Vulnerabilities
Google Warns Armory Castle Exploited Critical BeyondTrust Flaw for Root Access
Google states the China-linked group Armory Castle abused CVE-2026-102764 in August to gain persistent root access on BeyondTrust appliances.
Sawfly
Everything Threat Times has reported about Sawfly: 2 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Google Warns Chinese Espionage Group Exploited BeyondTrust Zero-Day for Root Access
Mandiant found ARMORY CASTLE abused a critical flaw in BeyondTrust Remote Support to gain root privileges and deploy backdoors in late August.