BeyondTrust patches a Remote Support zero-day that Armory Castle has exploited since August
On October 16, 2026, BeyondTrust fixed CVE-2026-102764, an authentication bypass in Remote Support that the China-linked actor Armory Castle has exploited as a zero-day since late August. If you self-host RS or PRA and the appliance was reachable from the internet, treat it as compromised, not merely as something to patch.