NewsThe Register — Security
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
Teaser from the source
ConnectWise disables third-party extensions in 400 environments as bughunters uncover auth hole may let crims bypass MFA
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on ScreenConnect
Other advisories
- CriticalCVE-2026-127063ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
Other news entries
- SCKit abuses ScreenConnect to deploy remote access and target technician sessionsNewsMicrosoft Threat Intelligence
- ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
ID