United States
USA
BeyondTrust Remote Support compromise forces suspension of affected SaaS instances
In early December 2024, BeyondTrust detected compromise affecting 17 Remote Support SaaS customers. A zero-day vulnerability in a third-party application was used to access a BeyondTrust cloud asset and obtain an infrastructure API key; BeyondTrust revoked the key, suspended and quarantined affected customer instances, and provided alternative Remote Support SaaS instances, producing a direct but contained interruption of its service-delivery environment.
69
Estimated severity
69 / 100
94
Source reliability
94 / 100
Approximate Date
02/12/2024
Targeted Company
BEYONDTRUST
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruption
Affected sectors
Technology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
Zero-day exploitationUnauthorized access
Attributed threat actors
No information