Facts

• On Thursday, cybersecurity firm Mandiant claimed in an emailed statement that Chinese hackers — believed to be state-supported — have broken into the networks of hundreds of public and private sector organizations globally.
• Mandiant, which was hired by Barracuda Networks, concluded that a security flaw in the company's email security gear was exploited to compromise hundreds of companies and organizations.
• Mandiant, owned by Google, stated with "high confidence" that such activity began as early as October, with a third of targeted groups having used the email security appliance being government agencies.
• According to Mandiant's chief technical officer Charles Carmakal, this is the most severe breach allegedly conducted by a "China-nexus threat actor" since the "mass exploitation" of Microsoft Exchange in 2021. Of the organizations targeted, 55% were from the Americas, 22% from Asia Pacific, and 24% from other regions.
• Barracuda stated Thursday that they believed approximately 5% of its active Email Security Gateway appliances showed evidence of potential compromise, adding that it would provide replacement appliances at no cost.
• When asked for comment on the matter, the US White House reaffirmed an alert made last week by the FBI and the federal government's cybersecurity agency regarding current methods to mitigate potential threats.