← Back to the feed

~/article/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day-b6g5u3
criticalSource: SecurityWeek

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

Read at the source

Summary written for cymesh.dev. The full article lives at SecurityWeek.

Referenced CVEs

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Related

~/related/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day-b6g5u3