Week of December 16, 2024

2024-12-16 — 2024-12-22 · 1 PUBLIC EVENT · GENERAL / NON-PERSONALIZED

In the week of December 16, 2024, ColdRecon logged 1 public endpoint-security event from open-source reporting — 1 incident. Vendors in the record this week: BeyondTrust.

The Week's Public Record

Events

2024-12-19

incident

BeyondTrust Remote Support SaaS Instances Breached via API Key Compromise and Command Injection VulnerabilitiesCVE-2024-12356

Attackers breached BeyondTrust's Remote Support SaaS instances using a compromised API key, enabling password resets of local accounts. Two command injection vulnerabilities (CVE-2024-12686 and CVE-2024-12356) were subsequently disclosed, with CVE-2024-12356 added to CISA's Known Exploited Vulnerabilities catalog. The incident highlights risks in privileged access management tools.

BeyondTrust ↗ www.techtarget.com (2024-12-19) ↗ www.techtarget.com (2024-12-31)

Every event in this brief is a record in ColdRecon's canonical set, drawn from public open-source reporting and linked to its source. This is the general, non-personalized signal — published 7 days after the fact. The live daily brief, written for your deals, is for cleared officers.

This is last week, public. Get this morning's, written for you.

The live ColdRecon brief lands at 0600 daily — the same signal, filtered to your competitors and framed for your deals. Request clearance and tomorrow's is yours.

Request Clearance →