Back to today’s briefing

Story perspectives

Chinese Hackers Breach U.S. Treasury via Third-Party Provider

1/2/2025

28 3

Summary

Chinese Hackers Breach Treasury

Chinese state-sponsored hackers infiltrated the U.S. Treasury Department, leveraging weaknesses in the third-party provider BeyondTrust. By stealing an API key, they accessed sensitive unclassified documents. Discovered on December 8, this breach has sparked a significant cybersecurity investigation, although officials report no signs of continued access to Treasury systems.

Summary

Phishing Attack Compromises Extensions

A phishing campaign has infiltrated 35 Google Chrome extensions, including Cyberhaven's, putting over 600,000 users at risk of data theft. Deceptive emails enabled attackers to inject harmful code, compromising social media advertising logins. Detected on December 25, this breach has sparked serious concerns about the security of browser extensions and user safety online.

1 of 2

Chinese Hackers Breach Treasury

Chinese state-sponsored hackers infiltrated the U.S. Treasury Department, leveraging weaknesses in the third-party provider BeyondTrust. By stealing an API key, they accessed sensitive unclassified documents. Discovered on December 8, this breach has sparked a significant cybersecurity investigation, although officials report no signs of continued access to Treasury systems.

1 / 2