Mandiant (Google)Published
ARMORY CASTLE Exploits BeyondTrust
By Google Threat Intelligence Group, Mandiant
Excerpt
Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram
Introduction
On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. The successful exploitation of this vulnerability results in the arbitrary upload of files.
During an incident response engagement, Mandian…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Mandiant (Google) on cloud.google.com.
Mentioned in the excerpt
More from Mandiant (Google)32
- Investigating Ephemeral Supply Chain TamperingMandiant (Google) · Published 15 Oct
- Mandiant Cybersecurity ConsultingMandiant (Google) · Added 18 Oct
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
- Beyond source code: The files AI coding agents trust — and attackers exploitMandiant (Google) · Published 12 May
On the same topics
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- Resources - SecurityScorecardSecurityScorecard · Added 25 Oct
- skanthak.homepage.t-online.de/sentinel.htmlskanthak.homepage.t-online.de · Added 18 Oct
- rapid7.com/db/modules/exploit/linux/local/service_persistenceRapid7 · Added 18 Oct
