Remote monitoring and management (RMM) platform ConnectWise has patched a cross-site scripting (XSS) vulnerability that could lead to remote code execution (RCE). Security researchers at Guardio Labs ...

Exploiting the vulnerabilities “would allow an attacker to execute arbitrary code on a victim’s Control server, as well as gain control of any client machines connected to a victim’s Control instance, ...

"One of our security researchers found these vulnerabilities. He deemed them severe enough to rate them as critical and the attack chain so bad that we had to report them." Security consultancy Bishop ...