Follow the latest coverage, related explainers and connected technology stories.
The Chinese espionage group Armory Castle exploited a vulnerability rated 9.3 in BeyondTrust Remote Support appliances before a patch was available, carrying out lateral access, data theft, and intrusion cleanup operations. BeyondTrust released the update on October 8, 2026, while self-hosted appliances still require manual patching.
BeyondTrust released an update for a critical authentication-bypass vulnerability in Remote Support after it was actively exploited since late August by an espionage actor suspected of ties to China. The vulnerability allows unauthenticated attackers to perform file operations and escalate their privileges to root on affected devices.