the dollar-settling system, on individuals or entities found responsible for damaging these critical infrastructures. Lawmakers highlighted a rise in cable disruptions and sabotage attempts in regions such as the Baltic Sea and the Taiwan Strait, referencing recent incidents in Europe and the Indo-Pacific as evidence of the growing threat landscape. Undersea cables are responsible for carrying more than 95% of global digital communications, yet their security is currently managed through a patchwork of international agreements, private sector arrangements, and voluntary practices. The bill represents one of the most significant recent efforts by Congress to address vulnerabilities in this area, seeking to establish a more coordinated and robust defense posture against potential adversaries. The legislation underscores the urgency of preparing for malicious activities that could have cascading effects on global communications and national security.
Jun 29, 2026