The compromised third-party offering was a commercial remote services tool not listed in the marketplace for FedRAMP, the government’s cloud security compliance framework.
The "threat actor" was able to access the workstations via a compromised third-party cybersecurity service provider called ...
The US Treasury Department notified lawmakers on Monday that a China state-sponsored actor infiltrated Treasury workstations ...