Telco Security Alliance improves detection through shared intelligence

News

Telco Security Alliance members – AT&T, Singtel and Telefónica – announced new collaborative efforts to detect and eliminate threats from customer environments.

The three are working together, continuously sharing the latest threat intelligence and indicators of compromise (IoCs) related to cybersecurity threats and global attack campaigns so they can help organisations stay resilient.

They said they believe this is the first of its kind collaboration among telcos’ security units, with the threat intelligence coming from multiple sources.

Many sources

They include anonymised data from alliance members’ security operations centres and security investigations. By pooling information about new malware campaigns and IoC from ongoing attacks, the intention is that their customers also gain a more global, holistic view of cybersecurity developments that could affect them.

This intelligence sharing will also enable each operators’ security analysts to take more proactive means to combat malicious activities, by writing and pushing signatures for newly discovered malware and phishing campaigns across customers’ products and environments down to individual endpoints.

Jaime Blasco, AVP of Product Development for AT&T Cybersecurity, said, “This initiative already proved valuable to AT&T’s visibility into current threats, and as we continue to work together, our focus is on utilizing this relationship to deliver better threat intelligence to our customers.”

The different feeds serving the threat intelligence instruments will use the AT&T Alien Labs Open Threat Exchange (OTX) platform.

“Our customers demand us to deliver contextualized threat intelligence, delivering as many details as possible to reveal undetected attacks. By leveraging the Alliance members’ most relevant IoCs into one single platform, it will allow us to improve our detection and response, and the emerging playbooks will let our analysts focus on the analysis and investigations of the advanced threat defeating techniques,” said Sebastián García de Saint-Léger, Telco Sector manager at ElevenPaths, Telefónica’s cybersecurity unit.

Alliance’s future plans

AT&T, Etisalat, Singtel, SoftBank and Telefónica formed the Alliance to improve each member’s response to cybersecurity threats, as well as to help enterprises and government agencies.

Other Alliance members are expected to join the intelligence-sharing initiative.