According to the reporting, attackers are now leveraging the vulnerability in real-world campaigns, elevating it from a theoretical risk to an urgent patch priority for anyone running the remote support software.

Key points so far:

• The flaw is rated critical severity
• CISA has observed active exploitation in attacks
• ScreenConnect is the affected ConnectWise product

If your organization uses ScreenConnect, treat this as a priority: verify your version, apply any available vendor mitigations or updates, and review logs for signs of unauthorized access. A specific CVE ID was not provided in the source article, so check ConnectWise's official advisory for the exact identifier and affected builds.

Source: BleepingComputer

Is your organization running ScreenConnect, and if so, have you already applied mitigations or are you still assessing exposure?