BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust disclosed and patched a critical zero-day vulnerability in its Remote Support (RS) product that has been actively exploited in attacks since late August. The flaw was identified as being exploited in the wild before a patch was available, classifying it as a zero-day. BeyondTrust issued an urgent warning to customers to apply the patch immediately. The vulnerability poses significant risk given BeyondTrust's widespread use in enterprise privileged access and remote support environments. No additional CVE identifier was mentioned in the excerpt, but the severity and active exploitation make this a high-priority remediation item. Organizations using BeyondTrust Remote Support are urged to update immediately to mitigate risk of compromise.