Login

News on Medial

Researchers warn high-risk ConnectWise flaw under attack is 'embarrassingly easy' to exploit | TechCrunch

TechCrunchTechCrunch · 9m
Researchers warn high-risk ConnectWise flaw under attack is 'embarrassingly easy' to exploit | TechCrunch

A high-risk vulnerability in the remote access tool ConnectWise ScreenConnect is being actively exploited by malicious hackers, according to the software's developer. The flaw, described as an authentication bypass vulnerability, could enable attackers to steal confidential data or deploy malware. ConnectWise initially said there was no evidence of public exploitation, but has since confirmed compromises and shared IP addresses used by threat actors. Cybersecurity firm Huntress has also reported active exploitation, with threat actors using the Cobalt Strike framework to compromise servers. ConnectWise has released a patch for the vulnerability, urging users to apply it immediately.

1
View Source

Comments

More Like this

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

Hackers are exploiting ConnectWise flaws to deploy LockBit ransomware, security experts warn | TechCrunch

Hackers are exploiting ConnectWise flaws to deploy LockBit ransomware, security experts warn | TechCrunch

This awkward Microsoft Outlook security flaw can let hackers steal your passwords — so get patching now

This awkward Microsoft Outlook security flaw can let hackers steal your passwords — so get patching now

AI chatbots can infer an alarming amount of info about you from your responses

AI chatbots can infer an alarming amount of info about you from your responses

Microsoft finally patches serious Windows kernel security flaw - but not before it was attacked

Microsoft finally patches serious Windows kernel security flaw - but not before it was attacked

Want to Steal a Tesla? Try Using a Flipper Zero

Want to Steal a Tesla? Try Using a Flipper Zero

This WordPress plugin vulnerability has put millions of websites at risk

This WordPress plugin vulnerability has put millions of websites at risk

This commonly-used Ubuntu tool can be hijacked to spread malware

This commonly-used Ubuntu tool can be hijacked to spread malware

Hackers can read private AI assistant chats even though they’re encrypted

Hackers can read private AI assistant chats even though they’re encrypted

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

Exim vulnerability affecting 1.5 million servers lets attackers attach malicious files

Download the medial app to read full posts, comements and news.