Cybersecurity · 3 views
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
Armory Castle exploited a BeyondTrust Remote Support zero-day on a self-hosted appliance and deployed the SAWFLY web shell.
Cybersecurity 
Story intelligence
Coverage Single outlet Single-outlet story
Views 3 Community interest
Brief read Under 1 min brief 33 words
AI Summary
China‑linked espionage group Armory Castle, also known as UNC5221 or Warp Panda, used a newly disclosed zero‑day vulnerability in BeyondTrust Remote Support (formerly Bomgar) to compromise remote support servers in late August 2026.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
Part of Beyondtrust coverage 6 tracked stories
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers sayContinue reading
- Microsoft Patches Two Dozen RCE Flaws in OfficeContinue reading
- BAE Systems cyberattack disrupts US federal court operationsContinue reading
- BeyondTrust patches zero-day exploited in attacks since AugustContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow