> TritonInfoSec News
Home / Oct 18, 2026 / Story
0
#3 BleepingComputer general October 16, 2026 at 06:18 UTC

BeyondTrust patches zero-day exploited in attacks since August

By Sergiu Gatlan

AI Summary

BeyondTrust issued an emergency patch for a critical zero-day in its Remote Support (RS) product that has been under active exploitation since late August 2026, attributed to a suspected Chinese state-backed threat actor (Armory Castle/UNC5221). The vulnerability enables attackers to gain unauthorized access to managed endpoints. Organizations using BeyondTrust Remote Support should apply the patch immediately given confirmed in-the-wild exploitation spanning nearly seven weeks before disclosure.

Read full article → https://www.bleepingcomputer.com/news/security/bey…

Relevance score: 90.0/100

# More from October 18

  1. 1
    Prolific Chinese espionage group exploits BeyondTrust zero-day CyberScoop
  2. 2
    Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day SecurityWeek
  3. 4
    Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer
  4. 5
    Zero-click attacks used targeted ads to deliver Candiru spyware BleepingComputer
  5. 6
    Critical BlockStrap flaw lets hackers run code on Magento servers BleepingComputer
  6. 7
    Drupal patches critical RCE flaws, warns exploits may emerge soon BleepingComputer
  7. 8
    Cybersecurity incident at BAE Systems disrupts US bankruptcy court system CyberScoop
  8. 9
    OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract The Hacker News
  9. 10
    F5, Juniper Networks Patch Critical Vulnerabilities SecurityWeek