⚠️ A Chinese-speaking threat actor quietly breached U.S. local gov systems via a critical flaw in Cityworks.

They didn’t just break in—they stayed—deploying Cobalt Strike & VShell via Rust-based TetraLoader.