News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 19 Oct· 3 articles
-
BeyondTrust Remote Support flaw exploited before disclosure enabled file access
CVE-2026-102764 is a critical authentication bypass in BeyondTrust Remote Support (RS) that was exploited in the wild before a full disclosure. The flaw allows unauthenticated remote attackers to perform file operations on an affected RS appliance without…
-
Attackers Exploited BeyondTrust Zero Day as Crypto Wallets Were Backdoored
The Hacker News’s weekly recap highlights a week thick with high-stakes cyber incidents and disclosures across software, hardware and AI-enabled systems. Notably, BeyondTrust Remote Support was exploited as a zero-day in late August 2026 (CVE-2026-102764),…
-
Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin
Between 12 and 18 October 2026, CVE Watchtower logged 5,499 new vulnerabilities, with this weekly review tracking 12 exploited flaws. Six of those were flagged by Daily Cybersecurity’s intelligence sources, and three of the exploited flaws are not yet…
Sat 17 Oct· 1 article
-
CISA Flags Fortinet and BeyondTrust Flaws Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Fortinet Multiple Products Path Traversal (CVE-2025-61624) and BeyondTrust Remote Support Authentication…
Fri 16 Oct· 7 articles
-
China-linked hackers exploited BeyondTrust zero-day to steal credentials
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
-
CISA Warns of Exploited BeyondTrust Remote Support Auth Bypass
CISA added CVE-2026-102764 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 October 2026. The flaw affects BeyondTrust Remote Support and is an authentication bypass by spoofing that could let a remote attacker perform file operations on the…
-
BeyondTrust Patches Zero-Day Flaw Used to Gain Root Access
BeyondTrust disclosed CVE-2026-102764, a critical improper origin validation vulnerability (CWE-290) in its internal Remote Support messaging component. The flaw allowed remote attackers to trigger file operations without authentication or user interaction…
-
Chinese APT exploited BeyondTrust Remote Support flaw to steal files
A Chinese state‑sponsored APT, Armory Castle (UNC5221/Warp Panda), has been exploiting a BeyondTrust Remote Support vulnerability as a zero‑day since August 2026. The flaw, CVE-2026-102764, allows improper validation of message origins and could enable a…
-
China-Linked Hackers Exploited BeyondTrust Flaw to Install Root Backdoor
A suspected China state-backed actor, Armory Castle, exploited a newly disclosed critical vulnerability in BeyondTrust Remote Support, CVE-2026-102764, to gain access and escalate privileges on affected appliances. Google warns this allowed the group to…
-
BeyondTrust Patches Remote Access Flaw Exploited to Steal Credentials
BeyondTrust disclosed a critical remote-access vulnerability in its BeyondTrust Remote Support product, tracked as CVE-2026-102764, with a CVSS of 9.3. The flaw allows unauthenticated remote attackers to bypass origin validation in internal messaging…
-
China Linked Hackers Exploited BeyondTrust Zero Day to Steal Credentials
China-linked threat group Armory Castle, also known as UNC5221 or Warp Panda, exploited a zero-day in BeyondTrust Remote Support (formerly Bomgar) to compromise a self-hosted appliance in late August 2026. The flaw, tracked as CVE-2026-102764, is rated 9.3…
Thu 15 Oct· 1 article
-
China Linked ARMORY CASTLE Exploited BeyondTrust Flaw as a Zero Day
Google Threat Intelligence Group (GTIG) and Mandiant say the suspected China-linked espionage group ARMORY CASTLE, formerly tracked as UNC5221, exploited BeyondTrust Remote Support vulnerability CVE-2026-102764 as a zero-day in late August 2026. BeyondTrust…
No older articles match these filters.