NewsMicrosoft Threat Intelligence
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
Linked advisories
- CVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CVE-2026-84869ConnectWise ScreenConnect — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
Affected vendors and products
More on ScreenConnect
Other advisories
- CriticalCVE-2026-127063ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
Other news entries
- ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
ID