CISA adds Microsoft, ConnectWise vulnerabilities to active exploitation catalog

The Cybersecurity and Infrastructure Security Agency added two major software flaws to its Known Exploited Vulnerabilities ...
CRN

ConnectWise Control Was Used By Bad Actors: Blackpoint Cyber

“We hate to see any software products used for malicious purposes, but unfortunately, remote control tools are used for this purpose all too frequently,” said ConnectWise Chief Product Officer Jeff ...
CSOonline

Critical ConnectWise ScreenConnect flaw exploited in the wild: Update

A critical vulnerability patched this week in the ConnectWise ScreenConnect remote desktop software is already being exploited in the wild. Researchers warn that it’s trivial to exploit the flaw, ...
TechRepublic

New Vulnerabilities in ConnectWise ScreenConnect Massively Exploited by Attackers

One vulnerability impacting ConnectWise ScreenConnect that allows remote attackers to bypass authentication to create admin accounts is being used in the wild. Two new vulnerabilities impact ...
Bleeping Computer

ConnectWise patches new flaw allowing ScreenConnect hijacking

ConnectWise is warning ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation. The flaw affects ScreenConnect ...
Bleeping Computer

Hackers turn ScreenConnect into malware using Authenticode stuffing

Threat actors are abusing the ConnectWise ScreenConnect installer to build signed remote access malware by modifying hidden settings within the client's Authenticode signature. ConnectWise ...
TechCrunch

Researchers warn high-risk ConnectWise flaw under attack is ’embarrassingly easy’ to exploit

Security experts are warning that a high-risk vulnerability in a widely used remote access tool is “trivial and embarrassingly easy” to exploit, as the software’s developer confirms malicious hackers ...
TechCrunch

Researchers say easy-to-exploit security bugs in ConnectWise remote-access software now under mass attack

Security researchers say a pair of easy-to-exploit flaws in a popular remote-access tool used by more than a million companies around the world are now being mass exploited, with hackers abusing the ...
Yahoo

ConnectWise hit by nation-state cyberattack, some ScreenConnect customer systems affected

ConnectWise has revealed it recently suffered a cyberattack, likely at the hands of a “sophisticated nation state actor.” In a short announcement published on its website, the company said it recently ...