Google Researchers Issue Warning, Urge Preparedness for New Cybersecurity Threat

Google has issued a new warning about a major cybersecurity threat. The Mountain View technology giant is urging organisations to prepare for “potential widespread exploitation” after a vulnerability was found in remote support appliances made by US cybersecurity company BeyondTrust.

According to Google’s Threat Intelligence Group and Mandiant, successful exploitation of the flaw gives hackers access to credentials, allows them to upload arbitrary files and can enable them to take control of host computers.

A hacking group believed to have links to China, known as Armory Castle, exploited the then-unknown vulnerability in August, according to a post on Google’s blog cited by Reuters on Saturday (17 October 2026).

The vulnerability affects BeyondTrust Remote Support, enterprise software that enables information technology (IT) teams to access and repair computers and other devices remotely.

Google said that, following public disclosure of the vulnerability, Armory Castle and other hacking groups are likely to attempt to exploit it widely, consistent with their past behaviour.

Google urged organisations to act quickly to patch or otherwise mitigate the vulnerability.