BeyondTrust fixes Remote Support flaw used in espionage attacks
A suspected China-linked espionage group exploited CVE-2026-102764 in late August, before its disclosure, to compromise Remote Support appliances. Reports identify the group as Armory Castle and describe attackers installing tools to maintain access. BeyondTrust urged customers to patch the critical vulnerability on Thursday, according to BleepingComputer.
- Google warned of potential widespread exploitation, according to The Economic Times.
- Attackers deleted logs and other artifacts, according to SecurityWeek.
Covered by 8 publishers within 18 hours of the first report.
- BleepingComputer: BeyondTrust patches zero-day exploited in attacks since August
- Latest CyberScoop: Prolific Chinese espionage group exploits BeyondTrust zero-day
Reporting8
The Economic Times Google warns suspected China-linked hackers could exploit BeyondTrust flaw
BleepingComputer BeyondTrust patches zero-day exploited in attacks since August · Sergiu Gatlan
The Hacker News China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers · info@thehackernews.com (The Hacker News)
Cyber Security News Chinese Hackers Exploit BeyondTrust Zero-Day to Gain Root Access and Deploy Backdoors · Tushar Subhra Dutta
SecurityWeek Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day · Ionut Arghire
CyberScoop Prolific Chinese espionage group exploits BeyondTrust zero-day · Matt Kapko
Dark Reading BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs · Nate Nelson
Discussion
Hacker News 1 points, 0 comments