FCC Warns Telecom Firms of Surging Ransomware Threats, Urges Stronger Defenses The Federal Communications Commission (FCC) issued a January 29 alert warning U.S. telecommunications companies about escalating ransomware risks, citing a fourfold global increase in attacks on telecom firms between 2022 and 2025. The FCC’s Public Safety and Homeland Security Bureau highlighted recent incidents targeting small-to-medium-sized providers, which disrupted services, exposed sensitive data, and locked companies out of critical systems. The alert outlines best practices to mitigate threats, including regular patching, multifactor authentication (MFA), network segmentation, and supply-chain vulnerability monitoring. It also provides incident response guidance, urging companies to report attacks to the FCC, FBI, and other agencies. Additional recommendations include data backups, employee training, and testing response plans, along with enforcing strong passwords, least-privilege access, and software patch validation. The FCC’s warning follows growing concerns over state-sponsored cyber threats, including China’s Salt Typhoon campaign, which breached multiple U.S. and foreign telecom firms in 2024. Security experts note that outdated, poorly maintained systems in the sector make full protection difficult. Meanwhile, Sen. Ron Wyden (D-Ore.) has pressured agencies to hold telecoms accountable, blocking a CISA nominee until a 2022 report on telecom vulnerabilities is released and advocating for stricter cybersecurity mandates. In contrast, the Trump administration reversed a Biden-era policy in November that would have expanded telecoms’ cybersecurity obligations.