Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

The Hacker News · Friday, 9 October 2026 at 12:47 (3h ago) · Original article ↗

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners.

CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Germany arrests alleged core Qilin ransomware member after extradition

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. [...]

BleepingComputer 24m ago

Security

How to keep AI agents within their permissions

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. [...]

BleepingComputer 2h ago

Security

Surveillance company Flock cuts staff as privacy backlash grows

Flock would not say if CEO Garrett Langley would take a pay cut following the reduction in workforce.

TechCrunch 2h ago

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

More Security & Privacy

Germany arrests alleged core Qilin ransomware member after extradition

How to keep AI agents within their permissions

Surveillance company Flock cuts staff as privacy backlash grows