Mastodon 🐘

BSI WID Advisories Feed<a href="https://social.adlerweb.info/tags/BSI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BSI</a> WID-SEC-2025-0940: [NEU] [mittel] <a href="https://social.adlerweb.info/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.adlerweb.info/tags/Privileged" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privileged</a> <a href="https://social.adlerweb.info/tags/Remote" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Remote</a> <a href="https://social.adlerweb.info/tags/Access" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Access</a>: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenEin lokaler Angreifer kann eine Schwachstelle in BeyondTrust Privileged Remote Access ausnutzen, um Sicherheitsvorkehrungen zu umgehen.<a href="https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0940" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0940</a>

Pyrzout :vm:CISOs battle security platform fatigue <a href="https://www.helpnetsecurity.com/2025/04/07/ciso-security-platform-fatigue/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/04/07/ciso-security-platform-fatigue/</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Features" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Features</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/Panaseer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Panaseer</a> <a href="https://social.skynetcloud.site/tags/strategy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#strategy</a> <a href="https://social.skynetcloud.site/tags/Syxsense" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Syxsense</a> <a href="https://social.skynetcloud.site/tags/Gigamon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gigamon</a> <a href="https://social.skynetcloud.site/tags/opinion" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opinion</a> <a href="https://social.skynetcloud.site/tags/Tuskira" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tuskira</a> <a href="https://social.skynetcloud.site/tags/Ivanti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ivanti</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/CISO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISO</a> <a href="https://social.skynetcloud.site/tags/tips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tips</a>

Pyrzout :vm:China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain – Source: www.securityweek.com <a href="https://ciso2ciso.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain-source-www-securityweek-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain-source-www-securityweek-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>&Threats <a href="https://social.skynetcloud.site/tags/securityweekcom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityweekcom</a> <a href="https://social.skynetcloud.site/tags/securityweek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityweek</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/NationState" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NationState</a> <a href="https://social.skynetcloud.site/tags/SilkTyphoon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SilkTyphoon</a> <a href="https://social.skynetcloud.site/tags/supplychain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#supplychain</a> <a href="https://social.skynetcloud.site/tags/PostgreSQL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PostgreSQL</a> <a href="https://social.skynetcloud.site/tags/USTreasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USTreasury</a> <a href="https://social.skynetcloud.site/tags/FEATURED" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FEATURED</a>

Pyrzout :vm:China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain <a href="https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>&Threats <a href="https://social.skynetcloud.site/tags/NationState" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NationState</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/SilkTyphoon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SilkTyphoon</a> <a href="https://social.skynetcloud.site/tags/SupplyChain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SupplyChain</a> <a href="https://social.skynetcloud.site/tags/PostgreSQL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PostgreSQL</a> <a href="https://social.skynetcloud.site/tags/USTreasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USTreasury</a>

Pyrzout :vm:A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) <a href="https://www.helpnetsecurity.com/2025/02/17/a-postgresql-zero-day-was-also-exploited-in-us-treasury-hack-cve-2025-1094/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/02/17/a-postgresql-zero-day-was-also-exploited-in-us-treasury-hack-cve-2025-1094/</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/PostgreSQL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PostgreSQL</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/Rapid7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rapid7</a> #0-day <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/APT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#APT</a>

securityaffairsExperts discovered <a href="https://infosec.exchange/tags/PostgreSQL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PostgreSQL</a> flaw chained with <a href="https://infosec.exchange/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://infosec.exchange/tags/zeroday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zeroday</a> in targeted Attacks <a href="https://securityaffairs.com/174218/hacking/postgresql-flaw-chained-with-beyondtrust-zeroday.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://securityaffairs.com/174218/hacking/postgresql-flaw-chained-with-beyondtrust-zeroday.html</a> <a href="https://infosec.exchange/tags/securityaffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityaffairs</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a>

Pyrzout :vm:Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation – Source: www.securityweek.com <a href="https://ciso2ciso.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation-source-www-securityweek-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation-source-www-securityweek-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerabilities</a> <a href="https://social.skynetcloud.site/tags/securityweekcom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityweekcom</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a>-2024-12356 <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a>-2025-1094 <a href="https://social.skynetcloud.site/tags/securityweek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityweek</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/NationState" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NationState</a> <a href="https://social.skynetcloud.site/tags/FEATURED" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FEATURED</a> <a href="https://social.skynetcloud.site/tags/Treasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Treasury</a> <a href="https://social.skynetcloud.site/tags/Rapid7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rapid7</a>

