#beyondtrust

#beyondtrust

Chinese state-sponsored hackers breached the US Treasury Department using a compromised third-party cybersecurity service.

Access to sensitive documents was achieved through a stolen security key from BeyondTrust.

The US Treasury has experienced a major cybersecurity incident involving China-backed hackers, accessing unclassified documents from Treasury workstations.

CVE-2024-12686 is a newly identified vulnerability in BeyondTrust products that pose security risks due to active exploitation.

CISA has flagged a critical command injection vulnerability in BeyondTrust's products as actively exploited, urging users to update their systems immediately.

Chinese state-sponsored hackers exploited Treasury's networks through BeyondTrust, gaining access to unclassified documents.

BeyondTrust has resolved the incident by revoking a stolen security key and notifying affected clients.

Treasury is coordinating with FBI and cybersecurity agencies to address the breaches.

Critical command injection vulnerability discovered in BeyondTrust's Privileged Remote Access and Remote Support products potentially allowing unauthorized command execution.