Attackers are actively exploiting a critical-severity vulnerability within ConnectWise ScreenConnect, a remote access solution, according to an alert issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 14, 2024.
Reports mentioning ConnectWise
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added five previously undisclosed security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action signifies that these flaws are currently being actively exploited by malicious actors in real-world attacks…
Cybersecurity researchers have detailed a worm-like campaign that exploits ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. Huntress, a cybersecurity firm, reported that three distinct incidents have been observed, each employing different initial…
ConnectWise has alerted users to a newly identified vulnerability affecting its ScreenConnect remote access software, with a patch anticipated later this week. The company has provided interim mitigation strategies to help customers protect their systems until the permanent fix is…
Phishing actors are actively exploiting the legitimate Faronics Deploy endpoint-management platform to achieve remote administrative control over victim computers. This abuse allows attackers to install the ScreenConnect remote support software, a tool commonly used for legitimate remote access but also…