Misconfigured Server Exposes Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing…
Tag: SimpleHelp
SimpleHelp CVE-2026-48558 Exploited to Deploy TaskWeaver and Djinn Stealer Malware
An unknown threat actor is exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp (CVSS 10.0), to deliver two new malware families:…
CVE-2026-48558 — SimpleHelp Authentication Bypass Vulnerability
SimpleHelp Authentication Bypass Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on…
SimpleHelp: Remote Monitoring and Management Software
SimpleHelp is an RMM software affected by CVE-2026-48558, a critical authentication bypass vulnerability exploited to deploy malware.
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC from a nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups…
CVE-2024-57727: SimpleHelp Vulnerability
A vulnerability in SimpleHelp used by INC ransomware for initial access.
SimpleHelp: Remote Support Tool Used Alongside Evilginx
SimpleHelp is a remote support tool that was found running on the same server as the Evilginx proxy, used by the operator…
CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability
SimpleHelp Path Traversal Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the…
CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability
SimpleHelp Missing Authorization Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the…