Threat actors have begun exploiting a critical vulnerability in BeyondTrust’s Remote Support (RS) and Privileged Remote Access (PRA) products, as reported by watchTowr. According to Ryan Dewhurst, head of threat intelligence at watchTowr, the first in-the-wild exploitation was observed overnight across global sensors, indicating active abuse of this flaw.

The vulnerability, which has a CVSS score of 9.9, poses a severe risk due to its high severity and potential for unauthorized access to sensitive systems. This incident highlights the urgent need for organizations using BeyondTrust products to apply patches and monitor for suspicious activity to mitigate potential breaches.

Key Takeaways

  • Threat actors are actively exploiting a critical vulnerability in BeyondTrust products.
  • The vulnerability has a CVSS score of 9.9, indicating high severity.
  • watchTowr observed the first in-the-wild exploitation overnight.
  • Organizations should patch affected systems immediately to prevent breaches.
  • This underscores the importance of rapid response to disclosed vulnerabilities.

Source: The Hacker News