Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

#BeyondTrust #CVE2026102764 #ZeroDay #ArmoryCastle #Mandiant #Cybersecurity #Vulnerability #InfoSec

BeyondTrust zero-day exploited by Armory Castle installs SAWFLY & BARECLAW malware — patches now available. #BeyondTrust #ZeroDay #Malware #CyberEspionage #ArmoryCastle #SecurityNews https://thedailytechfeed.com/china-linked-hackers-exploit-beyondtrust-zero-day-deploy-sawfly-bareclaw/

China-linked group used BeyondTrust zero-day to gain root access and enable persistent backdoors with SAWFLY & BARECLAW. #BeyondTrust #ZeroDay #Cybersecurity #SAWFLY #BARECLAW #ARMORYCASTLE https://thedailytechfeed.com/chinese-espionage-group-uses-zero-day-in-beyondtrust-remote-support/

@mandiant.com
ARMORY CASTLE exploited BeyondTrust zero-day CVE-2026-102764 for root access, credential theft and persistence.
-
IOCs: CVE-2026-102764, SAWFLY, BARECLAW
-
#ARMORYCASTLE #CVE-2026-102764 #ThreatIntel