Summary
A Chinese state-sponsored hacker group breached the U.S. Treasury Department by exploiting a vulnerability in the third-party cybersecurity provider BeyondTrust.
The attackers used a stolen key to override security measures, accessing departmental workstations and unclassified documents.
The Treasury Department, alerted on December 8, reported no evidence of ongoing access.
The department is working with the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI to investigate the breach, which highlights risks tied to third-party software vulnerabilities.
Not networked and running on some legacy-as-fuck software. Saw quite a bit of this working in hospitals. You would be surprised how many medical devices are still running Windows XP.
From 2014
https://arstechnica.com/information-technology/2014/04/60-minutes-shocked-to-find-8-inch-floppies-drive-nuclear-deterrent/