The US Treasury Department told lawmakers in a letter back in December that its documents and workstations were accessed by an external party in a security breach. It described the attack as "a major cybersecurity incident" and attributed it to a "China state-sponsored Advanced Persistent Threat actor." Now, The Washington Post has reported that the bad actors infiltrated a "highly sensitive office" within the Treasury in charge of deliberating and administering US government sanctions. 

As The Post explains, the Office of Foreign Assets Control (OFAC) is in possession of some important information that could be very useful to another country's government. While the hackers were only able to steal unclassified data, they could still have gotten their hands on the identities of potential sanction targets. They could also have stolen pieces of evidence that the agency had collected as part of its investigation on entities that the government is thinking of sanctioning. Overall, the attackers could have gotten enough information to give them the knowledge of how the US develops sanctions against foreign entities. 

In addition to OFAC, the Office of the Treasury Secretary and the Office of Financial Research were also affected by the breach. The attackers infiltrated the Treasury's systems by gaining access to a key used by BeyondTrust, a cloud-based service that provides the department with technical support. 

The US government has attributed numerous cyberattacks on its agencies and American companies to China state-sponsored actors over the years. Just last year, the FBI blamed "PRC-affiliated actors" for a massive hack on US telecom companies. The actors, a group known as Salt Typhoon, reportedly targeted the mobile devices of diplomats, government officials and other people linked to both presidential campaigns. According to The Post, Chinese officials called claims that their country was involved in the attack on the Treasury Department "groundless" and insisted that their government "has always opposed all forms of hacker attacks."

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/china-linked-attack-on-us-treasury-department-reportedly-targeted-its-sanctions-office-150033082.html?src=rss

©

© Ali Majdfar via Getty Images

Documents and workstations at the US Treasury Department were accessed during a cyberattack, The New York Times reports. The attack was linked to a "China state-sponsored Advanced Persistent Threat actor" and has been characterized as "a major cybersecurity incident."

According to a letter the Treasury Department shared with lawmakers (via TechCrunch), US officials were made aware of the issue on December 8, when BeyondTrust, a third-party software company, shared that a security key used to provide technical support was used to access workstations and unclassified documents. 

The Treasury Department said that it has worked with the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI to understand the full scope of the breach, but hasn't shared how long files and workstations were accessible or what was actually accessed. Engadget has contacted the US Treasury Department and will update this article once we know more.

The cyberattack follows a similarly concerning, but separate breach of US telecom carriers that came to light in October 2024. That cyberattack was perpetrated by a Chinese hacking group referred to as "Salt Typhoon." Attackers gained access to unencrypted SMS messages and call logs of politicians, government officials and others for months before the breach was discovered.

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/the-us-treasury-department-says-it-was-hacked-in-a-china-linked-cyberattack-230114104.html?src=rss

©

© REUTERS / Reuters

The National Defense Authorization Act (NDAA) spending bill has just been release and it grants DJI a year's grace before it's potentially banned in the US, The Verge reported. It was expected that DJI and rival Autel could be banned by the end of 2024 because of the Countering CCP Drones Act provision. However, the bill gives DJI an extra year to prove to an "appropriate national security agency" that its products don't pose a national security risk in the US. 

Failing that, the bill authorizes the Federal Communications Commission (FCC) to place DJI's drones on its covered list for 2026, meaning retailers would no longer be able to import them. It also means that the products (including drones and cameras like the Osmo Pocket 3) would be prohibited from connecting to US networks, and their internal radios would no longer be authorized by the FCC. That would technically prohibit the use of DJI products already owned by consumers, though the US wouldn't likely stop consumers from doing so. 

In a reply on its Viewpoints blog, DJI said it's "good news" that the ban wasn't included in this year's budget. However, it pointed out that "drones manufactured in China are singled out for scrutiny and the legislation does not designate a specific agency to undertake the required study." The latter point could cause the company harm "simply because no agency chose to take on the work of studying our product," it wrote.

