security1 publisher
Attackers have been pushing VBScript through live ScreenConnect sessions since August 20
ConnectWise fixed CVE-2026-84869 in ScreenConnect 26.6.5 after Huntress traced a modified client dropping four VBScript files onto machines it held active sessions with. CISA gave federal agencies three days.
Publishers:securityweek.com
Reality
- Evidence64
- Adoption58
- Hype gap+12
- Incentives55
- Confidence62