# Active ScreenConnect attacks breach MSPs, impact dozens of organizations

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations/) · 2026-11-11 · Security
Page: https://themorning.dev/story/active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations-ccdd6c7f3ffe5679
Kind: security · Impact: high

## In brief

- ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs).
- Attackers use compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices.
- The reported campaign has impacted dozens of organizations.

## Why it matters

MSPs that run ScreenConnect and the customers they manage may have hostile remote-access clients on their devices, so affected environments need checking.

## Timeline

- 2026-11-11: BleepingComputer reports ConnectWise is investigating active ScreenConnect attacks on MSPs

## Coverage

- [Active ScreenConnect attacks breach MSPs, impact dozens of organizations](https://www.bleepingcomputer.com/news/security/active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations/) — BleepingComputer, 2026-11-11

Tags: security, remote-access, msp, malware, screenconnect

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev