A landmark close, a regulatory earthquake in Europe, and the first big vendor scorecard of the year. On January 20, Verizon completed its roughly $20 billion acquisition of Frontier Communications, instantly expanding its fiber reach to nearly 30 million homes and businesses across 31 states. The same day in Brussels, the European Commission published its Cybersecurity Act 2 proposal, which for the first time would give the EU a binding framework to phase out high-risk suppliers from telecom networks and 17 other critical sectors, a move widely read as targeting Huawei and ZTE. And on January 23, Ericsson closed out 2025 with fourth quarter organic sales growth of 6 percent and its strongest margins in years, evidence that network spending has stabilized even as the RAN market stays flat.
The quarter closed with two cliffhangers resolving in the same week. On June 30 EchoStar made more than 500 million dollars in overdue interest payments, stepping back from the bankruptcy ledge as its political pressure campaign visibly bore fruit and settlement talks with the FCC gained traction. Then on July 3 Congress sent the One Big Beautiful Bill to the President, restoring the FCC's spectrum auction authority after a 28-month lapse and mandating an 800 megahertz pipeline, the largest legislated spectrum commitment in American history, signed into law July 4. AT&T added a consumer protection note to the week, rolling out its Wireless Account Lock feature on July 1 to combat the SIM-swapping attacks that have plagued the industry.
Fiber's biggest rumor and Washington's strangest security story shared a week. Reports on March 25 revealed AT&T in talks to acquire Lumen's consumer fiber business for around 5.5 billion dollars, previewing the deal that would land officially in May and confirming that the fiber consolidation race had a second bidder. The capital's attention, though, belonged to Signal: The Atlantic's editor-in-chief revealed he had been accidentally added to a group chat where senior officials discussed military strike plans, a breach that made consumer messaging apps a national security story and put encrypted communications policy under a spotlight. In the states, Utah became the first to require app stores to verify user ages, opening a new regulatory front for the mobile ecosystem.
The FCC's math changed on March 18. Democratic Commissioner Geoffrey Starks announced he would resign in the spring, a departure that would hand Chairman Carr a working Republican majority months before a new commissioner could be confirmed, easing the path for everything from deregulation to merger conditions. The same day produced the year's biggest security deal, with Google agreeing to acquire cloud security firm Wiz for 32 billion dollars, the largest acquisition in Google's history and a signal of how seriously the cloud giants are arming up as infrastructure attacks like Salt Typhoon reshape enterprise demand. The week also delivered MWC's considered verdict, as analyst retrospectives separated Barcelona's durable signals, satellite, AI-RAN economics, open networks, from its considerable noise.
Apple finally built its own modem, and the industry's most feared hackers turned out to still be inside the walls. The iPhone 16e, announced February 19 at 599 dollars, carries the C1, Apple's first in-house cellular modem after seven years and billions of dollars of effort, beginning the end of its dependence on Qualcomm and giving the company control of the silicon that connects a billion devices to carrier networks. The security news was darker: threat researchers confirmed that Salt Typhoon, the Chinese state group that penetrated US carriers last year, remained active into 2025, compromising additional telecom networks through unpatched Cisco routers and stolen credentials, months after the intrusions were first exposed.
The outgoing administration spent its final full week hardening the digital walls, and the courts turned off an app used by 170 million Americans. The FCC, in Chairwoman Rosenworcel's closing days, voted to declare that federal wiretap law obligates carriers to secure their networks, the agency's most direct regulatory answer yet to the Salt Typhoon intrusions, over Republican objections that guaranteed the ruling a short life. The Supreme Court unanimously upheld the TikTok divest-or-ban law on January 17, and by the night of January 18 the app had gone dark for US users, the most consequential government action against a communications platform in the internet era, with service providers and app stores suddenly on the legal front line.
The year changed and so did two decades of regulatory architecture. On January 2 the Sixth Circuit struck down the FCC's net neutrality rules outright, ruling in the first major post-Chevron test that the agency never had the authority to classify broadband as a telecom service, and ending a twenty-year seesaw unless Congress writes it into law. Days earlier, AT&T, Verizon, and Lumen declared their networks clear of Salt Typhoon, statements that landed awkwardly against a White House count that was still climbing. And Vodafone closed the books on its European retreat, completing the 8 billion euro sale of Vodafone Italia to Swisscom on New Year's Eve.
Christmas week delivered a signed law, a longer casualty list, and a stress test nobody framed as one. President Biden signed the 895 billion dollar defense bill on December 23, finally funding the 3 billion dollar rip-and-replace program and setting the spectrum studies that feed the next auction pipeline. Four days later the White House confirmed a ninth US telecom had fallen to Salt Typhoon, attributing the breadth of the compromise to plainly inadequate carrier security. And on Christmas Day, 65 million Americans watched NFL football over Netflix instead of broadcast towers, the largest live sports streaming audience on record and a quiet referendum on whether the nation's broadband was ready for appointment television.
The satellite era got a signup page. T-Mobile opened beta registration for its Starlink direct-to-cell service on December 16, inviting ordinary customers to test satellite texting on the phones already in their pockets, while the same day in Brussels the SpaceRISE consortium signed the 10.6 billion euro concession to build IRIS2, Europe's sovereign answer to the constellations it does not control. Two days later CISA told the government's most targeted people to stop trusting carrier voice and SMS altogether and move to end-to-end encrypted apps, the bluntest official verdict yet on the Salt Typhoon aftermath. And SoftBank's Masayoshi Son stood next to the president-elect and pledged 100 billion dollars for American AI infrastructure, the kind of number that eventually lands on networks.
Washington compressed a month of telecom policy into a single Wednesday. On December 11 the Senate Commerce Committee put the Salt Typhoon breach on the public record, with witnesses telling senators that the 3 billion dollars finally headed to the rip-and-replace program was a good start and not a finish. The same day, the FCC voted to open all 1,200 megahertz of the 6 gigahertz band to very low power devices, seeding the next generation of wearables and augmented-reality hardware with unlicensed spectrum. And across the Capitol, the House passed the 895 billion dollar defense bill carrying that rip-and-replace money plus the spectrum studies that will shape the next decade of mid-band auctions.
December opened with the quiet part said out loud: Chinese state hackers had burrowed into at least eight US telecom providers, and the government's advice to Americans was to encrypt their way around the phone network. The FCC answered within a day, moving to turn a 30-year-old wiretap statute into a cybersecurity mandate for carriers. Away from the breach, AT&T used its first analyst day in years to commit to 50 million fiber locations and a copper farewell by 2029, Britain's competition regulator blessed the 15 billion pound Vodafone-Three merger with MVNO protections attached, and eSIM Go teamed with Vodafone UK to sell the MVNO model itself as a boxed product.
The industry got its new referee and lost its biggest pending deal in the same week. Donald Trump named Brendan Carr, the FCC's senior Republican and author of its Project 2025 chapter, as chairman, ending two weeks of speculation and starting the countdown on the Biden-era agenda. By Friday, DirecTV had walked away from its acquisition of Dish after bondholders refused the haircut the deal required, Comcast confirmed it will spin off most of its cable networks into a separate company, and the White House summoned carrier executives to face the Salt Typhoon crisis directly.
The rumor became official. The FBI and CISA jointly confirmed that hackers tied to the Chinese government have compromised networks at multiple U.S. telecom companies, stealing call records and intercepting communications around court-ordered wiretap systems, and by Friday the Wall Street Journal had added T-Mobile to the list of names. Against that backdrop the deal machine kept turning: Frontier shareholders blessed Verizon's $20 billion fiber acquisition, and Charter moved to absorb Liberty Broadband and simplify the ownership of America's second-largest cable company.
Monday, September 30 packed a quarter's worth of news into one day. A nationwide Verizon outage left over 100,000 customers — many staring at 'SOS' on their iPhones — and drew an immediate FCC investigation. AT&T finally severed its television era, selling its remaining 70% of DirecTV to TPG for $7.6 billion, hours before DirecTV announced it would absorb EchoStar's Dish TV and Sling — consolidating a shrinking satellite-TV industry into one company. T-Mobile bought peace with the FCC over years of data breaches for $31.5 million, half earmarked for security upgrades. And Verizon quietly monetized more of its physical empire, handing 6,339 towers to Vertical Bridge for $3.3 billion.
A single faulty software update ended the week by grounding airlines, silencing broadcasters, and knocking out 911 centers: CrowdStrike's botched Falcon sensor push bricked some 8.5 million Windows machines in the largest IT outage in history. Earlier in the week, EchoStar relaunched Boost Mobile as a self-declared fourth carrier on its cloud-native 5G network with a $25-forever flagship plan, the FCC proposed requiring all phones be unlocked 60 days after activation, and Nokia's second quarter confirmed that operator equipment spending remains stuck in a deep trough.
AT&T disclosed one of the largest telecom breaches in history: call and text records of nearly every wireless customer — roughly 110 million people — stolen from a third-party cloud platform. No content was taken, but the metadata map of who contacted whom, when, and for how long is an intelligence asset in its own right, and the disclosure put cloud vendor risk at the top of every carrier's board agenda. The same week, Samsung bet its foldable franchise on Galaxy AI at Unpacked, and Brussels filed its first-ever Digital Services Act charges against X over deceptive blue checkmarks.
Nvidia completed its climb, passing Microsoft to become the most valuable public company on earth — a title held by a chipmaker for the first time in the modern market era. The week's cautionary tale came from the auto industry: a ransomware attack on CDK Global, the software backbone for roughly 15,000 dealerships, froze car sales across the country and dragged on for days, another demonstration that a single vendor can be a national single point of failure. And Apple, eleven days after unveiling Apple Intelligence, said its marquee AI features won't launch in the EU this year — blaming the Digital Markets Act's interoperability requirements.