CISA warns of ConnectWise ScreenConnect bug exploited in attacks

CISA warns that attackers are actively exploiting a recently patched ConnectWise ScreenConnect vulnerability (CVE-2025-3935) and four additional flaws in ASUS routers and Craft CMS — including multiple critical RCE-capable issues — noting real-world exploitation (e.g., a router-targeting botnet named AyySSHush) and urging agencies to apply mitigations or discontinue affected products.