Researchers say easy-to-exploit security bugs in ConnectWise remote-access software now under mass attack

Security researchers report mass exploitation of two critical ConnectWise ScreenConnect vulnerabilities (CVE-2024-1709 and CVE-2024-1708) that allow authentication bypass and remote code placement; multiple threat actors have used these flaws to deploy ransomware (including LockBit), backdoors like KrustyLoader, password stealers, crypto miners, and persistent remote access, while many on-premise servers remain unpatched.