US Treasury Department breached through remote support platform

Chinese state-sponsored APT actors exploited two zero-day vulnerabilities in BeyondTrust's Remote Support SaaS to breach a vendor instance used by the U.S. Treasury, enabling remote access to agency computers and theft of documents; the incident is linked to broader campaigns (including actor 'Salt Typhoon') that also targeted multiple telecom providers.