Mandiant

Latest news

1. 16 Oct
   Attackers used AOMEI Backupper update servers to deliver backdoor in short windows

   Between May and July 2026 attackers repeatedly modified files on AOMEI Backupper's update servers for five to ten minute windows to make installations download a backdoor. Security teams say AOMEI fixed its servers but that does not remove the backdoor from already infected machines and the update check files were not cryptographically verified.

   Security · 1 source

   

2. 16 Oct
   BeyondTrust Remote Support zero-day exploited by China-linked group

   A critical authentication-bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support was actively exploited from late August 2026. Security firms say a China-nexus espionage group known as Armory Castle used the flaw to gain access, escalate privileges, deploy web shells and tunnellers, and erase logs.

   Security · 2 sources

   

Articles

No articles about Mandiant yet.