Back to all news
Security

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The Hacker News·October 16, 2026·1 min read
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

China-linked cyber espionage group Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed zero-day in BeyondTrust Remote Support (formerly Bomgar) in late August 2026. The vulnerability, CVE-2026-102764 with a CVSS score of 9.3, stems from improper origin validation in an internal messaging component, allowing attackers to take over remote support servers.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store