BeyondTrust patches flaw exploited in zero-day attacks since August
Summary
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support software, which it said had been exploited in zero-day attacks since late August. The Hacker News reports that the China-linked group Armory Castle exploited the vulnerability in late August 2026 and identifies it as CVE-2026-102764, an origin-validation flaw in an internal messaging component.
Timeline
BleepingComputer
Source ↗BleepingComputer reports that BeyondTrust urged customers to patch a critical Remote Support flaw exploited in zero-day attacks since late August.
The Hacker News
Source ↗The Hacker News reports that China-linked group Armory Castle exploited the flaw in late August 2026, identifying it as CVE-2026-102764, an origin-validation issue in an internal messaging component.

Comments
No comments yet.
to like and comment.