Chinese State-Sponsored Threat Actors Breach U.S. Treasury Department in Major Cybersecurity Incident

Chinese state-sponsored APT actors exploited two zero-day vulnerabilities in a BeyondTrust Remote Support SaaS instance and a stolen API key to breach the U.S. Department of the Treasury (affecting OFAC and the Office of Financial Research); the compromised instance was shut down, the API key revoked, and CISA/FBI are coordinating the ongoing investigation and mitigation.