← Back to the feed

~/article/china-linked-hackers-exploited-beyondtrust-zero-day-to-take-over-remote-1ukq7o
criticalSource: The Hacker News

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Related

~/related/china-linked-hackers-exploited-beyondtrust-zero-day-to-take-over-remote-1ukq7o