ConciseSignal
Following
CybersecurityReported

Hackers exploit AhsayCBS flaws to install cryptominers

Attackers are exploiting two unpatched vulnerabilities in the AhsayCBS backup management platform to gain remote access to systems, install webshells, and deploy cryptocurrency miners disguised as Microsoft Edge services. At least five organizations have been targeted since October 7. The flaws, present even in the latest AhsayCBS version, involve authentication bypass and command injection, allowing attackers to chain exploits for full control.

Why it mattersBackup platforms are critical infrastructure for many organizations, and the ability to bypass authentication and execute commands puts sensitive data and operations at risk. Since the flaws remain unpatched in current software versions, affected systems are especially vulnerable to additional attacks.

Sources covering this

SecurityWeekHeadline onlyUnpatched AhsayCBS Vulnerabilities Exploited in the Wild10:23 AM →The Hacker NewsAttackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge12:47 PM →BleepingComputerUnpatched AhsayCBS flaws exploited to deploy webshells, mine crypto5:17 PM →

In this story

Concise Signal DailyEnterprise AI, security & business tech.Weekdays, 7am Eastern · Sample issue

More in Cybersecurity