Rene RobichaudRapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation <a href="https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/</a><a href="https://mastodon.social/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/CeptBiro" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CeptBiro</a> <a href="https://mastodon.social/tags/Rapid7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rapid7</a> <a href="https://mastodon.social/tags/PostgreSQL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PostgreSQL</a> <a href="https://mastodon.social/tags/ZeroDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroDay</a> <a href="https://mastodon.social/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://mastodon.social/tags/Exploitation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploitation</a>

Pyrzout :vm:Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation <a href="https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/</a> <a href="https://social.skynetcloud.site/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vulnerabilities</a> <a href="https://social.skynetcloud.site/tags/Nation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nation</a>-State <a href="https://social.skynetcloud.site/tags/CVE202412356" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE202412356</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/CVE20251094" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE20251094</a> <a href="https://social.skynetcloud.site/tags/Treasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Treasury</a> <a href="https://social.skynetcloud.site/tags/Rapid7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rapid7</a>

Pyrzout :vm:BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key – Source:thehackernews.com <a href="https://ciso2ciso.com/beyondtrust-zero-day-breach-exposed-17-saas-customers-via-compromised-api-key-sourcethehackernews-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/beyondtrust-zero-day-breach-exposed-17-saas-customers-via-compromised-api-key-sourcethehackernews-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/TheHackerNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TheHackerNews</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a>

securityaffairsU.S. <a href="https://infosec.exchange/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISA</a> adds <a href="https://infosec.exchange/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> PRA and RS and <a href="https://infosec.exchange/tags/Qlik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Qlik</a> Sense flaws to its Known Exploited Vulnerabilities catalog <a href="https://securityaffairs.com/173031/security/u-s-cisa-adds-beyondtrust-pra-and-rs-and-qlik-sense-flaws-to-its-known-exploited-vulnerabilities-catalog.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://securityaffairs.com/173031/security/u-s-cisa-adds-beyondtrust-pra-and-rs-and-qlik-sense-flaws-to-its-known-exploited-vulnerabilities-catalog.html</a> <a href="https://infosec.exchange/tags/securityaffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityaffairs</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

NetzpalaverCheck Point zum Hacker-Angriff auf das US-Finanzministerium <a href="https://social.tchncs.de/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> @CheckPointSW <a href="https://social.tchncs.de/tags/CheckPointResearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CheckPointResearch</a> <a href="https://social.tchncs.de/tags/CyberAbwehr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberAbwehr</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/PrivilegedAccessManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PrivilegedAccessManagement</a> <a href="https://social.tchncs.de/tags/RemoteSupportSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RemoteSupportSoftware</a> <a href="https://social.tchncs.de/tags/Schwachstelle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Schwachstelle</a> <a href="https://social.tchncs.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.tchncs.de/tags/USFinanzministerium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USFinanzministerium</a> <a href="https://social.tchncs.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a><a href="https://netzpalaver.de/2025/01/06/check-point-zum-hacker-angriff-auf-das-us-finanzministerium/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://netzpalaver.de/2025/01/06/check-point-zum-hacker-angriff-auf-das-us-finanzministerium/</a>

Pyrzout :vm:China-linked actors hacked US Treasury Department – Source: securityaffairs.com <a href="https://ciso2ciso.com/china-linked-actors-hacked-us-treasury-department-source-securityaffairs-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/china-linked-actors-hacked-us-treasury-department-source-securityaffairs-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/informationsecuritynews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#informationsecuritynews</a> <a href="https://social.skynetcloud.site/tags/ITInformationSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITInformationSecurity</a> <a href="https://social.skynetcloud.site/tags/TreasuryDepartment" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TreasuryDepartment</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairscom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairscom</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/PierluigiPaganini" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PierluigiPaganini</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/cyberespionage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberespionage</a> <a href="https://social.skynetcloud.site/tags/BreakingNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BreakingNews</a> <a href="https://social.skynetcloud.site/tags/Intelligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intelligence</a> <a href="https://social.skynetcloud.site/tags/SecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityNews</a> <a href="https://social.skynetcloud.site/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://social.skynetcloud.site/tags/hackingnews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackingnews</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://social.skynetcloud.site/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a>

