More than 190,000 exposed and trackable web properties were discovered by Censys to be vulnerable to a recently addressed critical flaw impacting BeyondTrust's Remote Support and Privileged Remote Access offerings, which could be leveraged for operating system command execution, Cybernews reports.
On January 14, six days before the public advisories for CVE-2026-24061 were released, Telnet sessions plummeted by 65% within an hour and 83% within two hours.
This flaw allowed attackers to trick users into clicking specially crafted Markdown links, leading to the execution of local or remote programs without triggering standard Windows security warnings.