The main reason DJI is still alive is through the support of drone enthusiasts and content creators, along with law enforcement and search and rescue organizations. "In the event that a bill like this would go fully through and would potentially ban the use of Chinese drones for public safety, it'd be catastrophic for the public safety drone industry," said Law Enforcement Drone Association spokesperson Brendan Karr in a letter to Congress. 

However, US representatives believe they're a risk. "DJI drones pose the national security threat of TikTok, but with wings. This Chinese-controlled company cannot be allowed to continue to operate in the US," said Republican Representative Elise Stefanik. "These Chinese-manufactured drones allow for the CCP, the Chinese Communist Party, to access data in a backdoor manner and ultimately surveil Americans," added Democratic Representative Raja Krishnamoorthi. 

This article originally appeared on Engadget at https://www.engadget.com/cameras/dji-evades-us-ban-but-has-one-year-to-prove-its-products-arent-a-national-security-threat-133042749.html?src=rss

©

© Steve Dent for Engadget

DJI hasn't finished yet with its busy 2024, as it just announced the Mic Mini wireless microphone system. The company took most of the characteristics of the popular Mic 2 and shrunk it down considerably, while also making it much more affordable.

The Mic Mini consists of a receiver and one or two transmitters with built-in microphones. To use it, you just affix the mics to your subject, either via a clip or magnetic attachment, and turn them on. Then, power up the receiver and connect it to your camera via a 3.5mm cable. Everything pairs automatically, and the final step is to adjust your levels using the dial on the side. 

Steve Dent for Engadget

The mics feature omnidirectional recording and the receiver can work with two of them at once, either to separate channels or mixed together. If you use it with the DJI Mimo app, you can record backup audio at 6db lower than the main track to avoid any clipping issues. Audio can be transmitted up to 400 meters (1,300 feet) and DJI says it provides stable audio even in busy electronic environments thanks to the anti-interference tech. 

The Mic Mini is part of DJI's OsmoAudio ecosystem, so the transmitters can connect to other DJI devices like the Osmo Action 5 Pro, Osmo Action 4 or Osmo Pocket 3 without a receiver to simplify workflow. It also connects directly to smartphones via Bluetooth, again with no receiver required (if you want to use multiple mics with your smartphone, there's an optional USB-C adapter for the transmitter). It's available in a kit with a charging case that keeps everything in one place and provides 48 hours of extended use when fully charged. 

DJI

The main feature missing that can be found on the more expensive Mic 2 is a 3.5mm port on the transmitters for an external microphone. The Mic Mini also lacks the Mic 2's internal 32-bit float recording that eliminates clipping. 

I've used the system for a short while and the microphones are the smallest and lightest I've seen yet and are relatively discreet apart from the DJI logo (which is nothing a piece of black tape won't fix). They're easy to attach with the magnetic clips and don't flop around like the Mic 2 or other larger wireless mics on loose clothing (t-shirts etc.) because they're so light at 10 grams. I used them for two videos and they offered crisp sound across all frequencies — in fact, I couldn't tell the difference between the Mic Mini and Mic 2 by ear. 

DJI

I also tested the Mic Mini with an Android smartphone, iPad and DJI's Action 5 camera, and it worked flawlessly. You can use the DJI Fly app to connect to a Neo drone and benefit from the noise reduction, much as you can with the Mic 2. 

The Mic Mini arrives shortly after Sennheiser launched its $299 Profile Wireless Mic, though that product competes more closely with the DJI Mic 2 (and lacks a Bluetooth transmitter). Another option is the $150 Rode Wireless Micro, which only works with smartphones and not cameras.

For creators, the most interesting part of the Mic Mini is bound to be the price. For a one receiver and one transmitter, you'll pay just $89, and a full kit with a charging case, two transmitters, a receiver, cable and wind muffs is $169. It's available at DJI's store, Amazon and elsewhere. 

This article originally appeared on Engadget at https://www.engadget.com/audio/djis-tiny-mic-mini-offers-high-quality-wireless-sound-recording-starting-at-89-130036583.html?src=rss

©

© Steve Dent for Engadget