Active ScreenConnect attacks breach MSPs, impact dozens of organizations
Teaser from the source
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on ScreenConnect
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596In ScreenConnect™ versions prior to 26.2, input
Other news entries
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
- More RMM Tools In the Wild, (Tue, Oct 6th)NewsSANS ISC Diary
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)NewsSANS ISC Diary
ID