HackerFeeds

CyberSecurity News

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

SecurityWeek
· October 16, 2026
VulnerabilitiesNation-State

AI summary

A Chinese advanced persistent threat group, known as Armory Castle, exploited a BeyondTrust vulnerability as a zero-day for initial access. The group then deployed custom tools and took steps to cover their tracks by deleting logs and artifacts, using the vulnerability identified as CVE-2026-102764.

Vulnerabilities mentioned

CVE-2026-102764
UNKNOWN

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Read the full article at SecurityWeekwww.securityweek.com/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.