Critical SimpleHelp Flaw Actively Exploited to Deploy TaskWeaver Loader and Djinn Stealer
RedSide Security June 30, 2026 Cybersecurity 4 views
Threat actors are actively exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp RMM software, to deploy the TaskWeaver loader and Djinn Stealer. The malware targets cloud credentials, developer tools, AI platforms, cryptocurrency wallets, and enterprise infrastructure across Windows, macOS, and Linux systems.
Cybersecurity
Linux Security
Threat Intelligence
Authentication Bypass
AI Security
SimpleHelp
CVE-2026-48558
RMM Security
Remote Monitoring and Management
TaskWeaver
Djinn Stealer
Malware
Information Stealer
CISA KEV
OpenID Connect
OIDC
Azure AD
Cloud Security
AWS
Microsoft Azure
Google Cloud
DevOps Security
OpenAI
Anthropic Claude
Cryptocurrency Theft
Windows Security
macOS Security
Continue reading: Critical SimpleHelp Flaw Actively Exploited to Dep…