CRITICAL/ OCTOBER 17, 2026TODAY’S BRIEFING — #211
BeyondTrust zero-day exploited by Chinese APT; Microsoft patches 1,400 flaws; AOMEI supply-chain compromised
Chinese state-backed APT actively exploiting BeyondTrust zero-day (CVE-2026-102764) for espionage; Microsoft released historic 1,400+ patch bundle for Windows; attackers compromised AOMEI Backupper update infrastructure for months.
CVE-2026-102764BeyondTrust Remote Support — Zero-day RCE; [exploitation unverified] by Chinese APT (Armory Castle) for espionageCVE-2026-108398Microsoft Windows — Critical RCE; patched in October 2026 Patch TuesdayCVE-2026-105134Ahsay Cloud Backup Suite — Command injection; chained with CVE-2026-105133; added to CISA KEV; actively exploitedCVE-2026-0322Paloaltonetworks Pan-Os — Code injection allowing root execution; added to CISA KEV; actively exploited
Read the full briefing →