Miguel Afonso Caetano"Chinese state-sponsored hackers breached the U.S. Treasury Department's computer security guardrails this month and stole documents in what Treasury called a "major incident," according to a letter to lawmakers, opens new tab that Treasury officials provided to Reuters on Monday.The hackers compromised third-party cybersecurity service provider BeyondTrust and were able to access unclassified documents, the letter said.According to the letter, hackers "gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service’s security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users.""Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor," the letter said."<a href="https://www.reuters.com/technology/cybersecurity/us-treasurys-workstations-hacked-cyberattack-by-china-afp-reports-2024-12-30/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.reuters.com/technology/cybersecurity/us-treasurys-workstations-hacked-cyberattack-by-china-afp-reports-2024-12-30/</a><a href="https://tldr.nettime.org/tags/USA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USA</a> <a href="https://tldr.nettime.org/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a> <a href="https://tldr.nettime.org/tags/StateHacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#StateHacking</a> <a href="https://tldr.nettime.org/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://tldr.nettime.org/tags/USTreasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USTreasury</a> <a href="https://tldr.nettime.org/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a>

Bob Carver<a href="https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a> <a href="https://infosec.exchange/tags/USTreasury" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USTreasury</a> <a href="https://infosec.exchange/tags/APIKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#APIKey</a> <a href="https://infosec.exchange/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://infosec.exchange/tags/SaaS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SaaS</a>

gtbarryUS Treasury says it was hacked by China in 'major incident'A Chinese state-sponsored hacker has broken into the US Treasury Department's systems, accessing employee workstations and some unclassified documents. The Treasury Department said the China-based actor was able to override security via a key used by a third-party service provider called BeyondTrust <a href="https://mastodon.social/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a> <a href="https://mastodon.social/tags/china" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#china</a> <a href="https://mastodon.social/tags/chinese" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#chinese</a> <a href="https://mastodon.social/tags/TreasuryDept" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TreasuryDept</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/hackers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackers</a> <a href="https://mastodon.social/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://mastodon.social/tags/hacked" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacked</a><a href="https://www.bbc.com/news/articles/c3weye2j0e7o" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bbc.com/news/articles/c3weye2j0e7o</a>

iam-py-test :unverified:The provider compromised, BeyondTrust, disclosed a breach earlier this month<a href="https://web.archive.org/web/https://www.bleepingcomputer.com/news/security/beyondtrust-says-hackers-breached-remote-support-saas-instances/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://web.archive.org/web/https://www.bleepingcomputer.com/news/security/beyondtrust-says-hackers-breached-remote-support-saas-instances/</a><a href="https://infosec.exchange/tags/BeyondTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeyondTrust</a>

DW 中文- 德国之声【指控🇨🇳中国骇客入侵 🇺🇸美财政部：重大事件】美国财政部30日表示，今年12月初发生了一场涉及网路攻击的“重大事件”。据其写给国会议员的信函，财政部使用的第三方电脑安全防护系统 #BeyondTrust 遭骇，背后黑手是 #中国政府资助的骇客。信上指，BeyondTrust替美国财政部提供远端技术支援的云端系统，该系统的安全金钥遭中国骇客盗取；对方透过该金钥，远程进到美国财政部的电脑之后，获取了一些非机密文件。供应商BeyondTrust在12月8日向美国财政部通报此事；该公司网站亦曾公布一起近期发生的资安事件，但并未指明是否涉及财政部。路透社引述网路安全专家黑格（Tom Hegel）指，跟中国有关的骇客组织行为模式早已有许多案例可循，也就是朝第三方供应商下手，近年这种方法越来越常见。不过，中国驻美大使馆否认，称北京“坚决反对美国在毫无事实根据的情况下对中国进行抹黑攻击”。现阶段，美国网路安全暨基础设施安全局（CISA）和联邦调查局（FBI）正在评估影响有多大。美国财政部表示已暂停使用被骇的系统，且无证据显示骇客继续在存取其系统或资讯。美国政府近年来不只一次对中国骇客攻击提出示警，例如引起全球关注的“伏特台风”（Volt Typhoon）、“盐台风”（Salt Typhoon）等大规模案例，被骇的对象广泛，包含美国的地方基础设施、电信公司、甚至川普等政界人士的幕僚手机。对此，中国政府一概否认涉入。想了解更多关于上述骇客攻击事件❓先前报导👇 https://t.co/6cRhph9kWP https://t.co/wdzflvidyz

Recent searches

Search options

Administered by:

Server stats:

#BeyondTrust