SimpleHelp Flaw Exploited to Deploy New TaskWeaver and Djinn Stealer Malware

Attackers are exploiting CVE-2026-48558, a critical authentication bypass in SimpleHelp with a CVSS score of 10.0, to deliver two new malware families: TaskWeaver and Djinn Stealer. The flaw allows unauthenticated attackers to compromise systems. The campaign targets organizations using SimpleHelp's remote support software.