The compromised third-party offering was a commercial remote services tool not listed in the marketplace for FedRAMP, the government’s cloud security compliance framework.

The US Treasury Department notified lawmakers on Monday that a China state-sponsored actor infiltrated Treasury workstations ...