On December 8, the Treasury was notified by BeyondTrust that a key used for remote technical support had been pilfered, meaning that a threat actor could access some Departmental Office ...

In a letter to lawmakers seen by The Verge, the Treasury Department said BeyondTrust, the company behind its remote management software, notified the agency of a breach on December 8th.

CISA added two bugs found in BeyondTrust products Both were seen in the wild in December 2024 Federal agencies have until February 3, 2025 to patch up The US Cybersecurity and Infrastructure ...

The hackers, which Treasury has linked to an unspecified Chinese state-sponsored hacking group, gained access to Treasury's networks via software service provider BeyondTrust, according to the letter.