The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.
"Defense contractors, financial firms, AI companies, energy innovators — they're all betting on the Palm Beaches at the same ...