Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]
Chinese hackers hijack auth flow, spy on isolated network for a decade
Summary + source link. No paywalls, no tracking.