> TritonInfoSec News
Home / Jul 01, 2026 / Story
0
#2 The Hacker News general June 30, 2026 at 11:18 UTC

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

By [email protected] (The Hacker News)

AI Summary

An unknown threat actor is exploiting CVE-2026-48558 (CVSS 10.0), a critical authentication bypass in SimpleHelp's OIDC flow, to deploy two previously undocumented malware families: TaskWeaver and the Djinn Stealer, which targets cloud, AI, SSH keys, and cryptocurrency wallet credentials. The CVSS-perfect score and focus on developer/admin credential theft make this a high-priority patch for any organization running SimpleHelp remote access software.

Read full article → https://thehackernews.com/2026/06/attackers-exploi…

Relevance score: 86.0/100

# More from July 01

  1. 1
    CISA: Windows BlueHammer flaw now exploited by ransomware gangs BleepingComputer
  2. 3
    Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild The Hacker News
  3. 4
    Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs The Hacker News
  4. 5
    US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp The Record
  5. 6
    Aflac Japan Data Breach Impacts 4.38 Million SecurityWeek
  6. 7
    Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History SecurityWeek
  7. 8
    New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials The Hacker News
  8. 9
    Nissan Employee Data Breached in Oracle PeopleSoft Hack SecurityWeek
  9. 10
    GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks The Hacker News