SECURITYJun 30 · 11:18 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-48558) in SimpleHelp to deploy two new malware families, TaskWeaver and Djinn Stealer. The vulnerability impacts the OpenID Connect (OIDC) flow, allowing unauthenticated access.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

SimpleHelporganizationCVE-2026-48558topicTaskWeavertopicDjinn StealertopicOpenID Connecttopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 30 · 22:48 UTC
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
SECURITYMay 30 · 06:41 UTC
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
SECURITYMay 30 · 18:02 UTC
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
SECURITYMay 15 · 05:28 UTC
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
SECURITYMay 23 · 07:35 UTC
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root