Project Hyphae

ConnectWise R1Soft becomes a soft target

Share This Post

On Oct. 28 ConnectWise released a critical security patch for a vulnerability that effects its R1Soft Server Backup Manager (SBM) and ConnectWise Recover v2.97 and earlier. The vulnerability could allow an attacker to access sensitive data or perform remote code execution. Hopefully you don’t have these exposed to the internet, but if you do – work to get that behind a VPN or similar.

While ConnectWise Recover SBMs were automatically updated, you need to upgrade the server backup manager to SBM v6.16.4. There is guidance on how to do this in the ConnectWise security bulletin posted below.

And speaking of backups, you have offline copies of those, right? Its crucial that you protect and have copies of your critical data and applications in a cyber incident, like ransomware.

References:

https://www.connectwise.com/company/trust/security-bulletins/r1soft-and-recover-security-bulletin

https://www.bleepingcomputer.com/news/security/connectwise-fixes-rce-bug-exposing-thousands-of-servers-to-attacks/

More To Explore

Information Security News 11-28-2022

Know Thy Enemy: Thinking Like a Hacker can Boost Cybersecurity Strategy Article Link: https://www.csoonline.com/article/3680371/know-thy-enemy-thinking-like-a-hacker-can-boost-cybersecurity-strategy.html 90% of Organizations Have Microsoft 365 Security Gaps Article Link: https://www.helpnetsecurity.com/2022/11/22/microsoft-365-security-protections/

Information Security News 11-21-2022

Transportation Sector Targeted by Both Ransomware and APTs Article Link: https://www.helpnetsecurity.com/2022/11/18/cybersecurity-trends-q3-2022/ Misconfigurations, Vulnerabilities Found in 95% of Applications Article Link: https://www.darkreading.com/application-security/misconfigurations-vulnerabilities-found-in-95-of-applications Electronics Repair Technicians Snoop

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.