CISA Warns of Ransomware Exploiting Unpatched SimpleHelp RMM Vulnerabilities

The Cybersecurity & Infrastructure Security Agency (CISA) has issued an advisory regarding ransomware actors actively exploiting unpatched vulnerabilities in SimpleHelp Remote Monitoring and Management (RMM) software. These attacks have targeted customers of a utility billing software provider, with the exploitation of SimpleHelp versions 5.5.7 and earlier, including a path traversal vulnerability identified as CVE-2024-57727.