Bipartisan Senators Push New Telecom Cybersecurity Bill After Massive Chinese Hack

Senators Mark Warner of Virginia and Ted Cruz of Texas unveiled the Telecommunications Cybersecurity and Resilience Act on Thursday, marking a rare bipartisan effort to address vulnerabilities exposed by the recent Salt Typhoon cyber campaign.

The legislation seeks to establish voluntary cybersecurity standards for U.S. telecom operators, encouraging companies to adopt best‑practice safeguards and to share threat information with federal agencies. Proponents argue that a coordinated, industry‑wide approach is essential after Chinese state‑linked hackers reportedly infiltrated the networks of almost all major carriers during the Salt Typhoon operation.

Salt Typhoon, disclosed earlier this year, involved sophisticated intrusion techniques that allowed threat actors to exfiltrate data and potentially disrupt communications infrastructure. While the full scope of the breach remains classified, industry analysts say the attacks highlighted gaps in patch management, network segmentation, and incident‑response planning across the sector.

Warner and Cruz contend that existing regulations, which rely largely on voluntary compliance and fragmented state initiatives, have left the telecom ecosystem fragmented and under‑protected. The proposed act would create a framework for regular security assessments, mandatory reporting of significant incidents, and incentives—such as tax credits—for firms that meet elevated standards.

Critics caution that a voluntary model may lack enforcement teeth, especially if companies prioritize cost savings over security upgrades. Consumer advocacy groups have also raised concerns about data privacy, urging lawmakers to embed robust oversight mechanisms to prevent misuse of shared threat intelligence.

The bill now heads to the Senate Commerce Committee, where it is expected to face a hearing in the coming weeks. If approved, it could set a precedent for future sector‑specific cybersecurity legislation and signal a more unified stance against foreign cyber threats targeting critical U.S. infrastructure.