BeyondTrust Remote Support Zero-Day Exploited

Brass key ring with a blue tag and a loose copied key, symbolizing the BeyondTrust Remote Support zero-day CVE-2026-102764

A BeyondTrust Remote Support zero-day has been exploited since August 29, and CISA added it to the Known Exploited Vulnerabilities catalog on October 16. Google’s Mandiant ties the attacks to Armory Castle, a China-linked espionage group, and says any internet-reachable appliance on a vulnerable version should be treated as potentially compromised until it has been…

Read More