Suspected Chinese espionage actors exploit zero-day in BeyondTrust IT support software

Source: a security news feed item dated 16 October 2026, machine-translated from the original content of The Record. The report states that a group allegedly linked to the Chinese state is using a zero-day vulnerability in BeyondTrust remote IT support software for espionage. A zero-day is a flaw still unknown to the vendor at the time of attack, with no fix available. The text gives no vulnerability identifier, affected versions, technical indicators or official confirmation of attribution. Treat it as an unverified report until you check the original source and the vendor advisories. Relevance: remote support tools concentrate credentials and sessions, which makes them high-value targets. Rota Nacional does not patch third-party software and does not detect this flaw. If your team uses AI to study the case, remove credentials, tokens, internal machine names, session logs and customer data before sending any text.