Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
TN

The Hacker News

5h ago
1 0

Discussion

Leave the first comment

Be the first to leave a mark on this discussion.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

giulia_design

Giulia

GiuliaUpvoted 50m ago1 comments · 41 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Burger King Japan data breach exposes 11 million customer recor…

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11…
Noor Bakker

Noor Bakker

2026-10-16 14:41
0
darkreading.com
When AI Agents Commit Breaches, Humans May Not Be Held Liable

As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
DR

Dark Reading

15m ago
0
darkreading.com
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
DR

Dark Reading

4h ago
0
thehackernews.com
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Re…

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
Golden Greta

Golden Greta

8h ago
0
bleepingcomputer.com
Hackers hijack D-Link, Ubiquiti devices to resell your stolen b…

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [. .. ]
SA

SariMartinez

18h ago
0
thehackernews.com
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al …

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed n…
Thanakorn Boon

Thanakorn Boon

18h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Re…

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
Golden Greta

Golden Greta

8h ago
0
thehackernews.com
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al …

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed n…
Thanakorn Boon

Thanakorn Boon

18h ago
0
thehackernews.com
India Mandates Registered Caller Name Display on 4G and Newer N…

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers fo…
TN

The Hacker News

1d ago
0
thehackernews.com
GhostAction Compromises About 1,900 GitHub Accounts, Targets Ov…

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30, 000 repositories across 3, 000 users and organizations. The spike, a…
TN

The Hacker News

1d ago
0
thehackernews.com
Cisco Warns of Active Attacks Exploiting New Critical Secure Em…

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco&…
Carlos the great

Carlos the great

1d ago
0
thehackernews.com
Microsoft Patches Record 1,413 Flaws, Including Exploited Windo…

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1, 413 vulnerabilities, including one that it said has come unde…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest