BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356) ยท updates https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 Attackers stole a BeyondTrust infrastructure API key for its Remote Support SaaS service and used it to reset local passwords and access 17 customer instances. The US Treasury, one of the customers, said a China state-sponsored actor accessed some Departmental Offices workstations and unclassified documents. During the investigation BeyondTrust found a critical command injection in Remote Support and Privileged Remote Access (CVE-2024-12356, CVSS 9.8) and patched it on 2024-12-16. Added to the CISA KEV catalog on 2024-12-19. en Mon, 30 Dec 2024 00:00:00 GMT BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): Treasury tells Congress of a 'major incident' attributed to a China state-sponsored APT https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-30-cda08b18 Mon, 30 Dec 2024 00:00:00 GMT critical <p><a href="https://s3.documentcloud.org/documents/25472698/letter-from-treasury-re-december-2024-cyberattack.pdf">Source</a></p> BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): CISA added CVE-2024-12356 to the KEV catalog (federal deadline 2024-12-27) https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-19-d5de6d10 Thu, 19 Dec 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): CVE-2024-12356 published https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-17-47543a83 Tue, 17 Dec 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-12356">Source</a></p> BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): BeyondTrust advisory BT24-10; cloud instances patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-16-d525b5e0 Mon, 16 Dec 2024 00:00:00 GMT critical <p><a href="https://www.beyondtrust.com/trust-center/security-advisories/bt24-10">Source</a></p> BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): BeyondTrust notifies the US Treasury https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-08-07faf87e Sun, 08 Dec 2024 00:00:00 GMT critical <p><a href="https://s3.documentcloud.org/documents/25472698/letter-from-treasury-re-december-2024-cyberattack.pdf">Source</a></p> BeyondTrust Remote Support breach reaches US Treasury (CVE-2024-12356): BeyondTrust identifies a compromised Remote Support SaaS infrastructure API key https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356#2024-12-05-248857c2 Thu, 05 Dec 2024 00:00:00 GMT critical <p><a href="https://www.beyondtrust.com/remote-support-saas-service-security-investigation">Source</a></p>