The FCC has reversed its earlier decision requiring stronger cybersecurity measures for US telecom carriers, initially enacted after a major breach by the Chinese-state-backed hacker group, Salt Typhoon. This rollback signals significant implications for IT leaders and managed service providers: regulatory protections may be less stable than assumed, and relying solely on compliance is increasingly risky.
Security teams should recognise that fewer regulations do not equate to lower threat levels—especially with persistent state-sponsored actors. Companies must proactively bolster defences, as lapses at the regulatory level can cascade down entire supply chains. Cybersecurity cannot be a mere box-ticking exercise; vigilance is essential amidst evolving geopolitical and infrastructure risks.
FCC Rolls Back Cybersecurity Rules for Telcos Despite State Hacking Risks

