3 casos · pág. 1/1
Google warns that Armory Castle, a suspected PRC state-sponsored espionage actor, exploited the critical BeyondTrust Remote Support vulnerability CVE-2026-102764 (CVSS 9.3) in August 2026, well before BeyondTrust disclosed it on October 15. The actor escalated privileges to root and established persistent access on compromised appliances.…
ESET analysis describes a two-pronged risk for small and mid-size businesses (SMBs): AI agents create new paths into business systems, while attackers use AI to add speed and scale to established threats. Between March and May 2026, ESET scanned almost 900,000 unique agent skills from popular repositories and found more than 25,000 suspic…
Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…
