BeyondTrust patches zero-day exploited in attacks since August

2026-10-16T07:23:22Z•fec2cfe4786a50ab802082c4b8f479770a63f09d8880652ea41e81651a562b30
CVE-2026-0322CVE-2026-110447Android scamsArch User RepositoryBeyondTrust Remote SupportCisco Secure Email GatewayCollabora OnlineDPRK IT workersLinux malwareNextcloudPalo Alto PAN-OSWindows securityactively exploited zero-daydata breachnetwork device compromiseproxyjackingremote code executionsupply-chain attack

What happened

BleepingComputer security feed containing multiple significant developments, including actively exploited zero-day vulnerabilities in BeyondTrust Remote Support, Palo Alto PAN-OS, and Cisco Secure Email Gateway; exploitation of a Collabora Online RCE flaw to compromise Nextcloud servers; malware distributed through fake Arch Linux packages; proxyjacking of network devices; and major data theft and supply-chain incidents. The feed includes both urgent vulnerability disclosures and broader security, law-enforcement, and product-support news.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
fec2cfe4786a50ab802082c4b8f479770a63f09d8880652ea41e81651a562b30
Enrichment time
2026-10-16T07:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.