Critical SimpleHelp flaw exploited to deploy new stealer malware

Attackers are exploiting the critical SimpleHelp vulnerability CVE-2026-48558 to deploy the newly documented malware TaskWeaver and Djinn Stealer. SimpleHelp is used by managed service providers, IT departments, helpdesks, and system administrators.