Cybersecurity incident — 2023-04-21 00:00:00
Affected organization: Undisclosed critical infrastructure organization in the United States
Affected country: United States of America
Industry: Utilities
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Political-Espionage
Actor: NGB 3rd Technical Surveillance Bureau
Actor type: Nation-State
Actor country: Korea (the Democratic People's Republic of)

Researchers from Symantec/Broadcom reveal that the software supply chain attack that led to last month's 3CX breach has also impacted at least several critical infrastructure organizations in the United States and Europe.