Daily OT Security News: October 18, 2026

This edition covers five source-verified OT, IoT, and critical-infrastructure cybersecurity developments. Publication and update dates are identified for each story; these items did not necessarily all break today. Potential vulnerabilities are distinguished from confirmed incidents. 1. CISA warns of active exploitation of BeyondTrust Remote Support authentication bypass Source date(s): October 16, 2026 (CISA alert). CISA said on October 16 that threat actors are actively exploiting CVE-2026-102764, a critical authentication-bypass vulnerability affecting self-hosted BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. CISA reports the activity is being used for initial access, persistence, privilege escalation and lateral movement, and added the CVE to its Known Exploited Vulnerabilities catalog that day. BeyondTrust describes the underlying flaw as improper origin validation in an internal messaging component that could permit remote file operations under the right conditions. CISA urges operators of affected self-hosted appliances to apply BeyondTrust’s BT26-05-RS patch and limit external access, including restricting administrative interfaces to trusted networks. Self-hosted versions older than 24.3.1 must first…