16 article(s) in our index mention this organisation.
Threat actors are leveraging a simple phishing campaign to distribute a tampered ScreenConnect client executable. The ScreenConnect client is preconfigured to call-back a test account operated by the attackers.
A six-month trial by the British Transport Police (BTP) using live facial recognition technology at London railway stations and the London Underground scanned over 500,000 faces, resulting in zero correct matches and no…
Cybercriminals are using fake desktop apps mimicking HR and payroll platforms to trick HR staff into installing ConnectWise's ScreenConnect software, granting them persistent remote access to company PCs.
A zero-day vulnerability in the Acronis Backup plugin for cPanel & WHM has been actively exploited in the wild. Acronis has released patches to address the issue, urging users to update their systems immediately to preve…
ConnectWise has released a critical patch to address a vulnerability in ScreenConnect, a remote access and support tool, that’s been actively exploited in worm-like attacks. The flaw allows unauthorized file transfer and…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities to its KEV catalog, impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. Attack…
NextGen Healthcare’s Mirth Connect versions 4.7.1 and earlier are vulnerable to SQL injection and XXE injection attacks, potentially leading to data exfiltration and denial-of-service conditions. The CISA has issued an a…
A sprawling search engine optimization (SEO) poisoning campaign, codenamed BengalSEO, has been operating since 2015 and is linked to two IT service providers, WeConnect Solutions LLC and Garage2Global. The campaign uses…
A worm-like campaign utilizing modified ScreenConnect clients is spreading malicious payloads across networks. The attackers leverage social engineering and remote support tools to deploy a chain of VBScript files, ultim…
A sophisticated worm-like attack is leveraging ConnectWise ScreenConnect to spread a four-stage VBScript chain, targeting newly connected hosts. The attack utilizes social engineering, phishing, and fake refund forms to…
The CISA and FBI have updated their advisory on the Medusa ransomware gang, revealing that over 500 victims have been identified in the last year, with a significant focus on the healthcare sector. Medusa is known for ra…
China-linked hackers, believed to be part of the Storm-1175 group, are exploiting a critical vulnerability in N-central, a remote monitoring and management (RMM) tool, to deploy ransomware. This supply-chain attack is le…
The Smoke#Screen campaign is a sophisticated social engineering attack leveraging legitimate Remote Monitoring and Management (RMM) tools, specifically ScreenConnect, to gain persistent remote access to compromised netwo…
A sophisticated phishing campaign, dubbed Operation BlueDash, is leveraging Microsoft Teams-themed lures to deliver malicious Remote Management and Monitoring (RMM) tools, primarily Level RMM and ConnectWise ScreenConnec…
This BleepingComputer article discusses the emerging concept of "agentic" GRC (Governance, Risk, and Compliance) systems, driven by the increasing dynamism of modern IT environments. It explains how agents, unlike tradit…
A new malware campaign, dubbed Weedhack, is targeting Minecraft players through YouTube and malicious websites, distributing a MaaS (Malware-as-a-Service) tool. The campaign, active since January 2026, utilizes SEO poiso…
_Ivelin_Radkov_Alamy.png?width=720&quality=80&disable=upscale)
