Tag: china
-
Five Things To Know On The ‘Major’ US Treasury Department Hack
A China-linked breach tied to the compromise of BeyondTrust’s remote support tool has reportedly led to the breach of multiple offices within the U.S. Treasury Department. First seen on crn.com Jump to article: www.crn.com/news/security/2024/5-things-to-know-on-the-major-us-treasury-department-hack
-
US Treasury Department workstations breached in attack attributed to China
Tags: access, advisory, apt, attack, banking, ceo, china, cloud, cybersecurity, government, hacking, infrastructure, intelligence, microsoft, russia, saas, service, supply-chain, threat, update, vulnerabilityThe US Department of the Treasury revealed on Monday that an attacker was able to bypass security, access an undisclosed number of Treasury workstations, and steal “certain unclassified documents,” in what it called a “major cybersecurity incident”.In a letter to the US Senate’s Committee on Banking, Housing and Urban Affairs, the Treasury Department said that…
-
What Happened in the U.S. Department of the Treasury Breach? A Detailed Summary
The U.S. Department of the Treasury suffered a major security incident when a Chinese threat actor compromised its third-party cybersecurity service BeyondTrust. The attackers obtained an API key that allowed them to bypass security measures and access unclassified documents. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/what-happened-in-the-u-s-department-of-the-treasury-breach-a-detailed-summary/
-
US Treasury hacked by state-sponsored Chinese APT group
First seen on scworld.com Jump to article: www.scworld.com/news/us-treasury-hacked-by-state-sponsored-chinese-apt-group
-
AT&T and Verizon Say Chinese Hackers Ejected From Networks
9 Telcos Have Been Breached by Beijing-Backed ‘Salt Typhoon,’ White House Says. U.S. telecommunications giants AT&T and Verizon Communications believe they have finally ejected Chinese cyber espionage hackers from their networks. The White House said the Salt Typhoon nation-state hackers infiltrated at least nine U.S. telcos’ infrastructure, and have been hard to eject. First seen…
-
US telco Lumen says its network is now clear of China’s Salt Typhoon hackers
Lumen says there is ‘no evidence’ that customer data was accessed during the intrusion First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/31/another-us-telco-says-its-network-is-now-clear-of-china-backed-salt-typhoon-hackers/
-
Chinese State Hackers Breach US Treasury Department
In what’s being called a ‘major cybersecurity incident,’ Beijing-backed adversaries broke into cyber vendor BeyondTrust to access US Department of Treasury workstations and steal unclassified data, according to a letter sent to lawmakers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-state-hackers-breach-us-treasury-department
-
China’s cyber intrusions took a sinister turn in 2024
From targeted espionage to pre-positioning – not that they are mutually exclusive First seen on theregister.com Jump to article: www.theregister.com/2024/12/31/china_cyber_intrusions_2024/
-
New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy
The U.S. Department of Justice (DoJ) has issued a final rule carrying out Executive Order (EO) 14117, which prevents mass transfer of citizens’ personal data to countries of concern such as China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela.”This final rule is a crucial step forward in addressing the extraordinary…
-
Beijing denies involvement in US treasury cyber-attack
China says claims a state-sponsored actor was behind cyber breach earlier this month are ‘groundless’Beijing has hit back at accusations that a China state-sponsored actor was behind a <a href=”https://www.theguardian.com/us-news/2024/dec/30/china-treasury-cyberattack”>cyber breach at the US treasury department, calling the claims “groundless”.The breach was orchestrated via a third-party cybersecurity service provider. Hackers were able to gain access…
-
China-linked actors hacked US Treasury Department
China-linked threat actors breached the U.S. Treasury Department by hacking a remote support platform used by the agency. China-linked threat actors breached the U.S. Treasury Department via a compromised remote support platform. The Treasury Department discovered the security breach on December 8th from its vendor BeyondTrust, according to a letter to lawmakers. BeyondTrust provides Privileged…
-
Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
The United States Treasury Department said it suffered a “major cybersecurity incident” that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents. “On December 8, 2024, Treasury was notified by a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to…
-
Chinese Hackers Accessed US Treasury Workstations in ‘Major’ Cybersecurity Incident
Chinese hackers remotely accessed US Treasury Department workstations after compromising a cloud-based service operated by BeyondTrust. The post Chinese Hackers Accessed US Treasury Workstations in ‘Major’ Cybersecurity Incident appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/chinese-hackers-accessed-us-treasury-workstations-in-major-cybersecurity-incident/
-
Treasury Department Hit by Major Cybersecurity Incident, China Suspected
The U.S. Department of the Treasury has disclosed a major cybersecurity incident, potentially compromising sensitive government information. In a letter to the Senate Committee on Banking, Housing, and Urban Affairs,... First seen on securityonline.info Jump to article: securityonline.info/treasury-department-hit-by-major-cybersecurity-incident-china-suspected/
-
US Treasury Department Admits It Got Hacked by China
Treasury says hackers accessed “certain unclassified documents” in a “major” breach, but experts believe the attack’s impacts could prove to be more significant as new details emerge. First seen on wired.com Jump to article: www.wired.com/story/us-treasury-hacked-by-china/
-
Beijing-linked hackers penetrated Treasury systems
A Chinese state-sponsored actor was responsible for a “major incident” that compromised U.S. Treasury Department workstations and classified documents, according to a letter the agency sent congressional lawmakers on Monday.]]> First seen on therecord.media Jump to article: therecord.media/beijing-hackers-penetrated-treasury-systems
-
Chinese Hackers Breach US Treasury in ‘Major Incident’
Treasury Tells Lawmakers Chinese Threat Actor Remotely Breached Agency Workstations. The U.S. Treasury Department notified lawmakers Friday that the agency was the victim of a major cyberattack in which Chinese-linked hackers gained access to unclassified documents after gaining access to remote workstations through a third-party software provider, BeyondTrust. First seen on govinfosecurity.com Jump to article:…
-
Chinese hackers breach US treasury network, gain access to some files
Third-party cybersecurity provider was compromised after hackers obtained key to override certain systemsChinese state-sponsored hactors breached the US treasury department earlier this month, accessing several employee workstations and unclassified documents, according to an agency spokesperson.The breach was orchestrated via a third-party cybersecurity service provider, BeyondTrust. Hackers were able to gain access to a key used…
-
Treasury workstations hacked by China-linked threat actors
According to a letter sent to Senate leaders and obtained by CyberScoop, the compromises occurred through third-party software provider BeyondTrust, which provides identity and access management security solutions. First seen on cyberscoop.com Jump to article: cyberscoop.com/treasury-workstations-hacked-china-beyondtrust-identity-access-management/
-
US Treasury says China accessed government documents in ‘major’ cyberattack
Treasury officials attributed the December theft of unclassified documents to China. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/30/us-treasury-says-china-stole-documents-in-major-cyberattack/
-
ATT and Verizon Hacked Salt Typhoon Compromised The Network For High Profiles
AT&T and Verizon Communications, two of America’s largest telecommunications providers, have confirmed they were targeted by the China-linked Salt Typhoon hacking operation, though both companies now report their networks are clear of the intrusion. In a statement released Saturday, Dallas-based AT&T revealed that hackers attempted to gather foreign intelligence information. The company emphasized that >>a…
-
China-linked APT Salt Typhoon breached a ninth U.S. telecommunications firm
A White House official confirmed that China-linked threat actor Salt Typhoon breached a ninth U.S. telecommunications company. A White House official confirmed confirmed that China-linked APT group Salt Typhoon has breached a ninth U.S. telecoms company as part of a cyberespionage campaign aimed at telco firms worldwide. >>A White House official said Friday the US…
-
A 9th Telecoms Firm Has Been Hit by a Massive Chinese Espionage Campaign, the White House Says
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign. The post A 9th Telecoms Firm Has Been Hit by a Massive Chinese Espionage Campaign, the White House Says appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/a-9th-telecoms-firm-has-been-hit-by-a-massive-chinese-espionage-campaign-the-white-house-says/
-
US Finalizes Rule Throttling Bulk Data Sales to China
Rule Aims to Stymie Weaponization of Americans’ Data. The U.S. federal government finalized Friday regulations throttling the bulk commercial transfer to China and Russia of data pinpointing Americans’ location, their health data, or biometric and genomic identifiers. The rule implements a February executive order from President Joe Biden. First seen on govinfosecurity.com Jump to article:…
-
U.S. Finalizes Rule Throttling Bulk Data Sales to China
Rule Aims to Stymie Weaponization of Americans’ Data. The U.S. federal government finalized Friday regulations throttling the bulk commercial transfer to China and Russia of data pinpointing Americans’ location, their health data, or biometric and genomic identifiers. The rule implements a February executive order from President Joe Biden. First seen on govinfosecurity.com Jump to article:…
-
White House links ninth telecom breach to Chinese hackers
A White House official has added a ninth U.S. telecommunications company to the list of telecoms breached in a Chinese hacking campaign that impacted dozens of countries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/white-house-links-ninth-telecom-breach-to-chinese-hackers/
-
White House: Salt Typhoon hacks possible because telecoms lacked basic security measures
In an update Friday, the White House says nine telecom companies were impacted by the Chinese espionage effort. First seen on cyberscoop.com Jump to article: cyberscoop.com/salt-typhoon-telecom-cybersecurity-gaps-white-house-response/
-
Feds Identify Ninth Telecom Victim in Salt Typhoon Hack
Officials Say Chinese Hackers Maintained ‘Broad and Full’ Access to Telecom Systems. Federal officials told reporters Friday that ongoing investigations into the Salt Typhoon cyberespionage campaign have identified a ninth victim company affected by the attack, in which hackers maintained broad and full access to vulnerable communications infrastructure across the country. First seen on govinfosecurity.com…