Tag: ConnectWise

ConnectWise has disclosed a new vulnerability affecting file transfers in its ScreenConnect Remote Access platform. A permanent patch is not yet available, so the company has issued temporary mitigation instructions for customers. The ScreenConnect flaw affects both cloud-hosted and on-premises deployments. However, ConnectWise has not yet assigned it a CVE identifier or disclosed detailed technical…

ConnectWise has fixed critical flaws in its Automate remote-management platform that could enable AiTM update attacks. The ConnectWise Automate bug allowing AiTM update attacks exposed managed service providers and enterprises to risks of malicious updates and network compromise. The company responded quickly to strengthen encryption, authentication, and package validation. Details of the Vulnerabilities Researchers discovered…