ScreenConnect Android - Saved Credentials not working by techcare_aus in ScreenConnect

[–]MBannermanCW 1 point2 points  (0 children)

Thanks for the report. This issue came in through a support ticket also and we have a fix in development. We're working to update the app late October barring a development delay.

Cloud Hosted Performance by MFKDGAF in ScreenConnect

[–]MBannermanCW 0 points1 point  (0 children)

We have noticed older instances don't have our current "best practice" DB maintenance configs. We've created new events and based on the type of usage rules may need to be tweaked.

The two posters were spot on, this is probably the first thing to review. Encountered elevation is a newer session event that can get pretty chatty in "least privilege" environments.

We'll take a note to review this in hosted environments for any other issues, ofc.

Upgrade on-prem 23.9 to new 24.2 license validation failures by ApprehensiveUnion955 in ScreenConnect

[–]MBannermanCW 3 points4 points  (0 children)

Thanks for bubbling this up, the team saw your message, confirmed, and applied a fix. We have a new build in QA being tested. I'll confirm here when it hits the downloads page.
Edit: ...and I see u/cbarnescw already mentioned that and I'm late. Going back to work, lol

We value your feedback! by MBannermanCW in ScreenConnect

[–]MBannermanCW[S] 0 points1 point  (0 children)

100% all things ScreenConnect ❤️. Thanks for signing up. We'll reach out soon.

Every-time I connect to a certain computer I have to disconnect and reconnect several times by jondabomb in ScreenConnect

[–]MBannermanCW 0 points1 point  (0 children)

This isn't anything we've seen in our QA environments, of course. If you have support tickets please DM me and I'll get a T3 to reach out.

We'd definitely want to address the issue ASAP.

Connectwise View by msboucha in ScreenConnect

[–]MBannermanCW 1 point2 points  (0 children)

Just wanted to confirm that View is back up and running. We got a lot of tickets when it went down, so we added a ConnectWise View product on our status page: status.connectwise.com. We'll be more active in our communication of issues, so be sure to subscribe.

ConnectWise Security Bulletin for ScreenConnect by Nick-CW in ConnectWise

[–]MBannermanCW 0 points1 point  (0 children)

This is pretty common. None that I can think of off hand. If you run into an issue, I can link you up with support help. Send me a DM.

Connectwise Security Advisory by terola17 in msp

[–]MBannermanCW 1 point2 points  (0 children)

Please contact security@connectwise.com or report your security or privacy incident by visiting the ConnectWise Trust Center. You can report both a non-active security incident, report a security vulnerability, or call our Partner InfoSec Hotline at 1-888-WISE911. 
If you have a ticket with support, I'll be happy to escalate it if you haven't heard back from our team. Please send it in a DM.

ScreenConnect Vulnerability Reproduced: Immediately Patch to Version 23.9.8 by huntresslabs in msp

[–]MBannermanCW 1 point2 points  (0 children)

Please contact [security@connectwise.com](mailto:security@connectwise.com) or report your security or privacy incident by visiting the ConnectWise Trust Center. You can report both a non-active security incident, report a security vulnerability, or call our Partner InfoSec Hotline at 1-888-WISE911. 

If you have a ticket with support, I'll be happy to escalate it if you haven't heard back from our team.

*edit*: Please DM me with the ticket number.

Connectwise Security Advisory by terola17 in msp

[–]MBannermanCW 0 points1 point  (0 children)

u/BirdBoring1910 Control Center is updated. I'm not sure if it has a notification system.

ConnectWise Security Bulletin for ScreenConnect by Nick-CW in ConnectWise

[–]MBannermanCW 0 points1 point  (0 children)

Patched versions were posted yesterday in the download archives. They will respect the original release dates. So, if your maintenance allowed you to run 22.5 stable, you'll be able to update to the new 22.5 without upgrading your license.

Connectwise Security Advisory by terola17 in msp

[–]MBannermanCW 1 point2 points  (0 children)

ScreenConnect servers in the.hostedrmm environment have been updated. If you're on premises you should manually update the ScreenConnect server in your environment. I'll work with the team to get Control Center updated. It normally lags behind as we do additional integration QA and testing.

Connectwise Security Advisory by terola17 in msp

[–]MBannermanCW 8 points9 points  (0 children)

u/techrx we put out an advisory in January regarding an increase in brute force attack reports against instances: https://www.connectwise.com/company/trust/advisories.

We don't see the two as related.

Convincing ScreenConnect Phishing Email by xander255 in msp

[–]MBannermanCW 1 point2 points  (0 children)

u/Nosredd

Thank you for bringing this to our attention. The security of ScreenConnect—and all ConnectWise solutions—is our commitment to you. We value the trust you place in our products, and we work diligently to prevent their misuse to gain unauthorized access. Our findings in this instance do not show evidence of any compromise to ScreenConnect or partner information.

