TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8407
@thehackernews
The Hacker News
Post content
Post content
Threat actors are actively exploiting CVE-2026-1731 (9.9) in BeyondTrust Remote Support & PRA. Attackers extract portal data, then open WebSocket channels to trigger unauthenticated RCE. 🔗 Read → https://thehackernews.com/2026/02/researchers-observe-in-wild.html Patches are out, but exploitation started fast.