BeyondTrust zero-day exploited by China-linked group Armory Castle

A China-linked group, Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support appliances to gain root-level access and conduct espionage via custom malware and credential theft. Patches have been released, but the incident highlights risks from privileged remote support tools used across many organizations.

This Wire brief sits within Fusion42's coverage of Cybersecurity.