Cybersecurity in the News: Understanding the Latest Recommendations From the CISA, NSA, and MS-ISAC, Regarding RMM and Software Deployment

**Executive summary:** CISA, NSA, and MS-ISAC report a financially motivated campaign that leverages phishing to deliver and weaponize Remote Monitoring and Management (RMM) tools (AnyDesk, ScreenConnect), granting attackers local access without admin privileges, enabling bypass of controls and possible resale of access; the advisory includes mitigation guidance such as auditing RMM use, application allowlisting, restricting RMM ports/protocols, and using approved remote access solutions.