BeyondTrust doing their darnedest not to explicitly say that there's an exploited zero-day vulnerability in their Remote Support product. CVE-2026-102769 (CVSS4: 9.3 critical) authentication bypass > remote attacker can perform file operations
A suspected China-nexus espionage actor exploited a zero-day vulnerability.
https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
https://www.beyondtrust.com/blog/entry/bt26-05
https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/
#beyondtrust #china #zeroday #espionage #CVE #eitw #mandiant #ArmoryCastle #UNC5221