NewsSophos X-Ops
Malicious ScreenConnect deployments observed
Teaser from the source
Categories: Threat Research Tags: advisory, connectwise, ScreenConnect
This is the RSS-feed teaser. Read the full article at the original source.
Read at Sophos X-OpsMore on ScreenConnect
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596In ScreenConnect™ versions prior to 26.2, input
Other news entries
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- More RMM Tools In the Wild, (Tue, Oct 6th)NewsSANS ISC Diary
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)NewsSANS ISC Diary
Source: https://www.sophos.com/en-us/blog/malicious-screenconnect-deployments-observed
ID