Follow the latest coverage, related explainers and connected technology stories.
The Chinese espionage group Armory Castle exploited a vulnerability rated 9.3 in BeyondTrust Remote Support appliances before a patch was available, carrying out lateral access, data theft, and intrusion cleanup operations. BeyondTrust released the update on October 8, 2026, while self-hosted appliances still require manual patching.