[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fve2PjC5JBIYA9-hLWDRPs32rMBGXTmfV4PUnKl76D9c":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"a3701c1c-972c-46f4-bd6e-18887a5cb60a","BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs","beyondtrust-remote-support-zero-day-continues-trend-of-exploited-edge-bugs-92a3ec","Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.","BeyondTrust has confirmed that a zero-day vulnerability in its Remote Support software is being actively exploited in the wild. This follows a trend of recent attacks targeting vulnerabilities in edge devices from other major vendors like Ivanti, Cisco, and Palo Alto Networks. The exploitation of this BeyondTrust flaw highlights the ongoing risks associated with edge computing infrastructure.","BeyondTrust Remote Support zero-day vulnerability is being actively exploited.","https:\u002F\u002Fwww.darkreading.com\u002Fendpoint-security\u002Fbeyondtrust-remote-support-exploited-edge-bugs","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt4a126b2e0eae913e\u002F6ad27ebc7cb22e18dd04a52b\u002FLocusts-ZU_09-Getty.jpg?width=720&quality=80&disable=upscale","2026-10-16T20:34:37+00:00","2026-10-16T22:00:06.45376+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"Remote Support","product",{"name":21,"type":22},"BeyondTrust","vendor",{"name":24,"type":22},"Ivanti",{"name":26,"type":22},"Cisco",{"name":28,"type":22},"Palo Alto Networks","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,42],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,26,28],{"controls":50,"vendors":136},[51,80,108],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":81,"name":82,"problem":83,"products":84},"patch-management","Automated patch management","Known holes get closed in days, not months.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":102,"vendor_name":24,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":46,"name":109,"problem":110,"products":111},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",[137],{"slug":138,"name":21,"logo_path":139,"roles":140},"beyondtrust","\u002Fvendor-logos\u002Fbeyondtrust.png",[141],"affected",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":157},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","A zero-day vulnerability in BeyondTrust Remote Support software is being actively exploited in the wild, continuing a dangerous trend of attackers targeting edge devices from vendors like Ivanti, Cisco, and Palo Alto Networks. Edge devices are particularly attractive targets because they sit at the perimeter of networks, often have privileged access to internal systems, and may not receive the same security scrutiny as core infrastructure. Zero-day exploits are especially severe because defenders have no patch available at the time of attack, making compensating controls and rapid detection essential. This incident underscores that remote support and access tools — by their very nature — represent high-value, high-risk attack surfaces that demand heightened security posture. Organizations that delay patching or lack visibility into edge device exposure are leaving a critical door open to sophisticated threat actors.",[147,148,149,150,151,152,153,154,155,156],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection","NIST RA-5: Vulnerability Monitoring and Scanning","CISA KEV (Known Exploited Vulnerabilities) Catalog","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 Annex A.12.6: Technical Vulnerability Management",{}]