Skip to main content

Share story

Security

Ahsay issues new hotfixes after exploited backup flaws survived patches

Ahsay issues new hotfixes after exploited backup flaws survived patches Image: Primary
Ahsay Backup has released new AhsayCBS hotfixes after confirming that August patches incompletely addressed two vulnerabilities exploited to install web shells and XMRig cryptocurrency miners. Attackers chained CVE-2026-105133 and CVE-2026-105134 to bypass authentication and run arbitrary commands on exposed systems, according to Huntress. The new fixes are AhsayCBS v10.3.4.45 and v9.15.2.70. Huntress independently verified that the v10.3.4.45 hotfix mitigates the attack chain's initial entry point, which remained vulnerable in previous v10 versions. Ahsay instructs customers to reboot after applying the hotfix. CISA has added both flaws to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by October 17, 2026.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security AI
Security AI

Langflow flaw draws 1,423 exploit attempts against honeypots

Attackers have made 1,423 exploitation attempts against Previdian's honeypots targeting a critical Langflow vulnerability, The Hacker News reported. The flaw, CVE-2026-105740, affects versions before 1.9.0 and lets authenticated u...

Robotics Capital
Robotics Capital

120ft raises €576,000 for proposed robot-operated microfactories

Stockholm startup 120ft has raised €576,000 from 22 angel investors to develop autonomous microfactories staffed by humanoid robots, Unite.AI reported. The funding supports software and factory infrastructure development as the co...

Products AI
Products AI

Figma opens code layers beta and begins Specs and Payload rollouts

Figma said it is rolling out code layers in open beta on all plans, letting teams bring working code onto its design canvas. Specs, a Markdown editor that links shared decisions to designs, diagrams and code layers, is also beginn...

AI Products
AI Products

Tottenham deploys multilingual Ask Spurs support agent

Tottenham Hotspur has deployed Ask Spurs, an AI support agent on its website and club app, Salesforce announced. Built on Agentforce, it answers questions about tickets, memberships, retail and stadium events in eleven languages f...