{"uuid": "21415cb4-46d8-4a7e-a7b9-0d18f1b1cf8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/pphm_HackerNews/1704", "content": "\ud83d\udd34 Critical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.\n\nThe SimpleHelp platform is primarily used by managed service providers (MSPs), IT departments, helpdesks, and system administrators for remote monitoring and management (RMM).\n\nEarlier this month, offensive security company Horizon3.ai published details about CVE-2026-48558, saying that the flaw could be leveraged to create highly privileged technician accounts without authentication.", "creation_timestamp": "2026-08-21T23:00:11.287913Z"}