The China-linked breach is tied to the compromise of BeyondTrust’s remote support tool and reportedly led to the breach of multiple offices within the Treasury Department. New details have ...
Updated Silk Typhoon, the Chinese government crew believed to be behind the December US Treasury intrusions, has been abusing ...
Initially, it was believed that the attackers compromised the Treasury’s BeyondTrust Remote Support SaaS instances via CVE-2024-12356, a previously unknown unauthenticated command injection ...
Silk Typhoon APT caught using IT supply chain entry points to conduct reconnaissance, siphon data, and move laterally on ...
The Justice Department claims 10 alleged hackers and two Chinese government officials took part in a wave of cyberattacks ...
As AI-generated code, automation, and cloud-native development accelerate, the report forecasts that secrets sprawl will only ...
GitGuardian, the security leader behind GitHub’s most installed application, today released its comprehensive “2025 State of ...
A new report from Microsoft’s Threat Intelligence has identified a move from Chinese threat actor Silk Typhoon towards ...
We deep dive into the first-ever NHI threat list – exploring each risk, real-world breaches that prove the threat is real, and how to defend against them. The post OWASP’s Top Security Risks for ...