BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
18 results
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
On 2026-09-11, CISA added CVE-2026-85706 (GitLab Community Edition and Enterprise Edition) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-84869 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-07, CISA added CVE-2026-8037 (Progress LoadMaster) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-28, CISA added CVE-2024-1708 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-18, CISA added CVE-2021-22175 (GitLab GitLab) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-03, CISA added CVE-2021-39935 (GitLab Community and Enterprise Editions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-02, CISA added CVE-2025-3935 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-05-15, CISA added CVE-2025-42999 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-04-29, CISA added CVE-2025-31324 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-19, CISA added CVE-2017-12637 (SAP NetWeaver) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-03-03, CISA added CVE-2024-4885 (Progress WhatsUp Gold) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-11-18, CISA added CVE-2024-1212 (Progress Kemp LoadMaster) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2024-09-30, CISA added CVE-2019-0344 (SAP Commerce Cloud) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-09-16, CISA added CVE-2024-6670 (Progress WhatsUp Gold) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-06-13, CISA added CVE-2024-4358 (Progress Telerik Report Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-05-01, CISA added CVE-2023-7028 (GitLab GitLab CE/EE) to its Known Exploited Vulnerabilities (KEV) catalog .
On February 22, 2024, CISA added ConnectWise ScreenConnect vulnerability CVE-2024-1709 to its Known Exploited Vulnerabilities (KEV) catalog .