BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

A zero-day vulnerability in BeyondTrust Remote Support software is being actively exploited in the wild, continuing a dangerous trend of attackers targeting edge devices from vendors like Ivanti, Cisco, and Palo Alto Networks. Edge devices are particularly attractive targets because they sit at the perimeter of networks, often have privileged access to internal systems, and may not receive the same security scrutiny as core infrastructure. Zero-day exploits are especially severe because defenders have no patch available at the time of attack, making compensating controls and rapid detection essential. This incident underscores that remote support and access tools — by their very nature — represent high-value, high-risk attack surfaces that demand heightened security posture. Organizations that delay patching or lack visibility into edge device exposure are leaving a critical door open to sophisticated threat actors.