Trump Disbands Cybersecurity Board Investigating Massive Chinese Phone System Hack

Failures

from the seems-bad,-bob dept

For all the hype and warnings about how TikTok is clearly a “national security threat” from China, the Trump administration has effectively kneecapped the investigation into one of the most serious cybersecurity breaches in US history — a genuine, proven threat to national security. In what Team Trump probably thinks is a move to “destroy the deep state,” they’ve actually disbanded the government review board tasked with getting to the bottom of this unprecedented hack of our phone system by China.

We’re still nowhere near understanding just how bad the Chinese hack of our phone system was. The incident that was only discovered last fall involved the Chinese hacking group Salt Typhoon, which used the US’s CALEA phone wiretapping system as a backdoor to gain incredible, unprecedented access to much of the US’s phone system “for months or longer.”

As details come out, the extent of the hackers’ access has become increasingly alarming. It is reasonable to call it the worst hack in US history.

Soon after it was discovered, Homeland Security tasked the Cyber Safety Review Board (CSRB) to lead an investigation into the hack to uncover what allowed it to happen and assess how bad it really was. The CSRB was established by Joe Biden to improve the government’s cybersecurity in the face of global cybersecurity attacks on our infrastructure and was made up of a mix of government and private sector cybersecurity experts.

And one of the first things Donald Trump did upon retaking the presidency was to dismantle the board, along with all other DHS Advisory Committees.

It’s one thing to say the new president should get to pick new members for these advisory boards, but it’s another thing altogether to just summarily dismiss the very board that is in the middle of investigating this hugely impactful hack of our telephone systems in a way that isn’t yet fully understood.

Just before the presidential switch, the Biden administration had announced sanctions against a Chinese front corporation that was connected to the hack. And while the details are still sparse, all indications are that this was a massive and damaging attack on critical US infrastructure.

And one of Trump’s moves is to disband the group of experts who was trying to get to the bottom of what happened.

This seems… bad?

Cybersecurity researcher Kevin Beaumont said on the social media platform Bluesky that the move would give Microsoft a “free pass,” referring to the CSRB’s critical report of the tech giant — and Beaumont’s former employer — over its handling of a prior Chinese hacker breach.

Jake Williams, faculty at IANS Research, went even further on the same website: “We should have been putting more resources into the CSRB, not dismantling it,”he wrote. “There’s zero doubt that killing the CSRB [would] hurt national security.”

While some have speculated that this move is an attempt to cover up the extent of the breach or even deliberately assist the Chinese, a more likely explanation is simple incompetence. Trump and his crew still don’t understand what the government actually does and are so obsessed with a fictional “deep state” out to get him, that this is just part of their process of firing as many people as possible, without regard to the important work they actually do.

Still, even as all the headlines remain fixated on TikTok and its supposed (and still totally unproven) national security threat, the new administration has dismantled the team of experts tasked with figuring out what happened with an actual Chinese hack on critical US infrastructure. That seems important.

But outside of specific cybersecurity news sites, the story has received basically no coverage at all. I’m at a bit of a loss as to how any of this makes America great again.

Filed Under: china, csrb, cybersecurity, donald trump, hack, national security, privacy, salt typhoon, wiretapping