SecurityBleepingComputerabout 2 hours ago
Unpatched AhsayCBS Flaws Exploited for Crypto
2 min read
Threat actors exploited unpatched AhsayCBS flaws on October 7 to target at least five organizations. The attackers chained CVE-2026-105133 and CVE-2026-105134 to deploy webshells and XMRig miners. Huntress found the issues affect version 10.3.4, while AhsayCBS 10.3.2 is fixed. A PowerShell script stops Task Manager at 6 p.m. to hide activity.
Level
Hype check
Tap to vote and see what everyone thinks.
