https://pwn.watch/t/beyondtrust Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT https://pwn.watch/i/beyondtrust-remote-support-cve-2026-102764 beyondtrust-remote-support-cve-2026-102764:2026-10-15/16:Public disclosure / Mandiant blog; CISA KEV Oct 16. Thu, 15 Oct 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/beyondtrust-remote-support-cve-2026-102764 beyondtrust-remote-support-cve-2026-102764:2026-10-08/09:BeyondTrust patches; SaaS auto-fixed. Thu, 08 Oct 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/beyondtrust-remote-support-cve-2026-102764 beyondtrust-remote-support-cve-2026-102764:2026-08-29:Mandiant/GTIG: exploitation of zero-day begins (limited victims). Sat, 29 Aug 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/beyondtrust-remote-support-rs-and-privileged-remote-access-pra-cve-2026-1731 beyondtrust-remote-support-rs-and-privileged-remote-access-pra-cve-2026-1731:2026-02-13:CISA added CVE-2026-1731 to the KEV catalog (due 2026-02-16). Fri, 13 Feb 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/beyondtrust-privileged-remote-access-pra-and-remote-sup-cve-2024-12686 beyondtrust-privileged-remote-access-pra-and-remote-sup-cve-2024-12686:2025-01-13:CISA added CVE-2024-12686 to the KEV catalog (due 2025-02-03). Mon, 13 Jan 2025 00:00:00 GMT medium Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-30:Treasury tells Congress of a 'major incident' attributed to a China state-sponsored APT Mon, 30 Dec 2024 00:00:00 GMT critical Source: https://s3.documentcloud.org/documents/25472698/letter-from-treasury-re-december-2024-cyberattack.pdf Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-19:CISA added CVE-2024-12356 to the KEV catalog (federal deadline 2024-12-27) Thu, 19 Dec 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-17:CVE-2024-12356 published Tue, 17 Dec 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-12356 Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-16:BeyondTrust advisory BT24-10; cloud instances patched Mon, 16 Dec 2024 00:00:00 GMT critical Source: https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-08:BeyondTrust notifies the US Treasury Sun, 08 Dec 2024 00:00:00 GMT critical Source: https://s3.documentcloud.org/documents/25472698/letter-from-treasury-re-december-2024-cyberattack.pdf Status: closed, patched https://pwn.watch/i/beyondtrust-remote-support-us-treasury-breach-cve-2024-12356 beyondtrust-remote-support-us-treasury-breach-cve-2024-12356:2024-12-05:BeyondTrust identifies a compromised Remote Support SaaS infrastructure API key Thu, 05 Dec 2024 00:00:00 GMT critical Source: https://www.beyondtrust.com/remote-support-saas-service-security-investigation Status: closed, patched https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-11-29:Okta: the attacker downloaded the names and email addresses of all customer support system users Wed, 29 Nov 2023 00:00:00 GMT high Source: https://sec.okta.com/articles/october-security-incident-recommended-actions/ Status: closed, no-fix-needed https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-11-03:Okta root cause: the service account's password was saved in an employee's personal Google profile; 134 customers' files accessed, 5 sessions hijacked Fri, 03 Nov 2023 00:00:00 GMT high Source: https://sec.okta.com/articles/2023/11/unauthorized-access-oktas-support-case-management-system-root-cause/ Status: closed, no-fix-needed https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-10-19:Okta notifies customers of the security incident Thu, 19 Oct 2023 00:00:00 GMT high Source: https://sec.okta.com/harfiles Status: closed, no-fix-needed https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-10-18:Cloudflare detects attackers pivoting into its Okta instance with a token stolen from Okta Wed, 18 Oct 2023 00:00:00 GMT high Source: https://blog.cloudflare.com/how-cloudflare-mitigated-yet-another-okta-compromise/ Status: closed, no-fix-needed https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-10-02:BeyondTrust detects an attacker using a session cookie from a HAR file it uploaded to Okta support and reports it to Okta Mon, 02 Oct 2023 00:00:00 GMT high Source: https://www.beyondtrust.com/blog/entry/okta-support-unit-breach Status: closed, no-fix-needed https://pwn.watch/i/okta-support-system-breach-2023 okta-support-system-breach-2023:2023-09-28:Attacker access to Okta's support system begins; a report of all support users is run at 15:06 UTC Thu, 28 Sep 2023 00:00:00 GMT high Source: https://sec.okta.com/articles/october-security-incident-recommended-actions/ Status: closed, no-fix-needed