#dragonforce

Analysis · May 10, 2026 · Colten Anderson

SimpleHelp CVE-2024-57727: a seven-day patch and a sixteen-month leak

SimpleHelp shipped a fix in seven days from full disclosure. Then they posted it to a forum. Ransomware affiliates have been pulling hashed admin credentials out of unpatched servers ever since.