Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

Cybercriminals are actively exploiting a vulnerability in SimpleHelp remote access software, identified as CVE-2026-48558, to deploy malicious tools including TaskWeaver and the Djinn Stealer credential-stealing malware. The attacks demonstrate how threat actors are quickly weaponizing newly discovered software vulnerabilities to gain unauthorized access to systems and steal sensitive data. Organizations using SimpleHelp are urged to patch immediately and monitor for signs of compromise.