importantSYS.SOURCE: The Hacker News• 2026-10-15T12:13:08+05:30

AhsayCBS Vulnerabilities CVE-2026-105133 and CVE-2026-105134 Exploited for Web Shell Deployment and Cryptocurrency Mining

#vulnerability #web-shell #cryptocurrency #security-update

Singapore-based Ahsay Backup addressed two exploited vulnerabilities (CVE-2026-105133 and CVE-2026-105134) in AhsayCBS, which allowed attackers to bypass authentication and execute arbitrary commands, leading to web shell deployment and XMRig miner installation. The company released security updates to mitigate these issues after initial patches proved insufficient.

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.

The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems.

In a report published earlier

Read original article

*** END OF TRANSMISSION ***

> FINANCIAL AND RESOURCE BURDENS IN MODERN JOB ACQUISITION PROCESSES > GHOSTACTION CREDENTIAL-THEFT CAMPAIGN TARGETS 30,000 GITHUB REPOSITORIES > THE EROSION OF ACADEMIC COLLABORATION IN THE AGE OF AI > AI-DRIVEN LIFE CYCLE (AI-DLC) ADAPTIVE WORKFLOW STEERING RULES FOR AI CODING AGENTS > CRITICAL AUTHENTICATED RCE VULNERABILITY IN LANGFLOW EXPLOITED IN MULTIPLE HONEYPOT ATTACKS > AHSAYCBS VULNERABILITIES CVE-2026-105133 AND CVE-2026-105134 EXPLOITED FOR WEB SHELL DEPLOYMENT AND CRYPTOCURRENCY MINING > PALO ALTO NETWORKS ADDRESSES HIGH-SEVERITY PAN-OS RCE VULNERABILITY (CVE-2026-0322) WITH ACTIVE EXPLOITATION > FIGMA INTRODUCES MARKDOWN-BASED EDITOR AND AGENT GOVERNANCE TOOLS TO ENHANCE AI-DRIVEN DESIGN WORKFLOWS > FLIPFLOP: IROH-POWERED PERSISTENT TUNNELS FOR SECURE FILE SHARING > DOUBLE-HEADED STACK ALLOCATOR FOR MEMORY MANAGEMENT IN GAME DEVELOPMENT> FINANCIAL AND RESOURCE BURDENS IN MODERN JOB ACQUISITION PROCESSES > GHOSTACTION CREDENTIAL-THEFT CAMPAIGN TARGETS 30,000 GITHUB REPOSITORIES > THE EROSION OF ACADEMIC COLLABORATION IN THE AGE OF AI > AI-DRIVEN LIFE CYCLE (AI-DLC) ADAPTIVE WORKFLOW STEERING RULES FOR AI CODING AGENTS > CRITICAL AUTHENTICATED RCE VULNERABILITY IN LANGFLOW EXPLOITED IN MULTIPLE HONEYPOT ATTACKS > AHSAYCBS VULNERABILITIES CVE-2026-105133 AND CVE-2026-105134 EXPLOITED FOR WEB SHELL DEPLOYMENT AND CRYPTOCURRENCY MINING > PALO ALTO NETWORKS ADDRESSES HIGH-SEVERITY PAN-OS RCE VULNERABILITY (CVE-2026-0322) WITH ACTIVE EXPLOITATION > FIGMA INTRODUCES MARKDOWN-BASED EDITOR AND AGENT GOVERNANCE TOOLS TO ENHANCE AI-DRIVEN DESIGN WORKFLOWS > FLIPFLOP: IROH-POWERED PERSISTENT TUNNELS FOR SECURE FILE SHARING > DOUBLE-HEADED STACK ALLOCATOR FOR MEMORY MANAGEMENT IN GAME DEVELOPMENT