Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

ConnectWise ScreenConnect file-transfer mitigation advisory

Advisory/Mitigation
First reported
Last updated
Happening score
H score 30
1 unique sources, 1 articles

Summary

Hide ▲

ConnectWise issued a ScreenConnect mitigation advisory after identifying an issue affecting file transfer behavior in Remote Access Support and Access sessions. The guidance applies to both Cloud and On-Premise deployments and tells customers to disable technician file transfer permissions until a fix is available. The recommended change reduces the risk of unwanted file movement through affected sessions.

Related Happenings

ConnectWise ScreenConnect Remote Access file-transfer mitigation

Advisory/Mitigation
H score55 First: 07.09.2026 13:06 Last: 07.09.2026 13:06 Sources 1

About this happening: ConnectWise issued temporary mitigation steps for a ScreenConnect Remote Access file-transfer flaw affecting cloud and on-premises deployments. Administrators are...

Latest development: 16.09.2026 14:14

CISA says CVE-2026-84869 in ConnectWise ScreenConnect is being exploited in the wild, and added the flaw to its catalog of actively exploited vulnerabilities. The missing-authorization and improper privilege management issue can let an attacker transfer or execute files through active remote sessions without authorization or host confirmation, and ConnectWise issued temporary guidance on September 7 to disable TransferFiles permissions.

Open Happening

ScreenConnect Remote Access file-transfer security flaw

Vulnerability
H score44 First: 07.09.2026 13:06 Last: 07.09.2026 13:06 Sources 1

About this happening: The ScreenConnect Remote Access file-transfer vulnerability affects cloud and on-premises deployments and puts Support and Access sessions at risk. ConnectWise has...

Latest development: 16.09.2026 14:14

CISA says CVE-2026-84869 is being exploited in the wild against ConnectWise ScreenConnect, and ConnectWise shared temporary mitigations on September 7 that advise disabling TransferFiles permissions. The missing-authorization / improper privilege management flaw in ScreenConnect clients can let attackers with basic privileges transfer or execute files without user interaction, and Shadowserver says more than 1,000 instances remain unpatched and exposed online.

Open Happening

StormEncryptor ransomware deployment by Storm-1175

Malware Activity
H score40 First: 10.08.2026 20:42 Last: 10.08.2026 20:42 Sources 1

About this happening: Storm-1175 is deploying StormEncryptor, a previously undocumented ransomware strain that appends .encrypted to encrypted files and drops !!!README_FIRST!!!.txt ran...

Open Happening

ConnectWise ScreenConnect remote access installation chain

Malware Activity
H score29 First: 05.08.2026 20:49 Last: 05.08.2026 20:49 Sources 1

About this happening: A malicious installer chain is now deploying ConnectWise ScreenConnect through a batch file and setup.msi, giving operators remote access to victim devices. The pa...

Open Happening

N-able security patch release for CVE-2026-18577

Security Patch Release
H score46 First: 03.08.2026 09:41 Last: 03.08.2026 09:41 Sources 1

About this happening: N-able is warning that CVE-2026-18577 is being actively exploited against N-central on both hosted and on-premises servers. The vendor released hotfix 2026.3...

Open Happening

Timeline

  1. 07.09.2026 14:36 2 articles · 13d ago

    ConnectWise issues ScreenConnect file-transfer mitigation advisory

    Mitigation Patch Update

    ConnectWise issued an advisory for ScreenConnect Remote Access Support and Access sessions after identifying an issue affecting file transfer behavior across Cloud and On-Premise deployments, and recommended disabling technician file-transfer permissions until a fix is available.

    Show sources
    Open in new tab