/
attack_type:espionage × criticity:critical × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

infosecurity-magazine.com · · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support flaw CVE-2026-102764 as zero-day since August 2026

Google warns that Armory Castle, a suspected PRC state-sponsored espionage actor, exploited the critical BeyondTrust Remote Support vulnerability CVE-2026-102764 (CVSS 9.3) in August 2026, well before BeyondTrust disclosed it on October 15. The actor escalated privileges to root and established persistent access on compromised appliances.…

CVE-2026-102764 Armory Castle legal services technology
cyberscoop.com · · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support zero-day CVE-2026-102764 from late August

Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…

CVE-2026-102764 Armory Castle UNC5221 legal services saas
darkreading.com · · 7 fontes · 7 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…

Storm-0940 TAG-217 aerospace defense