SecurityThe Hacker Newsabout 1 hour ago
Hackers Exploit AhsayCBS Flaws for Backdoor
3 min read
Huntress researchers observed in October 2026 that attackers exploited two patched AhsayCBS vulnerabilities to deploy a sandbox-evasive Python backdoor. The threat actor targeted backup servers, installing five families of JSP web shells and running two XMRig miners. Patches were released by Ahsay Backup in mid-October 2026, but the intrusion included credential theft from a related Veeam server.
Level
Hype check
Tap to vote and see what everyone thinks.
