BeyondTrust Zero-Day Exploited Against Remote Support Appliances Since August

A suspected China-linked espionage group exploited CVE-2026-102764 in BeyondTrust Remote Support as a zero-day in late August. Remote support appliances can broker privileged access across an organization.

https://meta-news.info/ver/beyondtrust-remote-support-zero-day-armory-castle-2026