The US Treasury Department was hacked
Hugo Herrera / The Verge The US Treasury Department suffered a “major” security incident after a China state-sponsored hacker broke into the third-party remote management software it uses, as reported earlier by The New York Times . In a letter to lawmakers seen by The Verge , the Treasury Department said BeyondTrust, the company behind its remote management software, notified the agency of a breach on December 8th. The threat actor stole a key used by BeyondTrust “to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users.” With the key, they overrode the security to remotely access those users' workstations and “some unclassified documents” they maintained. The Treasury Department said it worked with the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI following the attack, which has been attributed to a China state-sponsored Advanced Persistent Threat (APT) hacker. “The compromised BeyondTr...