attack_type:web_shell × criticity:critical × threat_actors:UNC5221 × limpar

Resultados

2 casos · pág. 1/1

cyberscoop.com · há 1d · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support zero-day CVE-2026-102764 from late August

Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…

CVE-2026-102764 Armory Castle UNC5221 legal services saas

thehackernews.com · há 1d exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

CVE-2026-102764 CVE-2026-110447 CVE-2021-36260 Armory Castle UNC5221 retail technology