Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
BleepingComputer
npub1j7…v7hg2
2026-10-09 17:18:13 UTC
Author Public Key
npub1j7dz37jrwqhehe8ydzpk5kcjpnzzv53h7s54lj62nv5w9fcar34suv7hg2Seen on
wss://relay.ditto.pubPublished at
2026-10-09 17:18:13 UTCEvent JSON
{
"id": "7dbce61cb1a104a4a65ffe24e359ea3f92022a1bacb7a5bb1f35c31aa4206025",
"pubkey": "979a28fa43702f9be4e468836a5b120cc4265237f4295fcb4a9b28e2a71d1c6b",
"created_at": 1791566293,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/117412088616039473",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.\n\nhttps://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/",
"sig": "01c977490fa2de320d44106b2f5263ad9ebc9de1be96473cc87b0ebc8b57d7e248b7c238a867e3ff3fad3b4fa22244a1d871cce679b6ee3511dddce0c50f1647"
}