CISA confirms exploitation of two BeyondTrust flaws, urges patching
Take action: If you are running on-prem versions of BeyondTrust products, patch them ASAP. There is active exploitation of BeyondTrust flaws, so not the best time to postpone.
Learn More
BeyondTrust, a major security software provider serving approximately 20,000 customers including 75 of the Fortune 100, has been at the center of a security incident that led to the discovery of two vulnerabilities. Now CISA confirms active exploitation of both flaws
The flaws are CVE-2024-12356 (CVSS score 9.8) and CVE-2024-12686 (CVSS score 6.6). BeyondTrust discovers compromise of Remote Support SaaS instances in late December 2024.
The vulnerabilities gained significant attention following a cyberattack on the US Treasury Department in early January 2025.
CISA has confirmed that while the Treasury Department was compromised, there is no evidence of impact on other federal agencies. However, given BeyondTrust's widespread use across government and enterprise environments, the potential risk remains significant.
Users are advised to patch their systems immediately.
