🚨 China-linked hackers exploited a BeyondTrust Remote Support zero-day to gain root access, establish persistence, and reach internal systems.

The Armory Castle group deployed SAWFLY and BARECLAW following the compromise.

Read - https://thehackernews.com/2026/10/china-linked-hackers-exploited.html