Google warned on October 15 that organizations should prepare for widespread exploitation of a new bug in BeyondTrust remote support appliances. The vulnerability, identified as CVE-2026-102764, allows unauthenticated attackers to gain host-level control and access stored credentials. Mandiant found evidence that the suspected Chinese state-sponsored actor Armory Castle exploited the flaw in late August. The article notes that Chinese hackers previously breached the U.S. Treasury Department in December 2024 by compromising the same third-party software provider.
Read the full story at legconn.com.
Photo: cookieone / Pixabay
