Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access

What happened

A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day (a flaw already being used in attacks before a fix exists) in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found the attackers used the flaw to upload a file, then built a path from an unprivileged web service account to root access, […] The post Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform . Google is an Internet and software company based in Mountain View, and its products and services include Software tools.

Read Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access By Mayura Kathir October 16, 2026 Share Facebook Twitter Pinterest WhatsApp A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found the attackers used the flaw to upload a file, then built a path from an unprivileged web service account to root access, stole credentials, altered appliance permissions and created a route for tunneling into victim networks.

BeyondTrust has published patches (a fix the maker issues for a flaw in its software) and guidance in its security advisory and accompanying blog. cyber security Cyber Security News Google 3 min.

The product lets IT teams securely connect to and troubleshoot remote systems. Successful exploitation allows arbitrary file uploads, giving attackers an entry point on an internet-facing appliance.

Key facts

• Mandiant, which investigated the incident, — found: the attackers used the flaw to upload a file, then built a path from an unprivileged web service account to root access, […] The post Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform
• Mandiant, which investigated the incident, — found: the attackers used the flaw to upload a file, then built a path from an unprivileged web service account to root access, stole credentials, altered appliance permissions and created a route for tunneling into victim networks