Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs

The Register SecurityNovember 12, 2026Vulnerabilities Threat Intel

Hackers have used a dodgy third-party ScreenConnect extension to push malware onto at least 288 machines across 48 organizations, prompting ConnectWise to disable a handful of plugins in hundreds of customer environments. Security outfit Huntress first raised the alarm in a Reddit post on Wednesday, warning of an active campaign targeting cloud-hosted ScreenConnect instances.

Summary from The Register Security.

Read the full article at The Register Security

Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs

More in Vulnerabilities

Apache HTTP Server patches critical HTTP/2 remote code execution flaw

Check Point security advisory (AV26-1154)

Docker security advisory (AV26-1153)

React security advisory (AV26-1152)

MongoDB security advisory (AV26-1151)