Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
BleepingComputer
X / Twitter 268/280
π οΈ Heads up, admins: Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells andβ¦
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
π Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
A vulnerability worth acting on today π
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...]
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
π Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
A vulnerability worth acting on today π
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said. The vulnerability
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
π Source (The Hacker News): https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html
ALSO WORTH SHARING #2
Max severity SonicWall SMA1000 flaw now exploited in attacks
BleepingComputer
X / Twitter 258/280
π¨ Actively exploited: Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/
π Max severity SonicWall SMA1000 flaw now exploited in attacks
A vulnerability worth acting on today π
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).