CISA warning of ransomware actors exploiting SimpleHelp RMM vulnerability
Event Details
CISA warns that ransomware actors are exploiting an unauthenticated path-traversal vulnerability (CVE-2024-57727) in the SimpleHelp RMM tool (versions ≤ 5.5.7) to gain initial access to utility billing software providers, enabling credential theft, lateral movement, and ransomware deployment.
Date
12/06/2025
Ransomware Group
- Other
Event Category
- Advisory / Threat awareness
Level of Cooperation
- National
Country
🇺🇸 United States
