IC Technology & Cyber — 2026-09-25

Senators Propose Voluntary Telecom Security Framework After Salt Typhoon Hacks

BLUFCruz and Warner's voluntary framework almost certainly will not compel meaningful telecom security improvements, leaving carriers free to defer the same safeguards the FCC rolled back in November.

Senate Commerce Committee Chairman Ted Cruz (R-Texas) and Senate Intelligence Committee Vice Chairman Mark Warner (D-Va.) introduced the Telecommunications Cybersecurity and Resilience Act on Thursday, bipartisan legislation responding to the Salt Typhoon hacking campaign 12. The bill would create a working group under the Commerce Department's National Telecommunications and Information Administration, bringing together carriers, suppliers, and government agencies to develop telecom-specific cybersecurity best practices within 18 months of enactment, with mandatory review every two years or after major incidents 13. It also establishes a voluntary third-party certification process for companies that adopt those practices 1. Warner called Salt Typhoon "the worst telecom hack in our nation's history," while Cruz said the bill favors voluntary standards over "rigid federal mandates" 13. The measure follows the FCC's November reversal of a Biden-era rule that had required telecom safeguards against unauthorized access to lawful-surveillance systems 2.

Analysis
Formal introduction of the Telecommunications Cybersecurity and Resilience Act was almost certainly assured once Cruz and Warner committed as co-sponsors, and that step is now complete. The bill's voluntary architecture, an 18-month timeline for best practices and a non-mandatory certification regime, leaves carriers like AT&T and Verizon free to defer adoption absent market or reputational pressure, reproducing the gap the FCC's November rollback created. Congress's inability to compel telecom security testimony or independent network assessments earlier this year signals limited appetite for binding requirements even after the worst-ever telecom intrusion. This judgment reflects high confidence, based on consistent statements from both sponsors and converging primary and press reporting on the bill's provisions.

4 sources

Cruz, Warner Introduce Bipartisan Bill to Strengthen Telecommunications Cybersecurity - U.S. Senate Committee on Commerce, Science, & Transportation
Senators propose voluntary telecom security framework after Salt Typhoon hacks - Nextgov/FCW
Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks - CyberScoop
Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks - The Record from Recorded Future News