BeyondTrust Breach: When Cybersecurity Experts Get Hacked!
BeyondTrust, a privileged access management company, faced a cyberattack when hackers breached Remote Support SaaS instances. The attack exploited two vulnerabilities, one critical and one medium-severity, affecting their products. While cloud instances got automatic patches, self-hosted users must DIY. Investigations continue, so stay tuned for updates.
Hot Take:
Looks like BeyondTrust trusted a little too much and went a bit “Beyond” their comfort zone! Who knew that even the gatekeepers of cybersecurity could leave their keys lying around?
Key Points:
- BeyondTrust, a PAM specialist, faced a cyberattack after hackers breached its Remote Support SaaS instances.
- Hackers got hold of an API key, allowing them to reset passwords for local accounts.
- BeyondTrust discovered two vulnerabilities during its investigation, one critical and one medium-severity.
- Patches for the vulnerabilities were automatically applied to cloud instances; manual updates are needed for self-hosted ones.
- Ongoing investigations are in place, with BeyondTrust promising updates as more information becomes available.
Already a member? Log in here