RESEARCHERS WARN HIGH-RISK CONNECTWISE FLAW UNDER ATTACK IS ’EMBARRASSINGLY EASY’ TO EXPLOIT

Summary from the TLDR InfoSec newsletter

The high-risk ConnectWise flaw is an authentication bypass vulnerability that allows attackers to remotely steal confidential data from vulnerable servers or deploy malicious code such as malware. ConnectWise's SaaS customers were patched within 48 hours, but 8,800 ConnectWise servers remain vulnerable to exploitation.