#ConnectWise
All CosmicBytez Labs articles tagged #ConnectWise, across news, security advisories, how-to guides, and projects.
- News
Microsoft Ties ConnectWise Supply Chain Attack to China-Linked Storm-0940 and ARTEX AI Agents
Microsoft attributes the ConnectWise Cloud Backup compromise to Storm-0940, which used the agentic ARTEX framework to reach 2,250+ tenants.
- News
ConnectWise Suspends Cloud Backup Service After Confirming Supply Chain Attack
ConnectWise suspended Cloud Backup, SaaS Security, and Cloud Management after confirming unauthorized access tied to a supply chain attack on Saturday.
- News
ConnectWise Disables Seven App Identities as Breach Scope Grows to Nearly 1,000 Tenants
ConnectWise disabled 7 app identities after Huntress found ~1,000 Entra tenants touched, 300 breached, in the Cloud Backup credential theft campaign.
- News
Hijacked ConnectWise Cloud Backup Credential Used to Breach 173 Microsoft 365 Tenants
Attackers abused a compromised ConnectWise Cloud Backup app credential to sign into 173 MSP customer M365 tenants and escalate to Global Admin.
- News
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
CVE-2026-84869 (CVSS 9.9) let attackers push and execute files through active ScreenConnect sessions, spreading VBScript payloads since August 20.
- Security
CVE-2026-84869: ConnectWise ScreenConnect Unauthorized File Transfer & Execution
A critical ScreenConnect client flaw lets attackers transfer and execute files through active remote sessions without host confirmation.
- News
CISA Adds Actively Exploited ConnectWise and Windows Flaws
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog — CVE-2024-1708 affecting ConnectWise ScreenConnect...
- Security
CVE-2024-1708: ConnectWise ScreenConnect Path Traversal
ConnectWise ScreenConnect contains a path traversal vulnerability (CVE-2024-1708) that allows attackers to execute remote code or directly access...
- Security
CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material
A critical authentication bypass vulnerability (CVSS 9.0) in ConnectWise ScreenConnect versions prior to 26.1 allows an actor with access to server-level...