> TritonInfoSec News
Home / Oct 18, 2026 / Story
0
#2 SecurityWeek general October 16, 2026 at 10:53 UTC

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

By Ionut Arghire

AI Summary

Chinese APT group Armory Castle exploited CVE-2026-102764 in BeyondTrust as a zero-day, using it for initial access before deploying custom tooling and deliberately destroying logs and forensic artifacts. BeyondTrust disclosed the critical flaw and urged customers to patch, with active exploitation confirmed since at least late August 2026. This continues a pattern of Chinese state-backed actors weaponizing flaws in edge network management and remote support products.

Read full article → https://www.securityweek.com/chinese-apt-exploited…

Relevance score: 91.0/100

# More from October 18

  1. 1
    Prolific Chinese espionage group exploits BeyondTrust zero-day CyberScoop
  2. 3
    BeyondTrust patches zero-day exploited in attacks since August BleepingComputer
  3. 4
    Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer
  4. 5
    Zero-click attacks used targeted ads to deliver Candiru spyware BleepingComputer
  5. 6
    Critical BlockStrap flaw lets hackers run code on Magento servers BleepingComputer
  6. 7
    Drupal patches critical RCE flaws, warns exploits may emerge soon BleepingComputer
  7. 8
    Cybersecurity incident at BAE Systems disrupts US bankruptcy court system CyberScoop
  8. 9
    OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract The Hacker News
  9. 10
    F5, Juniper Networks Patch Critical Vulnerabilities SecurityWeek