PostgreSQL flaw exploited as zero-day in BeyondTrust breach
Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network ...
SecurityWeek5d
Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation
Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support ...
The Hacker News5d
PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
PostgreSQL SQL injection flaw (CVE-2025-1094) exploited alongside BeyondTrust zero-day, enabling arbitrary code execution.
BeyondTrust Releases AI-powered True Privilege Graph to Expose How Attackers Exploit Hidden Paths to Privilege
Revolutionary technology redefines Identity Security by revealing previously undetectable Paths to Privilege attackers ...
CSOonline5d
PostgreSQL patches SQLi vulnerability likely exploited in BeyondTrust attacks
Rapid7 researchers believe the BeyondTrust Remote Support attacks from December also exploited a zero-day flaw in PostgreSQL.
The Register on MSN4d
Critical PostgreSQL bug tied to zero-day attack on US Treasury
High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further A high-severity SQL injection bug in the ...
Hosted on MSN2mon
BeyondTrust says hackers hit its remote support products
BeyondTrust says it spotted an attack in early December 2024 It found some of its Remote Support SaaS instances were compromised It also found and patched two zero-day flaws BeyondTrust has ...
CRN6y
Bomgar To Buy BeyondTrust To Fortify Privileged Access Muscle
Atlanta-based Bomgar has agreed to purchase Phoenix, Az.-based BeyondTrust, creating an 800-employee privilege security behemoth with more than 19,000 customers and $300 million in combined annual ...
CRN1mon
Five Things To Know On The ‘Major’ US Treasury Department Hack
The China-linked breach is tied to the compromise of BeyondTrust’s remote support tool and reportedly led to the breach of multiple offices within the Treasury Department. New details have ...
JD Supra20d
Looking Beyond FedRAMP – Lessons from the U.S. Treasury Cybersecurity Incident
A notable example of this is the December 8, 2024 cybersecurity incident involving the U.S. Department of the Treasury and its third-party cloud service provider, BeyondTrust. This incident ...
cyberdaily4d
Rapid7 discovers ‘high-severity’ PostgreSQL injection zero-day vulnerability
A high-severity vulnerability in an open-source SQL database has been discovered by the team at cyber security firm Rapid7.
ITWire7d
BeyondTrust Releases AI-powered True Privilege Graph to Expose How Attackers Exploit Hidden Paths to Privilege
With this latest Identity Security Insights innovation from BeyondTrust, organisations can: See their identity estate from an attacker’s perspective Understand the complex, indirect paths to ...