News stories · 30d
13
Advisories · 30d
0
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-11 | CVE-2026-84869 | ScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | |
| 2026-04-28 | CVE-2024-1708 | ScreenConnect | ConnectWise ScreenConnect Path Traversal Vulnerability | Known |
| 2025-06-02 | CVE-2025-3935 | ScreenConnect | ConnectWise ScreenConnect Improper Authentication Vulnerability | |
| 2024-02-22 | CVE-2024-1709 | ScreenConnect | ConnectWise ScreenConnect Authentication Bypass Vulnerability | Known |
Timeline (last 30 days)
- ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants — Infosecurity Magazine, 2026-10-19
- Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365 — Security Affairs, 2026-10-19
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU — The Register, 2026-10-19
- Ongoing Microsoft 365 Campaign Abuses ConnectWise App — Decipher, 2026-10-18
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants — The Hacker News, 2026-10-18
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack — BleepingComputer, 2026-10-17
- Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts — Cybersecurity News, 2026-10-17
- Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts — Cybersecurity News, 2026-10-17
- Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants — The Hacker News, 2026-10-17
- ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks — Huntress, 2026-10-16
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st) — SANS ISC, 2026-10-01
- ScreenConnect Client (Ab)used by Attackers - SANS ISC — SANS ISC, 2026-10-01
- Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks — The Hacker News, 2026-09-30