Daily Brief
Daily Brief, October 17, 2026
Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day
A suspected Chinese state-backed group is using a new zero-day in BeyondTrust IT support software for espionage attacks. It matters because it shows edge support tools are still being targeted quickly after disclosure, with remote access systems offering a direct path into organisations.
Prioritise BeyondTrust support servers for log review, exposure checks and emergency patching, and hunt for unauthorised remote access from late August onward.
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warned of a maximum-severity flaw in Magento and Adobe Commerce that could let attackers run arbitrary PHP code on store servers. It matters because code execution on commerce platforms can lead to site compromise, data theft or further movement into connected systems.
Identify all Magento and Adobe Commerce instances, verify whether the vulnerable component is present, and fast-track patching and server-side monitoring.