#beyondtrust — Public Fediverse posts

Deep dive into CVE-2026-40138! Discover how this critical pre-authentication bypass vulnerability impacts BeyondTrust RS & PRA solutions, how the exploit works under the hood, and immediate remediation steps to secure your enterprise.

👉 https://denizhalil.com/2026/07/10/cve-2026-40138-beyondtrust-authentication-bypass/

#CVE202640138 #BeyondTrust #CyberSecurity

#BeyondTrust warns of critical flaws in remote access software

https://www.bleepingcomputer.com/news/security/beyondtrust-warns-of-critical-flaws-in-remote-access-software/

#cybersecurity

#BeyondTrust warns of critical flaws in remote access software

https://www.bleepingcomputer.com/news/security/beyondtrust-warns-of-critical-flaws-in-remote-access-software/

#cybersecurity

BeyondTrust Remote Support & PRA on-premises contain CRITICAL auth bypass vulnerabilities — could enable unauthorized access if unpatched. No active exploitation yet. Patches available; update now. https://radar.offseq.com/threat/beyondtrust-warns-of-critical-flaws-in-remote-acce-67bb8df4325a1168 #OffSeq #Vulnerability #BeyondTrust #InfoSec

Microsoft Vulnerabilities Spike in Critical Areas

A single critical flaw, like CVE-2025-55241, can give attackers unrestricted access to any tenant, highlighting the alarming rise in critical Microsoft vulnerabilities, which doubled in 2025 despite a stable overall number of vulnerabilities. This sharp increase in high-impact weaknesses demands attention and action.

https://osintsights.com/microsoft-vulnerabilities-spike-in-critical-areas?utm_source=mastodon&utm_medium=social

#MicrosoftVulnerabilities #EntraId #Cve202555241 #IdentityWeakness #Beyondtrust

CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
#BeyondTrust #BeyondTrustSecureRemoteAccess #CVE_2026_1731
https://www.hacktron.ai/blog/cve-2026-1731-beyondtrust-remote-support-rce

CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
#BeyondTrust #BeyondTrustSecureRemoteAccess #CVE_2026_1731
https://www.hacktron.ai/blog/cve-2026-1731-beyondtrust-remote-support-rce

🚨 CVE-2026-1731: CRITICAL RCE in BeyondTrust RS & PRA. Unauthenticated attackers can execute OS commands pre-auth. Restrict access, monitor logs, and prep for patching. CVSS 9.9 — act now! https://radar.offseq.com/threat/cve-2026-1731-cwe-78-improper-neutralization-of-sp-066ed5de #OffSeq #BeyondTrust #Vuln #InfoSec

Our latest interview with Morey J. Haber (Chief Security Advisor, BeyondTrust) explores identity technical debt, Zero Trust gaps, and why least privilege continues to fall short without continuous discovery.

Haber breaks down:
• Why overprivileged accounts remain the biggest lateral-movement risk
• How AI ecosystems expand attack paths
• Why Zero Trust often becomes piecemeal
• Why identity - not endpoints - is the new perimeter
• Essential control layers CISOs must revisit now

Full interview:
https://www.technadu.com/why-organizations-need-better-understanding-and-rethink-access-least-privilege-and-zero-trust-with-ai-in-the-ecosystem/613877/

Follow for more detailed expert interviews.

#CyberSecurity #IdentitySecurity #ZeroTrust #AccessControl #BeyondTrust #MoreyHaber

BeyondTrust introduces identity security controls for AI https://www.helpnetsecurity.com/2025/09/17/beyondtrust-ai-agents-security-controls/ #Industrynews #BeyondTrust

BeyondTrust introduces identity security controls for AI https://www.helpnetsecurity.com/2025/09/17/beyondtrust-ai-agents-security-controls/ #Industrynews #BeyondTrust

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products – Source: www.securityweek.com https://ciso2ciso.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #securityweek #BeyondTrust #Veeam

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products – Source: www.securityweek.com https://ciso2ciso.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #securityweek #BeyondTrust #Veeam

BeyondTrust Remote Support: How template injection can lead to remote code execution
#BeyondTrust #BeyondTrustSecureRemoteAccess #CVE_2025_5309
https://www.resillion.com/latest-news/beyondtrust-remote-support-how-template-injection-can-lead-to-remote-code-execution/

BeyondTrust Remote Support: How template injection can lead to remote code execution
#BeyondTrust #BeyondTrustSecureRemoteAccess #CVE_2025_5309
https://www.resillion.com/latest-news/beyondtrust-remote-support-how-template-injection-can-lead-to-remote-code-execution/

BeyondTrust's platforms are under fire—a new flaw (CVE-2025-5309) lets attackers run code remotely without any credentials. Are your systems patched up? Discover what you need to know.

https://thedefendopsdiaries.com/beyondtrusts-critical-security-flaw-cve-2025-5309/

#beyondtrust
#cve20255309
#cybersecurity
#ssti
#remotecodeexecution

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products https://www.securityweek.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products/ #Vulnerabilities #vulnerability #BeyondTrust #Veeam

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products https://www.securityweek.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products/ #Vulnerabilities #vulnerability #BeyondTrust #Veeam

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products https://www.securityweek.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products/ #Vulnerabilities #vulnerability #BeyondTrust #Veeam

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products https://www.securityweek.com/code-execution-vulnerabilities-patched-in-veeam-beyondtrust-products/ #Vulnerabilities #vulnerability #BeyondTrust #Veeam

