#Connectwise

A backup application identity owned by the vendor puts two jobs under one identity: running your...

Automated password guessing failed, but stolen app credentials needed no user sign-in at all.

Sophos found the token sweep reached tenants with no active backup subscription, and Huntress warns that credentials planted during the ConnectWise Cloud Backup attack outlast disabling the app.…

Microsoft says China-aligned group Storm-0940 used the ARTEX AI agent framework to reach Microsoft 365 tenants through ConnectWise Cloud Backup apps.

Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

CISA reports active exploitation of ConnectWise ScreenConnect (CVE-2024-1708) that allow for remote code execution and security mechanism bypasses. CISA is requiring patching by May 12, 2026.

This article was originally published on ThreatChain — decentralized threat intelligence. Your...

From Reddit - r/cybersecurity: CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV