US Treasury Department Hacked – Attackers Gained Access to Workstations

A China-based state-sponsored actor exploited vulnerabilities in BeyondTrust remote-support products in early December to breach US Treasury systems, remotely accessing several employee workstations and unclassified documents; the Treasury has labelled the event a "major incident" and is investigating with the FBI while BeyondTrust has taken the affected service offline.