SECURITYJun 15 · 20:06 UTCBLEEPING COMPUTERBill Toulas

SimpleHelp bug lets hackers create rogue remote support accounts

A vulnerability in SimpleHelp's remote management software allows unauthenticated attackers to create privileged technician accounts via the OpenID Connect (OIDC) protocol. This security flaw enables unauthorized access to servers by hackers.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

SimpleHelporganizationOpenID Connect (OIDC)topicrogue remote support accountstopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYJun 8 · 15:51 UTC
Critical UniFi OS bug lets hackers gain root without authentication
SECURITYJun 9 · 14:27 UTC
New Veeam vulnerability exposes backup servers to RCE attacks
SECURITYMay 15 · 13:16 UTC
CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday
SECURITYMay 29 · 18:26 UTC
No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out
SECURITYMay 20 · 16:12 UTC
Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control