China used a third-party cybersecurity vendor, BeyondTrust, as a venue to obtain access to Treasury ... weaknesses in API integrations or insufficient lateral movement detection capabilities, allowing ...

CISA added two bugs found in BeyondTrust products Both were seen in the wild in December 2024 Federal agencies have until February 3, 2025 to patch up The US Cybersecurity and Infrastructure ...

In a letter to lawmakers seen by The Verge, the Treasury Department said BeyondTrust, the company behind its remote management software, notified the agency of a breach on December 8th.

Hardikar wrote that the U.S. Treasury was told by "a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to secure a cloud-based ...

The hackers compromised third-party cybersecurity service provider BeyondTrust and were able to access unclassified documents, the letter said. According to the letter, hackers "gained access to a ...

BeyondTrust, a Johns Creek-based software vendor, notified Treasury on Dec. 8 that a threat actor had obtained access to a digital key BeyondTrust uses to provide remote tech support for the ...

The US Treasury has confirmed it suffered a breach The compromise came through third party systems BeyondTrust China have denied any involvement The US Treasury Department has confirmed that ...

The hackers stole a key from a third-party software service provider, BeyondTrust, and used it to override security and gain access to Treasury Department workstations, according to the letter ...

“The compromised BeyondTrust service has been taken offline ... hacking collectives that operate with advanced technical capabilities, persistent attack strategies and often with the financial ...