Are You Prepared for the Next Typhoon? - BRKSEC-2499#

Paul Giralt (Cisco), Steve Nowell (Cisco)

• Why: Salt Typhoon is the defining nation-state compromise of network infrastructure in this era, and this session combines Talos threat insight with concrete hardening guidance plus Cisco's "secure by default" roadmap — with an explicit feedback opportunity on that roadmap.
• What: The nature of the 2024 Salt Typhoon intrusions across multi-vendor infrastructure at major telecoms as understood by Talos, specific hardening steps available today, and planned future "secure by default" enhancements to network infrastructure (from abstract only).
• How: Attack-surface analysis followed by hardening best practices and defensive-design changes.
• Where applicable: Broadly applicable to network infrastructure security; telecom operators are the most-affected vertical, but the hardening lessons apply to any operator of carrier or enterprise network gear.