Government agencies issue guidance on Chinese telecoms hacking as US officials say threat actors may have yet to be expelled.