Skip to main content

Tag: armory castle

2 articles

Laptop on a neutral surface with blurred cityscape in the background.

Google Warns of China Espionage Actor Exploiting BeyondTrust Flaw

Google warns that a suspected China state-sponsored espionage actor, known as Armory Castle, has been actively exploiting a critical BeyondTrust Remote Support vulnerability, rated 9.3 on the CVSS scale, since August 2026. This group has a history of long-term intelligence collection for the People’s Republic of China, targeting industries from legal services to government agencies.

Analyst 207
Rows of equipment racks in a brightly-lit server room with technicians in the background.

China-Linked Hackers Exploit BeyondTrust Zero-Day to Breach Remote Support Servers

A high-severity flaw in BeyondTrust Remote Support was exploited as a zero-day by a China-linked group, allowing them to take control of at least one self-hosted remote support appliance. The vulnerability, rated CVSS 9.3, was swiftly patched by BeyondTrust for SaaS customers, with self-hosted customers receiving manual update instructions.

Analyst 207