{
 "Event": {
  "uuid": "fddc4a05-71b8-5e8d-bc3e-3b5324194c3b",
  "info": "ARMORY CASTLE Exploits BeyondTrust",
  "date": "2026-10-15",
  "threat_level_id": "1",
  "analysis": "0",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"detected-unreviewed\""
   },
   {
    "name": "securitystudies:type=\"exploitation\""
   },
   {
    "name": "misp-galaxy:threat-actor=\"UTA0178\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/armory-castle-exploits-beyondtrust-20261015/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/",
    "comment": "Google Threat Intelligence",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-102764",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2023-46805",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2024-21887",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "Detected automatically from 1 article in 1 outlet (Google Threat Intelligence), Oct 15, 2026. Type: exploitation. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}