SecurityThe Hacker Newsabout 2 hours ago
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
1 min read
Attackers exploit CVE-2026-48558, a maximum-severity authentication bypass in SimpleHelp, to deploy TaskWeaver and Djinn Stealer. TaskWeaver is an obfuscated Node.js loader. Djinn Stealer harvests credentials from cloud platforms, source control, browsers, and cryptocurrency wallets across Windows, macOS, and Linux.
Level
Hype check
Tap to vote and see what everyone thinks.
