BeyondTrust doing their darnedest not to explicitly say that there's an exploited zero-day vulnerability in their Remote Support product. CVE-2026-102769 (CVSS4: 9.3 critical) authentication bypass > remote attacker can perform file operations
> A suspected China-nexus espionage actor exploited a zero-day vulnerability.
https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
https://www.beyondtrust.com/blog/entry/bt26-05
https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/
#beyondtrust #china #zeroday #espionage #CVE #eitw #mandiant #ArmoryCastle #UNC5221
ssvc
npub1dv…jfshx
2026-10-16 01:31:01 UTC
Author Public Key
npub1dvrxvdpkggqs4eq5m670khgenxgzqqwmlq8a3kkcru85dsg7e2rsqjfshxSeen on
wss://relay.momostr.pinkPublished at
2026-10-16 01:31:01 UTCEvent JSON
{
"id": "0dfc7a045587b3eee88e499e344d24c24bef127a1ee203841dcae9383d682da2",
"pubkey": "6b0666343642010ae414debcfb5d1999902001dbf80fd8dad81f0f46c11eca87",
"created_at": 1792114261,
"kind": 1,
"tags": [
[
"t",
"zeroday"
],
[
"t",
"eitw"
],
[
"proxy",
"https://infosec.exchange/@ssvc/117448000256408085",
"web"
],
[
"t",
"espionage"
],
[
"t",
"mandiant"
],
[
"t",
"beyondtrust"
],
[
"t",
"china"
],
[
"t",
"cve"
],
[
"t",
"unc5221"
],
[
"t",
"armorycastle"
],
[
"proxy",
"https://infosec.exchange/ap/users/117202824925377048/statuses/117448000256408085",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/117202824925377048/statuses/117448000256408085",
"pink.momostr"
],
[
"-"
]
],
"content": "BeyondTrust doing their darnedest not to explicitly say that there's an exploited zero-day vulnerability in their Remote Support product. CVE-2026-102769 (CVSS4: 9.3 critical) authentication bypass \u003e remote attacker can perform file operations \n\n\u003e A suspected China-nexus espionage actor exploited a zero-day vulnerability. \n\nhttps://www.beyondtrust.com/trust-center/security-advisories/bt26-05\nhttps://www.beyondtrust.com/blog/entry/bt26-05\nhttps://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/\n\n#beyondtrust #china #zeroday #espionage #CVE #eitw #mandiant #ArmoryCastle #UNC5221",
"sig": "f2bd0fecac90fcfbd9b7fe8e9605f1d2d86e91f676d30629e218708809594b2b99a4a65cc0d4126362d479591d3eb436feb96cd9dc569326d18d6fb13e393a20"
}