In case you're not familiar with BeyondTrust, this is their missions statement;
We’re on a mission
BeyondTrust fights every day to secure identities, intelligently remediate threats, and deliver dynamic access to empower and protect organizations around the world. Our vision is a world where all identities and access are protected from cyber threats. Our innovative approach goes beyond just PAM to find, manage, and protect the Paths to Privilege™.
The incident;
The BeyondTrust hacking incident involved a compromise of the company's Remote Support SaaS instances, which was detected on December 2, 2024. Threat actors managed to breach some of these instances by gaining access to a Remote Support SaaS API key, which allowed them to reset passwords for local application accounts. This incident led to a significant breach at the U.S. Treasury Department, where hackers accessed departmental workstations and unclassified documents, labeling it a "major cybersecurity incident."
The breach was attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor, with the Treasury Department confirming that the compromised BeyondTrust service was taken offline, and there was no evidence indicating continued access by the threat actor to Treasury systems or information post-incident. BeyondTrust responded by patching all known vulnerabilities in their SaaS instances and providing updates for self-hosted systems. The investigation into the full scope and impact of the breach was ongoing as of early January 2025, with the U.S. Treasury Department being the only confirmed federal agency affected by this particular incident.
This event has highlighted vulnerabilities in third-party cybersecurity tools and the risks associated with supply chain attacks in cybersecurity.

​According to a report in The Wall Street Journal, a threat actor group with ties to China’s government has broken into the networks of several US broadband providers. Known as Salt Typhoon, the group may have accessed systems used for court-authorized wiretaps. The breached companies include Verizon, AT&T, and Lumen/Century Link. The incident is being investigated the FBI, U.S. intelligence agencies, and the Department of Homeland Security.

In a form 8-K filing with the US Securities and Exchange Commission (SEC), Dick’s Sporting Goods says that they “discovered unauthorized third-party access to its information systems” on August 21. Dick’s activated their cybersecurity incident response plan and brought in third-party experts.

The real question is would they have announced it if it weren't required by the SEC. 

​The US Federal Bureau of Investigation (FBI) has announced the takedown of the Radar/Dispossessor ransomware infrastructure. The takedown was an international operation, involving the dismantling of servers and domains in the UK, Germany, and the US. Law enforcement organizations in all three countries were involved. The ransomware operation has targeted 43 companies around the world.

​Microsoft says that an eight-hour Azure and Microsoft 365 outage on Tuesday, July 30, was due to “an error in the implementation” of their distributed denial-of-service (DDoS) attack response mechanisms. Rather than mitigate the incident, the buggy protection mechanism amplified the attack.

​Throwing out old PCs? Hold on...Call Lanit First.
We provide drive wipe and destruction at no charge for our customers. We use a DOD standard wipe and then crush them in a 20 ton press.
Here's a few things to consider prior to throwing them in the dumpster -
Data Security: Hard drives often contain sensitive information such as financial records, customer data, proprietary information, and employee details. Destroying hard drives ensures this data cannot be retrieved and misused by unauthorized individuals.
Compliance with Regulations: Various laws and regulations, such as GDPR, HIPAA, and others, require businesses to properly dispose of data to protect privacy and prevent data breaches. Failure to comply can result in severe legal penalties and fines.
Preventing Data Breaches: Improper disposal of hard drives can lead to data breaches, where sensitive information is accessed by cybercriminals. This can cause financial losses, damage to reputation, and loss of customer trust.
End-of-Life Data Management: When PCs are decommissioned or replaced, the data stored on their hard drives must be securely managed. Destroying the hard drives ensures that no residual data remains accessible.
Intellectual Property Protection: Companies often store trade secrets, patents, and proprietary research on their hard drives. Destroying these drives prevents competitors from accessing valuable intellectual property.
Mitigating Risks of Identity Theft: Personal information stored on hard drives can be used for identity theft if it falls into the wrong hands. Destroying the drives eliminates this risk.