Critical SimpleHelp flaw exploited to deploy new stealer malware

A critical vulnerability in SimpleHelp, identified as CVE-2026-48558, is being exploited by hackers to deploy a new, cross-platform information stealer known as Djinn Stealer, which targets Windows, macOS, and Linux systems¹. This previously undocumented malware, also referred to as TaskWeaver, poses a significant threat to organizations due to its ability to operate on multiple platforms. The exploitation of this flaw allows attackers to gain unauthorized access to sensitive information, highlighting the need for prompt patching and mitigation strategies. The disclosure of CVE-2026-48558 expands the active attack surface, making it essential for organizations to prioritize their response based on exposure and evidence of exploitation. This vulnerability's exploitation matters to security practitioners because it underscores the importance of proactive vulnerability management to prevent the deployment of stealthy, information-stealing malware.