NewsDark Reading
'Djinn' Stealer Targets Cloud, AI Credentials
Teaser from the source
The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingAffected vendors and products
More on Credentials
Other advisories
- Not ratedosv:CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
- Not ratedosv:CLEANSTART-2026-XR01746In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- Not ratedosv:CVE-2026-62979jack: upstream error responses expose backend and peer credentials
- Not ratedosv:CVE-2026-116244pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials
- Not ratedosv:CVE-2026-119662Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
- Not ratedosv:CLEANSTART-2026-TZ01622In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials
Other news entries
- Critical Langflow flaws enable authentication bypass and RCENewsCSO Online
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsNewsThe Hacker News
- Cursor removes malicious Claude Code extension after SSH backdoor attemptNewsCSO Online
- Northflank security breach leads to abuse of customers' AI API keysNewsBleepingComputer
- Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealerNewsCisco Talos
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee RepositoriesNewsThe Hacker News
- Admin dropped the F-bomb in a password to show hackers who was really 1337NewsThe Register — Security
Source: https://www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials
ID