SimpleHelp
In 9 briefs, most recently 1 July 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
4 SimpleHelp vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 3 of them used in ransomware campaigns. Most recent:
- CVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability
- CVE-2024-57728 SimpleHelp Path Traversal Vulnerability
- CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability
- CVE-2024-57727 SimpleHelp Path Traversal Vulnerability
Coverage in DanSec Daily
- Aflac Japan breach hits 4.38M customers, Nissan PeopleSoft campaign and Nidec $2M Blackfield extortion.
- Nissan and NAIC breached via Oracle PeopleSoft flaw tied to ShinyHunters; Djinn Stealer spreads through SimpleHelp CVE-2026-48558; 236,000 Uni-App sites abused …
- ShinyHunters breaches at Council of Europe and Infinite Campus, Novo Nordisk and Tchap data theft, and exploited Cisco SD-WAN Manager flaw CVE-2026-20262.
- Trellix source code breach, DigiCert certificate revocations after a chat-channel attack, and 40,000+ servers compromised via the cPanel flaw CVE-2026-41940.
- ADT breach by ShinyHunters, UK Biobank medical data sold on Alibaba, and a Cisco Firepower Firestarter backdoor compromise.
- Conduent breach affects 25M+ people, a hijacked Outlook add-in steals Microsoft logins, and Apple and Microsoft ship major patch batches.
- Victoria's Secret outage after May 24 security incident, Apple zero-click Messages exploit by Paragon spyware, and SimpleHelp RMM flaw exploited by ransomware …
- ConnectWise ScreenConnect breach by suspected nation-state, DragonForce ransomware via SimpleHelp RMM, and Victoria's Secret site outage.
- Adidas and MathWorks breaches, the DragonForce MSP ransomware attack via SimpleHelp, and Void Blizzard's NGO phishing campaigns.