SecurityThe Hacker Newsabout 3 hours ago
China Hackers Exploit BeyondTrust Zero-Day
4 min read
China-linked group Armory Castle exploited a BeyondTrust zero-day flaw on August 29, 2026. Patches arrived for SaaS customers by October 9, 2026, while self-hosted users must manually update to BT26-05-RS. The attack used a PHP web shell named SAWFLY to steal credentials and gain root access.
Level
Hype check
Tap to vote and see what everyone thinks.