attack_type:zero_day × cves:CVE-2026-102764 × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · há 1d · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support flaw CVE-2026-102764 as zero-day since August 2026

Google warns that Armory Castle, a suspected PRC state-sponsored espionage actor, exploited the critical BeyondTrust Remote Support vulnerability CVE-2026-102764 (CVSS 9.3) in August 2026, well before BeyondTrust disclosed it on October 15. The actor escalated privileges to root and established persistent access on compromised appliances.…

CVE-2026-102764 Armory Castle legal services technology

thehackernews.com · há 1d exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

CVE-2026-102764 CVE-2026-110447 CVE-2021-36260 Armory Castle UNC5221 retail technology