BeyondTrust Calls for Immediate Update After Zero‑Day Exploits Target Remote Support Feature

BeyondTrust has released an urgent advisory urging its customers to install a critical update for the Remote Support (RS) portion of its product suite, after verifying that the defect has been exploited in active zero‑day attacks since late August.

The flaw lies in the RS module’s authentication of incoming connections, permitting an unauthorized party to sidestep security checks and obtain remote control of a victim’s machine. Exploitation requires no user interaction beyond the existence of the vulnerable client, making it especially appealing to attackers looking for covert entry points into corporate networks.

Security analysts first detected irregular traffic tied to the defect in early September, and later forensic work linked a string of intrusion attempts to the same weakness. Although BeyondTrust has not revealed the precise count of affected installations, the firm confirmed that the assaults have persisted for several weeks, affecting organisations in various industries that depend on remote assistance for IT support.

In reply, BeyondTrust issued a patch on Thursday and dispatched a direct notice to all registered clients, providing step‑by‑step remediation guidance. The company emphasized that the update resolves the authentication bypass and urged administrators to apply it immediately, together with standard hardening practices such as network segmentation and multi‑factor authentication for remote sessions.

Experts note that the episode highlights the ongoing danger of unpatched remote‑access tools, particularly as cyber‑criminals continue to seek zero‑day flaws that can be deployed at scale. They recommend that organisations audit their remote support settings, confirm that every software component is up‑to‑date, and scrutinize network logs for unusual remote connections. Continued vigilance will be crucial as security teams monitor for possible follow‑up attacks targeting comparable vulnerabilities in other widely used management utilities.