AnyDesk Compromised, Passwords Revoked

AnyDesk Compromised, Passwords Revoked

February 5, 2024 at 04:52PM

AnyDesk announced its production systems have been compromised, leading to plans for certificate revocation and password resets. The company assured that end user devices were unaffected and that it is collaborating with law enforcement agencies. AnyDesk advised customers to update passwords and confirmed that it is safe to use its services with the latest version and new code signing certificate.

Based on the meeting notes provided, it appears that AnyDesk, a provider of remote desktop application and access management tools, has experienced a security breach. As a precautionary measure, the company has decided to revoke all security-related certificates, reset web portal passwords, and undergo internal password rotations. They have also confirmed that no end user devices have been compromised and reassured customers that their systems are safe to use.

Furthermore, AnyDesk has emphasized the importance of updating passwords used across other accounts and urged customers to ensure they are using the latest version of their application with the new code signing certificate. The company is working with law enforcement agencies, but has indicated that there is no evidence of ransomware involvement at this time.

It is worth noting that remote access management tools like AnyDesk have been targeted by cybercriminals, as highlighted by a joint advisory from the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA).

Overall, the key takeaways from the meeting notes are: a security breach at AnyDesk, precautionary measures being taken, reassurance of system safety, and the importance of updating passwords and using the latest application version.

Full Article