Stories

Google Warns of Widespread Exploitation After Critical BeyondTrust Bug Discovery
C
CNBC TV18•16-10-2026, 08:39
Google Warns of Widespread Exploitation After Critical BeyondTrust Bug Discovery
  • •Google warned organisations to prepare for potential widespread exploitation following the discovery of a critical bug in BeyondTrust remote support appliances.
  • •Successful exploitation allows attackers to access credentials, arbitrarily upload files, and assume control of the host system.
  • •A suspected China-linked hacking group named Armory Castle had already exploited the zero-day vulnerability in August.
  • •The flaw impacts BeyondTrust Remote Support, an enterprise tool used by IT teams for remote access and troubleshooting.
  • •Google urged swift action to patch or mitigate the vulnerability as other threat actors may attempt to exploit it now that it is public.

Key Questions Answered

Successful exploitation of the bug gives attackers access to credentials, lets them arbitrarily upload files, and allows them to assume full control of the host system.

A suspected China-linked hacking group named Armory Castle exploited the vulnerability in August before it was publicly disclosed.

Google has urged organizations to take swift action to either patch or mitigate the vulnerability to prevent potential widespread exploitation.

Active Attacks Underway Following Discovery of BeyondTrust Security Bug, Google Reports