Active ScreenConnect attacks breach MSPs, impact dozens of organizations

By Lawrence Abrams

AI Summary

ConnectWise is investigating an active malware campaign in which compromised ScreenConnect environments were used to push rogue remote-access clients to customer devices across at least 288 endpoints in 48 organizations. As a precaution, ConnectWise disabled five third-party extensions in partner environments; MSPs relying on ScreenConnect should audit connected clients and third-party integrations immediately.

Read full article → https://www.bleepingcomputer.com/news/security/act…

Relevance score: 88.0/100

# More from November 12

1
Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes The Hacker News
2
Who Runs the Ransomware Group Qilin? Krebs on Security
4
Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons The Hacker News
5
Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches The Hacker News
6
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers BleepingComputer
7
Fortinet Patches Nearly 100 Vulnerabilities SecurityWeek
8
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem The Hacker News
9
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise The Hacker News
10
Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges The Hacker News