Follow the latest coverage, related explainers and connected technology stories.
The Chinese espionage group Armory Castle exploited a vulnerability rated 9.3 in BeyondTrust Remote Support appliances before a patch was available, carrying out lateral access, data theft, and intrusion cleanup operations. BeyondTrust released the update on October 8, 2026, while self-hosted appliances still require manual patching.
BeyondTrust released an update for a critical authentication-bypass vulnerability in Remote Support after it was actively exploited since late August by an espionage actor suspected of ties to China. The vulnerability allows unauthenticated attackers to perform file operations and escalate their privileges to root on affected devices.
A survey conducted by Google’s threat intelligence teams of public web content shows that various actors have begun experimenting with indirect prompt injection to target artificial intelligence systems, with the malicious category increasing by 32% between November 2025 and February 2026. Despite the limited sophistication of the observed attacks, Google expects their volume and complexity to grow as artificial intelligence systems become more capable and the cost of carrying out attacks declines.