vulnerability
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
CriticalCVSS 9.8KEVEPSS 26%
Summary
A Chinese cyberattack, attributed to the threat actor group Armory Castle (formerly UNC5221/UTA0178), exploited a critical zero-day vulnerability in BeyondTrust Remote Support appliances. BeyondTrust released a patch on October 9th, and security teams are advised to update immediately and implement compensating controls to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 7 other source(s)
- CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
- CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
- CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
- The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
- CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support