Threats Tagged 'ahsaycbs'

AhsayCBS backup utility versions up to 10.3.4 contain a vulnerability (CVE-2026-105133) that allows unauthenticated remote code execution. Exploitation involves chaining two critical vulnerabilities to bypass authentication and execute code with SYSTEM privileges. Attackers have deployed webshells, cryptocurrency miners disguised as legitimate processes, and persistence mechanisms including fake Windows services and kernel driver exploitation. Managed service providers are primarily targeted.