BeyondTrust

Suspected China-Linked Hackers Exploit BeyondTrust Zero-Day

A suspected China-linked group called Armory Castle exploited a zero-day flaw in BeyondTrust Remote Support appliances, gaining deep access and deploying tools to maintain control and reach connected systems. Google and Mandiant urged organizations to patch or mitigate the vulnerability, warning that exploitation could spread now that the flaw is public.