SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

SecurityAffairs reports multiple incidents and vulnerabilities, including an active SMOKE#SCREEN campaign delivering ScreenConnect through fake software updates, SharePoint exploitation affecting approximately 200 Swiss federal IT agency accounts, INC ransomware exploitation of SonicWall SMA 1000 flaws, critical cPanel vulnerability CVE-2026-58048 enabling authenticated SQL execution as root, and actively exploited N-able N-central authentication bypass CVE-2026-18577. Additional reports cover data breaches, AI-assisted attacks, ransomware extortion, and alleged source-code and secrets leakage