Critical SimpleHelp flaw exploited to deploy new stealer malware
Teaser from the source
Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerAffected vendors and products
More on SimpleHelp
Other advisories
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- CriticalCVE-2024-57727SimpleHelp: Path Traversal Vulnerability
- CriticalCVE-2024-57726Die Fernunterstützungssoftware SimpleHelp Version 5.
Other news entries
- Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn StealerNewsThe Hacker News
- Critical SimpleHelp Vulnerability Exploited for Malware DeliveryNewsSecurityWeek
- 'Djinn' Stealer Targets Cloud, AI CredentialsNewsDark Reading
- SimpleHelp and SharePoint Vulnerabilities Added to KEV with Three-Day Mitigation DeadlinesVulnerabilitySANS NewsBites
- SimpleHelp bug lets hackers create rogue remote support accountsNewsBleepingComputer
- SimpleHelp: Lücke in Fernwartungssoftware in freier Wildbahn missbrauchtNewsheise Security
ID