Share story
Security

Huntress finds exploited AhsayCBS flaws persist in latest release

Huntress finds exploited AhsayCBS flaws persist in latest release Image: Primary
Huntress said Friday that AhsayCBS 10.3.4, the latest version of the backup management platform, remains vulnerable to two flaws attackers are exploiting. Both had been reported as fixed in version 10.3.2. Attacks observed on October 7 targeted at least five organizations. Attackers chained an authentication bypass with operating system command injection to execute code, install webshells and deploy a cryptocurrency miner. AhsayCBS is typically used by managed service providers and system integrators. Until a patch is available, Huntress recommends restricting the management interface to trusted IP addresses and checking for compromise. Confirmed compromises warrant a full host restore from a safe backup because additional backdoors may remain.
Sources
BleepingComputer
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Capital
AI Capital

TypeSafe AI raises about $870 million at $7.5 billion valuation

TypeSafe AI has raised about $870 million at a $7.5 billion valuation in a financing led by Andreessen Horowitz, Bloomberg reported. The startup develops Jev, an artificial intelligence model that went viral after launching only a...

Bloomberg Technology
Products Infrastructure
Products Infrastructure

Oxide raises $445M Series D to fund inventory and manufacturing

Oxide says it has raised a $445M Series D led by Eclipse to fulfill its order backlog, accept additional demand and expand manufacturing capacity. Existing investors including USIT, Riot Ventures and Jane Street participated, whil...

oxide.computer
Capital AI
Capital AI

Kapital secures $130M financing and acquires Woz Code for $30M

Mexican financial technology company Kapital secured $130M in equity and debt financing and separately acquired US-based AI firm Woz Code for $30M, Techloy reported. The financing brings Kapital's valuation to $2B as it expands it...

Techloy
AI Science
AI Science

Nvidia commits $1B over five years to US AI research capacity

Nvidia has committed $1B over five years to expand US capacity for advanced AI research, The Register reports. The commitment covers fields including quantum computing, healthcare and energy, with the funding spread across five ye...

Techmeme
Capital
Capital

Monte Carlo Capital closes €13 million toward second venture fund

Monte Carlo Capital announced a €13 million first close for Fund II, which targets €26 million. The Monaco-based venture firm says the fund has already made five investments and that most investors in Fund I have recommitted. Fun...

EU-Startups