Kaspersky’s 4 Recommendations to Reduce Risk & Strengthen Resilience

The Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning. Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical issue affecting availability and capacity.

To reduce risk and strengthen resilience, Kaspersky experts recommend:

• Track the APT landscape and telecom-relevant infrastructure continuously.  Kaspersky Threat Intelligence Portal helps to monitor actor and campaign context and pairs that intelligence with regular security awareness training so employees can recognize suspicious activity and apply security policies consistently.
• Treat AI-driven network automation as a change-management program. Keep a human override for high-impact actions, roll out in stages with clear rollback paths, and continuously validate the data feeding AI systems so noisy or manipulated inputs cannot trigger “confidently wrong” changes at scale.
• Increase DDoS readiness as a capacity-management problem.  Validate upstream mitigation, protect edge routing, and monitor for congestion signals that precede customer impact. Use threat intelligence to enrich indicators and spot botnet infrastructure early.
• Deploy an EDR capability such as Kaspersky Next EDR Expert to detect advanced threats early, support rapid investigation, and enable effective incident containment and remediation.