CISOs battle security platform fatigue https://www.helpnetsecurity.com/2025/04/07/ciso-security-platform-fatigue/ #BeyondTrust #Don'tmiss #Features #Hotstuff #Panaseer #strategy #Syxsense #Gigamon #opinion #Tuskira #Ivanti #News #CISO #tips

CISOs battle security platform fatigue https://www.helpnetsecurity.com/2025/04/07/ciso-security-platform-fatigue/ #BeyondTrust #Don'tmiss #Features #Hotstuff #Panaseer #strategy #Syxsense #Gigamon #opinion #Tuskira #Ivanti #News #CISO #tips

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain – Source: www.securityweek.com https://ciso2ciso.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #BeyondTrust #NationState #SilkTyphoon #supplychain #PostgreSQL #USTreasury #FEATURED

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain – Source: www.securityweek.com https://ciso2ciso.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #BeyondTrust #NationState #SilkTyphoon #supplychain #PostgreSQL #USTreasury #FEATURED

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/ #Malware&Threats #NationState #BeyondTrust #SilkTyphoon #SupplyChain #PostgreSQL #USTreasury

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/ #Malware&Threats #NationState #BeyondTrust #SilkTyphoon #SupplyChain #PostgreSQL #USTreasury

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/ #Malware&Threats #NationState #BeyondTrust #SilkTyphoon #SupplyChain #PostgreSQL #USTreasury

China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain https://www.securityweek.com/china-hackers-behind-us-treasury-breach-caught-targeting-it-supply-chain/ #Malware&Threats #NationState #BeyondTrust #SilkTyphoon #SupplyChain #PostgreSQL #USTreasury

A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) https://www.helpnetsecurity.com/2025/02/17/a-postgresql-zero-day-was-also-exploited-in-us-treasury-hack-cve-2025-1094/ #BeyondTrust #PostgreSQL #Don'tmiss #Hotstuff #Rapid7 #0-day #News #APT

A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) https://www.helpnetsecurity.com/2025/02/17/a-postgresql-zero-day-was-also-exploited-in-us-treasury-hack-cve-2025-1094/ #BeyondTrust #PostgreSQL #Don'tmiss #Hotstuff #Rapid7 #0-day #News #APT

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation – Source: www.securityweek.com https://ciso2ciso.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #CVE-2024-12356 #CVE-2025-1094 #securityweek #BeyondTrust #NationState #FEATURED #Treasury #Rapid7

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation – Source: www.securityweek.com https://ciso2ciso.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #CVE-2024-12356 #CVE-2025-1094 #securityweek #BeyondTrust #NationState #FEATURED #Treasury #Rapid7

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/ #Vulnerabilities #Nation-State #CVE202412356 #BeyondTrust #CVE20251094 #Treasury #Rapid7

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/ #Vulnerabilities #Nation-State #CVE202412356 #BeyondTrust #CVE20251094 #Treasury #Rapid7

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/ #Vulnerabilities #Nation-State #CVE202412356 #BeyondTrust #CVE20251094 #Treasury #Rapid7

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/ #Vulnerabilities #Nation-State #CVE202412356 #BeyondTrust #CVE20251094 #Treasury #Rapid7

BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key – Source:thehackernews.com https://ciso2ciso.com/beyondtrust-zero-day-breach-exposed-17-saas-customers-via-compromised-api-key-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #BeyondTrust

BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key – Source:thehackernews.com https://ciso2ciso.com/beyondtrust-zero-day-breach-exposed-17-saas-customers-via-compromised-api-key-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #BeyondTrust

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks https://www.securityweek.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks/ #Malware&Threats #BeyondTrust #exploited #CISAKEV

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #BeyondTrust #Exploited #CISAKEV

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks https://www.securityweek.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks/ #Malware&Threats #BeyondTrust #exploited #CISAKEV

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #BeyondTrust #Exploited #CISAKEV

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks https://www.securityweek.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks/ #Malware&Threats #BeyondTrust #exploited #CISAKEV

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks https://www.securityweek.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks/ #Malware&Threats #BeyondTrust #exploited #CISAKEV

China Targeted Foreign Investment, Sanctions Offices in Treasury Hack: Reports – Source: www.securityweek.com https://ciso2ciso.com/china-targeted-foreign-investment-sanctions-offices-in-treasury-hack-reports-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #securityweekcom #securityweek #BeyondTrust #NationState #Government #FEATURED #Treasury #China

China Targeted Foreign Investment, Sanctions Offices in Treasury Hack: Reports https://www.securityweek.com/china-targeted-foreign-investment-sanctions-offices-in-treasury-hack-reports/ #Nation-State #BeyondTrust #Government #Featured #Treasury #China

China Targeted Foreign Investment, Sanctions Offices in Treasury Hack: Reports https://www.securityweek.com/china-targeted-foreign-investment-sanctions-offices-in-treasury-hack-reports/ #Nation-State #BeyondTrust #Government #Featured #Treasury #China

CISA says Treasury was the only US agency breached via BeyondTrust https://www.helpnetsecurity.com/2025/01/07/cisa-says-treasury-was-the-only-us-agency-breached-via-compromised-beyondtrust-instances/ #government-backedattacks #BeyondTrust #Don'tmiss #Hotstuff #Censys #News #CISA #USA