SCKit Worm Installs Rogue ScreenConnect Clients and Session Cookie Relays Across Hundreds of Endpoints

Attackers are using cloud-hosted ScreenConnect panels to install rogue clients on hundreds of managed endpoints.

Summary from Huntress Blog.

More in Endpoint

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

The Hacker News3h agoVulnerabilitiesEndpoint

SANS Stormcast Thursday, November 12th, 2026: Apache mod_http2 RCE (CVE-2026-119618); Fortinet FortiMail Criticals; Ivanti EPM SQLi (CVE-2026-121653); Windows SignDrop CLFS; N-able N-central HF2

Podcast6 minSANS Internet Storm Center StormCast5h agoVulnerabilitiesEndpointAppSecCVE-2026-119618CVE-2026-121653

How hackers turned Russian cars into pumpkins

Podcast43 minSmashing Security7h agoEndpointThreat Intel

What Is Agentic Endpoint Security? How AI Agents Bypass EDR

VideoPalo Alto Networks10h agoAIEndpointCloud

Scariest Malware of Today? TokyoCore combines Ransomware Stealer and RAT

VideoThe PC Security Channel12h agoEndpointThreat Intel