> TritonInfoSec News
Home / Oct 10, 2026 / Story
0
#6 The Hacker News general October 09, 2026 at 12:47 UTC

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

By [email protected] (The Hacker News)

AI Summary

Threat actors are actively exploiting two unpatched flaws in AhsayCBS backup management software — CVE-2026-105133 (CVSS v4 5.5, improper authentication in checkSysPwd()) and CVE-2026-105134 (OS command injection) — to deploy webshells and XMRig cryptocurrency miners disguised as Microsoft Edge. Backup infrastructure is a high-value target since compromise can undermine disaster recovery capabilities; administrators running AhsayCBS should isolate affected systems pending vendor patches.

Read full article → https://thehackernews.com/2026/10/attackers-exploi…

Relevance score: 82.0/100

# More from October 10

  1. 1
    FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions The Hacker News
  2. 2
    Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies The Hacker News
  3. 3
    Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland BleepingComputer
  4. 4
    Max severity SonicWall SMA1000 flaw now exploited in attacks BleepingComputer
  5. 5
    Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments The Hacker News
  6. 7
    FBI arrests another suspected ShinyHunters hacker after agency breach BleepingComputer
  7. 8
    Low-cost Android phones ship with residential proxy malware BleepingComputer
  8. 9
    Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access The Hacker News
  9. 10
    $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack Graham Cluley