🔴 Critical: Critical ScreenConnect flaw now actively exploited in attacks
-
ConnectWise ScreenConnect is facing active exploitation of a critical-severity flaw, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirming attacks in the wild.
According to the reporting, attackers are now leveraging the vulnerability in real-world campaigns, elevating it from a theoretical risk to an urgent patch priority for anyone running the remote support software.
Key points so far:
- The flaw is rated critical severity
- CISA has observed active exploitation in attacks
- ScreenConnect is the affected ConnectWise product
If your organization uses ScreenConnect, treat this as a priority: verify your version, apply any available vendor mitigations or updates, and review logs for signs of unauthorized access. A specific CVE ID was not provided in the source article, so check ConnectWise's official advisory for the exact identifier and affected builds.
Source: BleepingComputer
Is your organization running ScreenConnect, and if so, have you already applied mitigations or are you still assessing exposure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login