Remote Support (RS) Archives

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks

14Feb

By RBNo Comments

News

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks

Rapid7 found that threat actors likely leveraged a previously undiscovered SQL injection vulnerability in PostgreSQL in addition to exploiting a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024. The PostgreSQL interactive tool psql is impacted by the vulnerability, which is identified as CVE-2025-1094 (CVSS score: 8.1). According to security researcher Stephen Fewer, an attacker can use the interactive tool's capacity to execute meta-commands to accomplish arbitrary code execution (ACE) after successfully creating a SQL injection using read more about PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks. Get up to date on the latest cybersecurity news and enhance your knowledge ...

CISA orders agencies to patch BeyondTrust bug exploited in attacks

A command injection flaw in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) has been identified by CISA as being actively abused in attacks (CVE-2024-12686). The vulnerability was added to CISA's Known Exploited Vulnerabilities catalog and, as required by the Binding Operational Directive (BOD) 22-01, U.S. federal agencies have three weeks by February 3 to protect their networks from continuing assaults that target the vulnerability. Additionally, a significant command injection security flaw (CVE-2024-12356) was introduced in the same BeyondTrust software products by the U.S. cybersecurity agency on December 19 read more about CISA orders agencies to patch BeyondTrust bug exploited in attacks. Get up to date on the latest cybersecurity news and enhance your ...

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a significant security flaw affecting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vulnerabilities (KEV) database on Thursday, citing evidence of active exploitation in the field. CVE-2024-12356 (CVSS score: 9.8) is a command injection vulnerability that might be used by an attacker to run arbitrary commands while posing as the site user. CISA claims that BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) have a command injection vulnerability that could allow an unauthorized attacker to insert commands that are executed as site users read more about CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List. Get up to...