BeyondTrust patches zero-day exploited in attacks since August
Summary
BeyondTrust has released a patch for a critical zero-day vulnerability in its Remote Support (RS) software. This vulnerability has been actively exploited in attacks since August. Customers are urged to update their systems immediately to mitigate the risk.
IFF Assessment
This article describes a critical zero-day vulnerability that is being actively exploited, posing a direct threat to organizations using the affected software.
Severity
This is a critical vulnerability in remote support software that has been exploited in the wild as a zero-day since August. It allows for unauthenticated remote code execution, likely with high privileges, making it extremely dangerous. Given the active exploitation and severe impact, a CVSS score of 9.8 (Critical) is estimated.
Defender Context
Organizations using BeyondTrust Remote Support must prioritize patching this critical vulnerability immediately. Active exploitation in the wild as a zero-day indicates that attackers are already leveraging this flaw, and failure to patch leaves systems highly exposed. Defenders should also review logs for any signs of compromise related to this vulnerability.