CISA GIVES FEDS 3 DAYS TO PATCH ACTIVELY EXPLOITED BEYONDTRUST FLAW

Summary from the TLDR InfoSec newsletter

CISA added BeyondTrust's actively exploited OS command-injection flaw (CVE-2026-1731) to its KEV catalog, ordering federal agencies to patch Remote Support and Privileged Remote Access instances by February 16, as approximately 8,500 on-premises deployments remain exposed.