BeyondTrust Critical Security Flaws
On 7 July, The Hacker News reported that BeyondTrust had patched critical authentication-bypass flaws in its Remote Support and Privileged Remote Access products. BleepingComputer reported the same day that BeyondTrust was warning customers about critical flaws in its remote-access software. The available picture remains narrow. BeyondTrust has issued patches, and administrators using the affected products must address critical authentication weaknesses.
Assuming the reports are factual, impact is 0%. BeyondTrust Remote Support and PRA administrators must apply the available patches, but the tracked reports describe warnings and fixes without reporting wider consequences.
Watch for BeyondTrust to publish or update details on affected versions and remediation. Evidence of active exploitation would materially change the picture.
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. [...]
Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly
Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could result in an authentication bypass. MOVEit
Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday releases. Topping the
Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →