DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider's MSP SimpleHelp remote monitoring and management RMM tool, and then leveraged it to exfiltrate data and drop the locker on multiple endpoints. It's believed that the attackers exploited a tri...

CVE-2024-57726

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role...

CVE-2024-57726

creationtimestamp| type| source ---|---|--- 2025-01-15 07:04:46+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lfr77ikywk22 2025-01-15 13:18:05+00:00| seen| https://t.me/truesecator/6621 2025-01-15 17:18:02+00:00| seen| https://bsky.app/profile/tmjintel.bsky.social/post/3lfsbi3fw5c25...