VulnHub

Real-time Cybersecurity News

Unpatched ScreenConnect servers open to attack (CVE-2026-3564)

Help Net Security
CVEExploitVulnerabilityCritical

Overview

ConnectWise has addressed a significant vulnerability (CVE-2026-3564) in its ScreenConnect remote access platform, which is widely used by managed service providers and IT departments. This flaw allows attackers to potentially hijack remote sessions by misusing ASP.NET machine keys to create forged authentication tokens. The vulnerability arises from inadequate verification of cryptographic signatures, making it possible for hackers to exploit the issue remotely. Organizations that utilize ScreenConnect, whether in cloud-hosted or on-premise configurations, need to prioritize applying the available patches to safeguard their systems. Failure to address this vulnerability could lead to unauthorized access to sensitive information and operations.

Key Takeaways

  • Affected Systems: ScreenConnect remote access platform by ConnectWise, affected versions not specified.
  • Action Required: Users should update to the latest patched version of ScreenConnect provided by ConnectWise to mitigate this vulnerability.
  • Timeline: Newly disclosed

Original Article Summary

ConnectWise has patched a critical vulnerability (CVE-2026-3564) that could enable attackers to hijack ScreenConnect sessions by abusing ASP.NET machine keys to forge trusted authentication. About CVE-2026-3564 The ScreenConnect remote access platform is popular with managed service providers, IT departments, and technology solution providers. They can opt for the cloud-hosted version or can deploy it on their own servers or in their private cloud. CVE-2026-3564 stems from improper verification of cryptographic signature, can be exploited remotely … More → The post Unpatched ScreenConnect servers open to attack (CVE-2026-3564) appeared first on Help Net Security.

Impact

ScreenConnect remote access platform by ConnectWise, affected versions not specified.

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Users should update to the latest patched version of ScreenConnect provided by ConnectWise to mitigate this vulnerability.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Exploit, Vulnerability, and 1 more.

Read Original Article

Related Coverage

OpenAI heralds cybersecurity, election interference safeguard plans for 2026 midterms

CyberScoop

OpenAI has announced plans to enhance cybersecurity measures to protect against election interference in the upcoming 2026 midterms. This initiative builds on efforts from major tech companies in 2024 aimed at tackling the challenges posed by artificial intelligence in election processes. The focus is on preventing the manipulation of information and safeguarding the integrity of elections, especially as AI technology continues to evolve. This is significant as it demonstrates a proactive approach to a growing concern over how technology can influence democratic processes and public opinion. The collaboration with other tech firms suggests a concerted effort to address these threats before they manifest in future elections.

May 27, 2026

Ransomware Actors Show Up In Person to Steal Law Firm Data

darkreading

The FBI has issued a warning about the Silent Ransom Group, a ransomware gang that is now physically infiltrating law firms to steal sensitive data. This group employs social engineering tactics to gain access to servers and databases, making them a significant threat to legal practices. Their actions can lead to severe data breaches, putting client information at risk and potentially harming the reputation of affected law firms. As legal firms often handle confidential information, the implications of such breaches could be far-reaching, affecting clients and the firms' operations. It's crucial for law firms to strengthen their cybersecurity measures to defend against this emerging threat.

May 27, 2026

UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About Russia

SecurityWeek

In a recent speech, the UK's chief of cyberspying warned that Russia is increasing its aggressive activities in a 'gray zone' that doesn't quite reach the level of war. This reflects ongoing concerns among intelligence experts about Russia's tactics, which may include cyber operations and disinformation campaigns aimed at destabilizing countries without triggering direct military conflict. The chief emphasized the role of artificial intelligence in these operations, describing it as an 'unstoppable force' that could amplify Russia's capabilities in this area. This warning serves as a reminder for nations to remain vigilant and prepared for potential cyber threats that could disrupt security and stability. The implications of these developments are significant, as they suggest a shift in how conflicts may be waged in the future, particularly with non-traditional warfare tactics.

May 27, 2026

Latin American Cybercriminals Hoover Up Government Data

darkreading

Cybercriminals have leaked 5.8 million records of Uruguayan citizens, marking another instance of hackers targeting government databases to sell personal information. This breach raises serious concerns about the security of sensitive data held by government agencies and the potential for identity theft and fraud. The leaked information could be used for various malicious purposes, including financial scams and phishing attacks. As more government data becomes accessible online, the risks to citizens increase, highlighting the need for stronger security measures to protect personal information. This incident serves as a stark reminder for governments to prioritize cybersecurity to safeguard their citizens' data.

May 27, 2026

AI-Assisted Exploit Development Outpaces Scanner Detection

darkreading

Recent research indicates that attackers are increasingly using artificial intelligence to speed up the development of exploits for known vulnerabilities, specifically CVEs (Common Vulnerabilities and Exposures). This advancement allows malicious actors to create working exploits much faster than traditional methods, making it harder for security scanners to detect and mitigate these threats in a timely manner. As a result, organizations could be at greater risk of attacks that exploit these vulnerabilities before they have a chance to be patched. The implications are significant, as it suggests a need for companies to enhance their security measures and stay ahead of evolving tactics used by attackers. Users and organizations must remain vigilant and proactive in addressing vulnerabilities to protect their systems from potential exploitation.

May 27, 2026

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

The Hacker News

Recent reports from WatchGuard and ESET reveal two banking trojan campaigns targeting users in Latin America and Europe. The Grandoreiro malware is aimed at Windows devices, while the BTMOB RAT is designed for Android users. These campaigns specifically target companies in Spain, Portugal, and Mexico, as well as mobile users in Brazil. The malware's ability to siphon sensitive financial information poses a significant risk to both businesses and individual users. As cybercriminals continue to adapt their tactics, it's crucial for users to remain vigilant and implement security measures to protect their devices and data.

May 27, 2026