Active Exploitation

Active Exploitation of a Critical ScreenConnect Vulnerability as CISA Gives U.S. Agencies Three Days to Act

Threat actors have been observed actively exploiting a critical vulnerability in ConnectWise ScreenConnect that enables files to be transferred or executed through remote access sessions without proper authorization. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, while more than 1,000 exposed and unpatched instances remain available online, according to Shadowserver.