Hardikar wrote that the U.S. Treasury was told by “a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users.”
submitted by /u/troythedefender
[link] [comments]