Bürgerrechtler und Bitkom fordern strenges Schwachstellenmanagement
Heise Security 16.10.2026 14:29
Im Zuge der Geheimdienstrechtsnovelle drängen Wirtschaft und Zivilgesellschaft auf klare gesetzliche Leitplanken gegen das bewusste Offenhalten von IT-Lücken.
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert
CSO Online 16.10.2026 10:24
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral movement, according to Mandiant and Google Threat Intelligence Group.
“Organizations should prepare for potential widespread exploitation following this disclosure,” Google Threat Intelligence Group (GTIG) and Mandiant said in a blog post. The post attributes the zero-day exploitation to ARMORY CASTLE, a suspected PRC-nexus espionage actor formerly tracked as UNC5221, and dates it to late August.
Zweites Update in einer Woche: Google schließt erneut kritische Lücke in Chrome
Golem 16.10.2026 08:47
Das Update verhindert eine Remotecodeausführung außerhalb der Sandbox von Chrome. Die Lücke entdeckte ein Mitarbeiter von Anthropic. (Chrome, Google)
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The Hacker News 16.10.2026 06:55
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.
The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a