Salt Typhoon, a notorious hacking group, has been wreaking havoc on the world's top phone and internet companies, with a string of high-profile breaches affecting major American telecom giants. The group's reach is global, with targets spanning multiple countries, including those with significant technological infrastructure. Technical details of the breaches are scarce, but the attacks have raised concerns about the vulnerability of critical infrastructure. The hacking group's tactics and motivations are still unclear, but their ability to evade detection and exploit weaknesses in complex systems is a significant concern1. The scope of the breaches is still being assessed, but it is evident that Salt Typhoon's actions have far-reaching implications for the security of global telecommunications networks. So what this means for practitioners is that they must re-examine their security protocols and consider the potential for similar breaches in their own systems.