Belgium investigating alleged cyberattack on intelligence agency by China-linked hackers

Belgium is investigating an alleged breach of its state security service (VSSE) by a China-backed hacking group that exploited a critical Barracuda Email Security Gateway zero-day between 2021 and 2023, reportedly exfiltrating roughly 10% of incoming and outgoing emails and personal data for about half of VSSE employees; Mandiant has reported global exploitation affecting many government agencies and Barracuda advised replacing impacted appliances and rotating credentials.