Chinese State Hackers Breach US Treasury Department

The U.S. Department of the Treasury disclosed that suspected Chinese state-backed APT actors compromised its systems by leveraging a stolen BeyondTrust remote-support API/cryptographic key, allowing remote access to departmental workstations and the theft of certain unclassified documents; BeyondTrust revoked the key, notified customers, and is working with CISA and the FBI on remediation and investigation.