Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below - CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerability exists in the BeyondTrust Patches Criti…

https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html

sha256:dce2134ab16b497df0c6c9a5587c527fd9663eb8a278002fe437aede801075cd

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve8
md50
url0
ipv40
ipv60
sha10
domain0
sha2560
malware_token1
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
cve	CVE-2026-1731	Open →
cve	CVE-2026-46817	Open →
cve	CVE-2026-55200	Open →
cve	CVE-2026-40138	Open →
cve	CVE-2026-40139	Open →
cve	CVE-2026-40140	Open →
cve

Malware families

Allowlist token matches only.

Metasploitmalware-family

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

Turla

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports