Ransomwarehigh

ConnectWise suffered a cyberattack carried out by a sophisticated nation state actor

Security Affairsby @securityaffairsMay 30, 2025 · 08:02 UTC (May 30, 2025)2 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-3935 CVE-2024-1709 CVE-2024-1708

Tags: cve-2025-3935 cve-2024-1709 cve-2024-1708 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1709 +1 related CVE CVE-2024-1708	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0 group max	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024
CVE-2025-3935	ViewState Code Injection in ConnectWise ScreenConnect May Lead to RCE	7.2	4%	KEV	Apr 25, 2025 KEV Jun 2, 2025

From the original article

2 min read at securityaffairs.com

ConnectWise detected suspicious activity linked to a nation-state actor, impacting a small number of its ScreenConnect customers. ConnectWise revealed it had detected suspicious activity linked to an advanced nation-state actor. The company confirmed that the attack impacted a small number of its ScreenConnect customers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.