CyberNew CyberNew
Cyber News The Record 6 hours ago

Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Cyber News

Analyst Takeaway

"Image: BeyondTrust / maks_d via Unsplash Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day An alleged Chinese state-backed group is using a new zero-day in BeyondTrust software to conduct espionage attacks. BeyondTrust, Mandiant and Google Threat Intelligence Group (GTIG) confirmed the zero-day on Thursday evening, publishing incident reports detailing attacks..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
BeyondTrust
Image: BeyondTrust / maks_d via Unsplash

Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

An alleged Chinese state-backed group is using a new zero-day in BeyondTrust software to conduct espionage attacks. 

BeyondTrust, Mandiant and Google Threat Intelligence Group (GTIG) confirmed the zero-day on Thursday evening, publishing incident reports detailing attacks involving the bug.

The identity security company said the vulnerability affects its Remote Support appliances that enable IT teams to securely access and troubleshoot remote endpoints. A patch has been released addressing the issue and several mitigations are available. Other cybersecurity firms have since confirmed exploitation. 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →