Chinese Hackers Breach Belgium State Security Service as Investigation Continues

Belgium’s State Security Service (VSSE) and the Belgian Pipeline Organisation were breached after attackers exploited a vulnerability in Barracuda’s Email Security Gateway, reportedly siphoning about 10% of VSSE email traffic over nearly two years; while classified intelligence appears unaffected, personal data for a substantial portion of VSSE staff may have been compromised, and the activity is attributed to Chinese-linked threat actors amid denials from the Chinese Embassy.