ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Oct 16, 2026 · Cybersecurity Dive

    China-Nexus Espionage Actor Exploits BeyondTrust Tool in Zero-Day Campaign

    A China-linked espionage group is actively targeting a BeyondTrust support tool, exploiting a zero-day vulnerability to harvest credentials and sensitive information.

    What changed

    Recent intelligence has revealed that a China-nexus espionage actor is leveraging a zero-day vulnerability in a BeyondTrust support tool. This campaign is focused on credential harvesting and the extraction of sensitive data from affected systems.

    Who is affected

    Organizations utilizing BeyondTrust support tools are at heightened risk due to this ongoing campaign. The potential for credential theft and data compromise poses significant threats to operational integrity.

    The following groups are particularly vulnerable:

    • Enterprises using BeyondTrust for remote support and management.
    • Government agencies that rely on BeyondTrust tools for secure operations.
    • Healthcare organizations that may use these tools for remote assistance.
    • Any third-party vendors integrating BeyondTrust solutions into their services.

    What to do

    Security teams should prioritize immediate assessments of their BeyondTrust deployments. Implementing robust monitoring and response strategies is crucial to mitigate potential impacts from this threat.

    Recommended actions include:

    • Review and update security configurations for BeyondTrust tools.
    • Monitor for unusual access patterns or credential misuse.
    • Educate staff on recognizing phishing attempts and other social engineering tactics.
    • Engage with threat intelligence services for updates on this ongoing campaign.

    Original report

  2. Research · Oct 16, 2026 · SecurityWeek

    Emerging Threats: ICS-Sniper Attack and XWorm Malware Operators Targeted

    Recent developments highlight significant threats including the ICS-Sniper attack and efforts to combat XWorm malware operators, alongside a lucrative Chrome exploit.

    What changed

    Recent reports have surfaced detailing an ongoing ICS-Sniper attack, which poses a serious risk to industrial control systems. Additionally, efforts to dismantle XWorm malware operations are underway, reflecting a proactive approach to cybersecurity.

    A notable Chrome exploit has emerged, with a bounty of $250,000 offered for its discovery, indicating the high stakes involved in browser security.

    • Increased focus on protecting industrial control systems from targeted attacks.
    • Heightened awareness and response to the XWorm malware threat.
    • Significant financial incentives for identifying critical vulnerabilities in widely-used software.

    Who is affected

    Various sectors are at risk due to these emerging threats, particularly those relying on industrial control systems and web browsers.

    Organizations using Chrome are particularly vulnerable to the newly identified exploit, necessitating immediate attention.

    • Industrial control system operators facing ICS-Sniper attacks.
    • Organizations utilizing Chrome that may be impacted by the new exploit.
    • Cybersecurity teams tasked with monitoring and responding to malware threats like XWorm.

    What to do

    Organizations should prioritize the assessment of their industrial control systems and implement robust security measures to mitigate the risks associated with ICS-Sniper attacks.

    For Chrome users, it is advisable to stay updated with the latest patches and security advisories to protect against the newly discovered exploit.

    • Conduct a thorough review of ICS security protocols and incident response plans.
    • Ensure that all software, particularly web browsers, are up-to-date with the latest security patches.
    • Monitor threat intelligence sources for updates on XWorm malware and related vulnerabilities.

    Original report