Google has warned organisations worldwide to strengthen their cybersecurity measures after discovering a serious vulnerability in software developed by US cybersecurity firm BeyondTrust, raising fears that hackers could exploit the weakness to launch further attacks.
According to Google’s Threat Intelligence Group and Mandiant, the security flaw could allow attackers to steal login credentials, upload files without authorisation and take control of affected systems.
The warning follows the discovery that a suspected China-linked hacking group known as Armory Castle had already exploited the vulnerability in August, before it became publicly known.
The flaw affects BeyondTrust Remote Support, a tool used by information technology teams to access computers and other devices remotely to provide technical assistance and resolve problems.
Google warned that the vulnerability could attract more cybercriminals now that details of the security weakness have become public.
The technology giant said organisations should prepare for potentially widespread exploitation, noting that previously observed behaviour suggests the group responsible and other hackers could attempt to take advantage of the flaw.
Google has urged affected organisations to act quickly by installing available security patches or implementing other measures to reduce the risk of an attack.
The warning highlights the growing threat posed by sophisticated cybercriminals and the importance of promptly addressing security vulnerabilities, particularly in tools that provide remote access to company systems.
Organisations using the affected BeyondTrust products are being encouraged to review their security arrangements and take the necessary steps to protect sensitive information and prevent unauthorised access.
