SCREENCONNECT VULNERABILITY UNDER ACTIVE ATTACK

CISA confirmed the critical-severity vulnerability in ScreenConnect has moved beyond proof-of-concept stage, with real-world attacks now occurring. The agency added the flaw to its Known Exploited Vulnerabilities catalog, signaling widespread threat activity. ScreenConnect, a remote desktop and support tool used by IT professionals and managed service providers, affects thousands of deployments globally. Organizations using the software should prioritize patching immediately. ConnectWise has released security updates addressing the vulnerability. CISA recommends users apply patches without delay and monitor systems for indicators of compromise. The agency did not disclose specific attack patterns but emphasized the critical nature of the threat. This incident underscores the cascading risk posed by vulnerabilities in remote access tools, which attackers leverage to breach multiple downstream organizations.