# SN 1031: How Salt Typhoon Gets In

**URL:** <https://www.twit.community/t/sn-1031-how-salt-typhoon-gets-in/18653>\
**Category:** Security Now\
**Tags:** episode\
**Created:** [June 25, 2025, 3:11am UTC](https://www.twit.community/t/sn-1031-how-salt-typhoon-gets-in/18653 "2025-06-25T03:11:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Leo](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/leo/32/16203_2.png) [@Leo](https://www.twit.community/u/Leo)\
**Post date:** [June 25, 2025, 3:11am UTC](https://www.twit.community/t/sn-1031-how-salt-typhoon-gets-in/18653/1 "2025-06-25T03:11:25Z")

</div>

Beep boop - this is a robot. A new show has been posted to TWiT…

> **[How Salt Typhoon Gets In | TWiT.TV](https://twit.tv/shows/security-now/episodes/1031)**
>
> China's Salt Typhoon claims another victim (or two).State healthcare portals are tracking and leaking

What are your thoughts about today’s show? We’d love to hear from you!

---

<div class="post-metadata">

**Author:** ![big\_D](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/big_d/32/1023_2.png) [@big\_D](https://www.twit.community/u/big_D)\
**Post date:** [June 26, 2025, 4:04am UTC](https://www.twit.community/t/sn-1031-how-salt-typhoon-gets-in/18653/2 "2025-06-26T04:04:49Z")

</div>

Steve was talking about how can we make companies keep their software up to date?

The EU is changing the playing field in this respect. With the NIS2 requirements (critical infrastructure), the CEO is personally responsible for ensuring that their company is fulfilling the requirements - enabling MFA where available, systems are updated, systems that can’t be updated are isolated etc.

Likewise, the employees working alone in the factory (they go to a remote area of the factory or the are is highly automated and only needs an overseer, for example), if they have an accident, they need to have a PNA (Personal Notfall-Anlage - Personal emergency alarm system) which automatically calls for help if they fall and don’t respond or if they press the emergency button. If an employee is seriously injured or dies and they don’t have a PNA, the CEO, site manager and, I believe, the shift manage are all personally liable, so could face manslaughter charges.