Cybersecurity Circus: BeyondTrust Vulnerabilities Trigger Major U.S. Hack Drama
CISA has flagged a medium-severity bug in BeyondTrust Privileged Remote Access, adding it to the Known Exploited Vulnerabilities catalog. The flaw, CVE-2024-12686, lets attackers with admin privileges inject commands, making it a hacker’s dream come true—because who wouldn’t want to play IT admin for a day?
Hot Take:
Who knew that the “Beyond” in BeyondTrust referred to taking trust beyond your wildest nightmares? With cybersecurity flaws popping up like unwanted email subscriptions, it seems like hackers are having a field day playing “Command and Conquer” with our sensitive data.
Key Points:
- CISA adds a medium-severity vulnerability in BeyondTrust products to its Known Exploited Vulnerabilities catalog.
- The vulnerability allows attackers with admin privileges to inject commands and act as a site user.
- Both vulnerabilities were discovered following a cyber incident involving a breached Remote Support SaaS API key.
- The U.S. Treasury Department was hacked using the compromised API key, allegedly by a Chinese state-sponsored group.
- Another critical vulnerability in Qlik Sense, actively exploited by ransomware groups, was also added to the KEV catalog.
Already a member? Log in here