Back Sites.Duke.Edu

ConnectWise (ScreenConnect) Security Advisory

Sites.Duke.Edu • November 12, 2026

ConnectWise has issued a security advisory regarding potential unauthorized access involving certain third-party ScreenConnect extensions.

As a precaution, OIT is reviewing its ScreenConnect environment and disabling extensions that may be enabled. Other departments using ScreenConnect are encouraged to review their environments and follow the vendor’s security recommendations.

ConnectWise has not identified a vulnerability in ScreenConnect itself.

For additional information and recommended actions, visit the ConnectWise Trust Center .

For questions or assistance, please [email protected]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SCKit Worm Compromises 288 Endpoints via ScreenConnect Exploitation On November 11, 2026, cybersecurity firm Huntress reported that a worm-like toolkit named SCKit exploited vulnerabilities in ConnectWise's ScreenConnect to compromise at least 288 endpoints across 48 organizations. The attackers leveraged a flaw in the RMM+ extension, specifically versions 1.0.31 and 1.0.32, which accepted a blank access key, allowing unauthorized command execution. This exploitation enabled the installation of rogue ScreenConnect clients and the SCKit toolkit, which provides persistent remote access and can intercept session cookies. ConnectWise disabled five third-party extensions as a precaution and is investigating the incident, which has not yet confirmed the initial access vector. The campaign was characterized by rapid deployment, with all affected hosts compromised within 90 minutes. Huntress has shared indicators of compromise (IoCs) and recommended that organizations review their ScreenConnect deployments for suspicious activity. 19 sources 71

Extracted Entities

ConnectWise (ScreenConnect) Security Advisory

The full story

Extracted Entities

Domains (1)

Email Addresses (1)

Tools (1)