ConnectWise patches new flaw allowing ScreenConnect hijacking

Multiple high-impact threats and vulnerabilities reported: a maximum-severity remote code execution zero-day in Cisco Secure Firewall Management Center is being actively exploited by the Interlock ransomware gang since January; ConnectWise patched a cryptographic signature verification flaw in ScreenConnect that can enable hijacking and privilege escalation; Marquis disclosed a ransomware-related data theft affecting ~672K individuals and 74 banks; the GlassWorm supply-chain campaign compromised 400+ code repositories and packages; a new iOS exploit framework called “Darksword” is being used—t