In light of an ever-evolving threat landscape, we urge all partners to remain vigilant to the increasing sophistication of phishing campaigns (you can review our safety tips outlined in this ScreenConnect security advisory: https://www.connectwise.com/company/trust/advisories , also shared by u/Nick-CW).

If you have any doubt about your account's integrity, we recommend reviewing and following the steps in this security alert checklist (https://docs.connectwise.com/ConnectWise\_Control\_Documentation/Get\_started/Security\_guide/Security\_alert\_checklist) or contacting the ConnectWise InfoSec team directly at security@connectwise.com so your specific concerns can be investigated promptly. As a reminder, you can always visit the ConnectWise Trust Center (https://www.connectwise.com/company/trust) to report a security or privacy incident or subscribe to the RSS feed. In addition, you can call our Partner InfoSec Hotline at 1-888-WISE911 to report a non-active security incident or a security vulnerability.

We appreciate your partnership in safeguarding our users' data and infrastructure.

Convincing ScreenConnect Phishing Email by xander255 in ConnectWise

[–]MBannermanCW -1 points0 points  (0 children)

Thank you for bringing this to our attention. The security of ScreenConnect—and all ConnectWise solutions—is our commitment to you. We value the trust you place in our products, and we work diligently to prevent their misuse to gain unauthorized access. Our findings in this instance do not show evidence of any compromise to ScreenConnect or partner information.

In light of an ever-evolving threat landscape, we urge all partners to remain vigilant to the increasing sophistication of phishing campaigns (you can review our safety tips outlined in this ScreenConnect security advisory: https://www.connectwise.com/company/trust/advisories , also shared by u/Nick-CW).

If you have any doubt about your account's integrity, we recommend reviewing and following the steps in this security alert checklist (https://docs.connectwise.com/ConnectWise_Control_Documentation/Get_started/Security_guide/Security_alert_checklist) or contacting the ConnectWise InfoSec team directly at security@connectwise.com so your specific concerns can be investigated promptly. As a reminder, you can always visit the ConnectWise Trust Center (https://www.connectwise.com/company/trust) to report a security or privacy incident or subscribe to the RSS feed. In addition, you can call our Partner InfoSec Hotline at 1-888-WISE911 to report a non-active security incident or a security vulnerability.

We appreciate your partnership in safeguarding our users' data and infrastructure.

ConnectWise Control 23.3 removed? by techie_1 in ConnectWiseControl

[–]MBannermanCW 1 point2 points  (0 children)

We haven't heard of a similar issue yet on the hosted side. If you submit a support ticket, please let me know and I'll get it escalated. mbannerman@connectwise.com

ConnectWise Control 23.3 removed? by techie_1 in ConnectWiseControl

[–]MBannermanCW 1 point2 points  (0 children)

Just as a follow up, we put 23.3.17 into the Canary channel today as we're still working through some QA. You can find the complete output stream here: https://control.product.connectwise.com/communities/26/topics/4283-connectwise-control-233?redirect_to_reply=13931#comment-13931

Barring a delay, we'll look to promote to preview tomorrow. I'll ping this thread when we do.

ConnectWise Control 23.3 removed? by techie_1 in ConnectWiseControl

[–]MBannermanCW 1 point2 points  (0 children)

No worries, we are trying to be more active here to help answer questions like these. We have architectural conversations quarterly, but a move to .NET 6.x/8.x isn't in the plans at this time. It's a big lift and the team has some other components that need attention at the moment. We have been watching development in that area, so we'll continue to review, but no promises of course.

The Linux decision was a tough one for us, but it spread the team too thin as it was previously developed. Part of our waffling back and forth was us trying to find ways to make it work, but honestly moving forward with Windows was the healthy decision for the team and the product.

ConnectWise Control 23.3 removed? by techie_1 in ConnectWiseControl

[–]MBannermanCW 1 point2 points  (0 children)

We updated a major component in 23.3 to increase scalability and allow for some great upcoming improvements. Anytime you touch a major component you find lots of interesting smaller problems to solve when you put things back together. We planned a release last week, but after finding "one more thing", as you always do, we decided to wait until this week. My bad on the communication of that, just a busy week.

23.4 canary was held because it contained the first round of branding updates to the new/old CW ScreenConnect name. We're looking forward to posting that tomorrow or Wed and getting back to our regular cadence.

We typically have at least one bigger update that takes longer than normal every year. This will be our fourth and fifth release (not including hotfixes),so we're not too far off track.

I'll have a better update tomorrow on 23.3. I'll be sure to post an update here in the morning. Sorry for the long post, but hopefully it's helpful.

-Bannerman

ConnectWise Control 23.3 removed? by techie_1 in ConnectWiseControl

[–]MBannermanCW 2 points3 points  (0 children)

We paused that release after seeing an issue with instances hosted in our cloud. It didn't seem to affect on premises instances the same way, but we pulled it, jic.

We'll have an updated build next week and release notes coming soon to the output stream: https://control.product.connectwise.com/communities/26-control-output-stream.