ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients
MentionsConnectWiseScreenConnect
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. "Our initial assessment suggests the activity may involve
Summary from The Hacker News.
Related coverage
Other sources covering the same vulnerabilities or event.
More in Vulnerabilities
SANS Stormcast Thursday, November 12th, 2026: Apache mod_http2 RCE (CVE-2026-119618); Fortinet FortiMail Criticals; Ivanti EPM SQLi (CVE-2026-121653); Windows SignDrop CLFS; N-able N-central HF2
Podcast6 minSANS Internet Storm Center StormCast3h agoVulnerabilitiesEndpointAppSecCVE-2026-119618CVE-2026-121653