If you're running a SimpleHelp server, it's patch-o'clock. Also maybe incident-response-o'clock.
(It's always incident-response-o'clock somewhere)
https://discourse.ifin.network/t/stealers-exploit-cve-2026-in-simplehelp-attack/629
#ThreatIntel #ThreatIntelligence #IFIN
IFIN - The Independent Federated Intelligence Network
npub1qm…nh363
2026-06-30 18:50:28 UTC
Author Public Key
npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363Seen on
wss://relay.momostr.pinkPublished at
2026-06-30 18:50:28 UTCEvent JSON
{
"id": "ccbd496e199bab985b0b3db506f66a44f6c5176515008f4ae7180d2800063cee",
"pubkey": "06eab22dbb1f669b7c8ec534a0f9011c3cf56c56c57900334b3cbb16c6afcb03",
"created_at": 1782845428,
"kind": 1,
"tags": [
[
"t",
"threatintelligence"
],
[
"t",
"ifin"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://infosec.exchange/@ifin/116840557993309656",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/115741367687413652/statuses/116840557993309656",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/115741367687413652/statuses/116840557993309656",
"pink.momostr"
],
[
"-"
]
],
"content": "If you're running a SimpleHelp server, it's patch-o'clock. Also maybe incident-response-o'clock. \n\n(It's always incident-response-o'clock somewhere)\n\nhttps://discourse.ifin.network/t/stealers-exploit-cve-2026-in-simplehelp-attack/629\n\n#ThreatIntel #ThreatIntelligence #IFIN",
"sig": "dff205df8711377cc611aadb253e78dad126b6a4cd385b79e5805f508ccb9e1aa5bc60c4bb2e63155f965177d0392da77d1f053cfb4e1b0e90157bc11f5876a9"
}