Security58 mOctober 16, 2026, 17:10

Google: China-linked Armory Castle exploits critical BeyondTrust flaw

Google warned that China state-sponsored group Armory Castle is exploiting critical CVE-2026-102764 (CVSS 9.3) in BeyondTrust Remote Support. A patch was released on October 8 and the flaw was disclosed on October 15; attackers gained root access and maintained persistent presence.

Infosecurity Magazine

Open source

Google: China-linked Armory Castle exploits critical BeyondTrust flaw

CVE-2026-102764 in BeyondTrust Remote Support carries a CVSS score of 9.3
Patch released October 8, public disclosure on October 15, 2026
Armory Castle has been active since October 2023 conducting espionage for China
Attackers escalated to root and deployed the Sawfly PHP webshell

#Google#BeyondTrust

CVE-2026-93616: Critical Check Point flaw exploited in the wild

Security

Anthropic's Mythos AI found a critical Rejetto HFS flaw now exploited in the wild

Security

Critical GitLab flaw CVSS 10.0 exploited in the wild

Security

Google: China-linked Armory Castle exploits critical BeyondTrust flaw

CVE-2026-93616: Critical Check Point flaw exploited in the wild

Anthropic's Mythos AI found a critical Rejetto HFS flaw now exploited in the wild

Critical GitLab flaw CVSS 10.0 exploited in the wild

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks