Public disclosures and reports from cybersecurity firms

BeyondTrust Security Breach Allows Hackers Remote Access via Remote Support, Privileged Remote Access

Dec 31, 2024, 01:16 AM

A security breach involving the third-party software provider BeyondTrust has raised concerns about the integrity of remote access systems. Hackers reportedly stole a key from BeyondTrust, allowing them to override security measures and gain remote access to multiple employee workstations. The specific product exploited in this incident is believed to be either Remote Support or Privileged Remote Access, with the latter posing greater risks. In response to the breach, BeyondTrust has taken its compromised service offline. Experts emphasize the need for stringent security measures, such as using a VPN or TCP/IP allowlisting, to protect internal assets from persistent remote access vulnerabilities.