Armory Castle exploits BeyondTrust Remote Support flaw CVE-2026-102764 in appliances

·1 views

Google's threat intelligence group and Mandiant report that a suspected China-nexus actor tracked as Armory Castle has exploited CVE-2026-102764 in BeyondTrust Remote Support appliances since late August 2026. BeyondTrust rates the authentication bypass 9.3 and says it affects Remote Support 26.2.3 and earlier versions. The vendor patched SaaS customers on 8 October 2026 and disclosed the flaw on 15 October, while self-hosted appliances require manual patching unless automatic updates are enabled. According to Mandiant, the attacker used the flaw for initial access, escalated to root, deployed a webshell, and extracted stored credentials to reach downstream systems. Researchers also note that search-engine fingerprint coverage for the product is incomplete, so exposure counts can be misleading in either direction.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Google's Android developer verification rules could restrict sideloading on phones within 70 days

A campaign site called Keep Android Open warns that Google is about to tighten control over Android phones. Under new developer verification requirements, apps may need to come from verified developers before they can be installed. Critics argue this would limit users' ability to install software from outside official app stores, a practice known as sideloading. The post gained attention on Hacker News, where it drew a modest discussion. The source material provides only a brief link and summary, so the exact rollout details and timeline remain limited to the campaign's claims.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Shitter: New Nitter Fork Released on Codeberg

A new project called Shitter, described as a fork of the Nitter front-end for Twitter, has been shared on Codeberg. Nitter is an alternative interface that lets users view the platform without JavaScript or an account. The announcement appeared on Hacker News, where it gathered 10 points and 5 comments. The source material provides little detail beyond the project link and discussion metrics, so its specific features and goals are not described here.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

DREX: Brazil's central bank digital currency faces privacy questions

The Central Bank of Brazil is developing DREX, a digital currency built on a permissioned Ethereum-based network called Hyperledger Besu. Unlike decentralized cryptocurrencies, it is run by authorized banks and institutions, with the central bank retaining oversight of the system. Pilot tests revealed that, without extra safeguards, transactions could be visible to network participants, and researchers reportedly exposed balances and transfers during one trial. The bank is evaluating privacy technologies such as zero-knowledge proofs and anonymous transfer protocols, though full privacy is seen as incompatible with anti-money-laundering rules. Implementation is underway, with expansion expected through 2025 and 2026.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

OpenClaw's heartbeat feature: cheap local checks first, LLMs only when needed

OpenClaw, formerly known as Moltbot and Clawdbot, has gained traction for its local automation that monitors a machine, spots drift, and acts early. Its heartbeat feature runs periodic ticks through a layered pipeline, starting with inexpensive deterministic checks such as process status, file state, queue depth, and API health. Model escalation happens only when those checks leave real ambiguity, which reduces cost and unpredictability. The article presents the heartbeat as a control-plane primitive for agent infrastructure, organized as a five-stage loop with strict probe schemas, TTL-based caching, and a health state machine using hysteresis. The guidance is aimed at developers building their own agent systems who want predictable behavior and fewer unnecessary model calls.

0 comments Read more at DEV Community