ScreenConnect Auth Bypass Exploited in Fresh Malware Campaign

Threat actors are exploiting a vulnerability in a legitimate ScreenConnect extension to bypass authentication and deploy malware. The specific extension and patch status are unclear, but the campaign indicates active exploitation of a previously known or newly discovered flaw. This matters because ScreenConnect is widely used for remote access, making this a potential vector for broad compromise.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works