Google warns suspected China-linked hackers could exploit BeyondTrust flaw | Межа

A suspected China-linked group exploited the flaw in August, and Google warns that disclosure could prompt wider attacks.

Successful exploitation of the vulnerability gives attackers access to credentials, lets them upload files arbitrarily and allows them to take control of the host, according to Google Threat Intelligence Group and Mandiant.

This is reported by Reuters .

Google’s blog said a suspected China-linked hacking group known as Armory Castle exploited the previously unknown vulnerability in August.

The flaw affects BeyondTrust Remote Support, an enterprise tool that lets information technology teams remotely access and troubleshoot computers and other devices.

Google warned organizations to prepare for “potential widespread exploitation.” Now that the vulnerability has been disclosed, Armory Castle and others may try to exploit it widely, Google said, citing past behavior. The company urged organizations to patch or mitigate the flaw swiftly.

You may be interested in these materials:

YouTube and Google reached a confidential settlement on June 23, 2026 with a minor plaintiff who alleged the platform caused mental harm, amid wider trials over social media design and youth mental health.

A Pentagon personnel system breach exposed unencrypted personal records of 2.8 million living people and nearly 300,000 deceased, including Social Security numbers and military service details.

Suspected China-linked hackers impersonated a former White House official and an Anthropic employee to target US AI experts, according to cybersecurity firm Proofpoint.