BRAXTON BARBER 3
OCTOBER 18 2026
YOUTUBE PRESENTER SCRIPT
Target: approximately 45 seconds at a brisk, clear news pace.

0:00–0:03 / THE HOOK
VISUAL AND AUDIO: Macro push toward the partly open service door. Start the supplied Solarflares track on a firm beat. Hold the first image; no title sequence.
SPOKEN SCRIPT: Your help desk can open the wrong door.

0:03–0:15 / THE ESCALATION
VISUAL AND AUDIO: Cut to the empty support desk, then the unlatched maintenance panel. Keep any lower caption short: REMOTE SUPPORT EXPLOITED.
SPOKEN SCRIPT: Attackers exploited BeyondTrust software used to fix computers remotely. A trusted support connection became a way in.

0:15–0:36 / THE EVIDENCE
VISUAL AND AUDIO: Use the server-closet and warehouse illustrations. Add simple source cards: MANDIANT / LATE AUGUST; CANADIAN CYBER CENTRE / OCTOBER 16; BT26-05 / CVE-2026-102764. Do not read the identifier aloud.
SPOKEN SCRIPT: Mandiant traced exploitation to late August. Canada warned on October sixteenth. BeyondTrust says its cloud service is patched. Organizations running their own installations must verify the fix. But an update cannot prove nobody entered earlier. The total number of compromised customers remains undisclosed.

0:36–0:45 / THE BUYER’S TAKEAWAY
VISUAL AND AUDIO: Owner on the phone with an access-review binder. Reduce music under the question. Hold the closing website address.
SPOKEN SCRIPT: Ask your provider: can you show when we were patched, and what you checked for earlier access? More at braxtonbarber3.com.

DELIVERY
Direct, controlled and professional. Start on the first sentence. No greeting or introductory logo animation. Keep the warning conditional to the affected product. The visual scenes are AI-generated editorial illustrations, not footage from a real victim.

SOURCE RECORD
BeyondTrust security advisory BT26-05
https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
ARMORY CASTLE Exploits BeyondTrust
https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/
Alert AL26-025
https://www.cyber.gc.ca/en/alerts-advisories/al26-025-critical-vulnerability-impacting-beyondtrust-remote-support-cve-2026-102764
