NewsDark Reading
'Djinn' Stealer Targets Cloud, AI Credentials
Teaser from the source
The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingAffected vendors and products
More on Credentials
Other advisories
- MediumCVE-2026-111495API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse engineering. The vendor distinguis…
- Not ratedosv:CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
- Not ratedosv:CLEANSTART-2026-XR01746In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- Not ratedosv:CVE-2026-62979jack: upstream error responses expose backend and peer credentials
- Not ratedosv:CVE-2026-116244pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials
- Not ratedosv:CVE-2026-119662Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
Other news entries
- Chainalysis says breach exposed credentials for all customersNewsBleepingComputer
- Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key ServicesNewsThe Hacker News
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsNewsBleepingComputer
- Zyxel patches a zero-day hiding behind an old fixNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Vercel rolls out new protection against stolen session cookie attacksNewsBleepingComputer
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switchesNewsBleepingComputer
- NIKKE PC game launcher hacked to spread remote access, data-stealing malwareNewsBleepingComputer
Source: https://www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials
ID