The MSP Minute ⏱ Thursday 30 April 2026
For Managed Service Providers worldwide. Today... an actively exploited vulnerability in ConnectWise ScreenConnect... the ransomware with a bug... and Microsoft's enormous bank account
🔴 CISA just flagged an actively exploited vulnerability in ConnectWise ScreenConnect. Check your version today
If you use ConnectWise ScreenConnect, here’s your first action this morning.
CISA added CVE-2024-1708 to its Known Exploited Vulnerabilities catalog on April 28, confirming active exploitation in the wild.
The flaw is a path traversal vulnerability. Ummm… in plain English, it allows an attacker to trick ScreenConnect into accessing files outside its restricted area, potentially leading to remote code execution and full system compromise.
Federal agencies have until May 12 to patch. CISA is strongly urging all private organisations (i.e you) to treat that deadline as their own. The Hacker News
Good news: if you’re completely on top of ConnectWise updates, you have nothing to worry about. This was only added to the vulnerabilities catalog two days ago, but was actually patched back in February 2024.
🟡 A new ransomware gang accidentally built a data shredder instead
There’s a new ransomware-as-a-service operation called VECT 2.0 making the rounds… and it has a bug its operators probably didn’t intend.
Check Point Research published their analysis this week after obtaining the VECT ransomware builder through BreachForums. What they found is almost darkly comic: VECT 2.0 doesn’t actually encrypt files properly. For any file larger than 128KB (which covers virtually every file that matters) the malware permanently destroys the data rather than encrypting it.
The decryption keys are discarded during the attack. Victims who pay the ransom cannot get their files back, not because the attackers are being difficult, but because the keys no longer exist. BleepingComputer
🟢 Microsoft just posted its biggest quarter ever… and Copilot is finally taking off
The big MS reported Q3 FY2026 earnings yesterday and the numbers are extraordinary. Microsoft
Revenue hit $82.9 billion, up 18%
Azure grew 40%
Microsoft Cloud passed $54 billion in a single quarter, up 29%
And the AI business surpassed $37 billion in annual recurring revenue, up 123% year on year
A number that matters for MSPs: paid Copilot seats passed 20 million this quarter, with Satya Nadella highlighting strong growth in small and medium business customers (i.e. your clients).
Copilot is accelerating. And with E7 launching tomorrow, the conversation should be a lot easier.
Right, that’s Thursday done. We’ll be back in your inbox tomorrow morning. Enjoy your day… and try not to think what you’d do with all those billions in your bank account.