China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

- China-linked Armory Castle just blew the lock on BeyondTrust servers via CVE-2026-102764. CVSS 9.3? More like “CVSS: Please Update.” They didn’t hack you; they walked in because your vendor left the door wide open. We’re threadbare when we ignore supply chain hygiene. Who gets hurt? Everyone trusting that remote support tool without patching. It’s not a breach; it’s negligence with a side of espionage. Stop kidding yourself that your third-party tools are safe if you haven’t verified the PoD seal on their security posture. What to do? Patch BeyondTrust immediately. If you can’t, cut the connection. Check the seals on your other vendors. Your stack-eye might be fine, but your OPSEC is leaking data faster than a hull breach. Stay sharp.