Archive — US — techcrunch
Belgium investigating alleged cyberattack on intelligence agency by China-linkedhackers
Belgium's federal prosecutor is investigating a cyberattack on its intelligence agency, VSSE, allegedly by Chinese hackers who accessed the agency's mail server between 2021 and 2023, exploiting a vulnerability in Barracuda's software. While classified data remained secure, personal information of about half the agency's staff was compromised.
Key points
- Belgium’s investigation started in November 2023 after a breach was detected.
- Hackers reportedly exploited a vulnerability in Barracuda’s Email Security Gateway software.
- The breach allowed hackers to access around 10% of VSSE's emails.
- Personal data of nearly half of VSSE employees was compromised, but not classified information.
- Barracuda released a patch for the vulnerability in June 2023, urging the replacement of affected appliances.
- VSSE stopped using Barracuda products after the breach was publicly reported in July 2023.
Why it matters
- Cybersecurity continues to be a pivotal concern in international relations, particularly with increasing incidents of state-sponsored hacking up to 2025.
- This incident highlights the critical vulnerabilities in government and corporate cybersecurity infrastructure.
- It reflects the trend of zero-day exploits being weaponized by nation-state actors, a key issue in cybersecurity discussions leading into 2025.
The investigation sheds light on the ongoing threats posed by state-sponsored cyber activities, especially from China, emphasizing the need for enhanced cybersecurity measures across government agencies.