πŸ›‘οΈ Kasspar Cyber Daily

Sunday, 11 October 2026 β€” review, tweak if you like, then post.

TODAY'S TOP STORY
headline card

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

BleepingComputer

X / Twitter 276/280
⚠️ Patch now: Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency…
Patch fast β€” attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
LinkedIn
πŸ” Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

A vulnerability worth acting on today πŸ‘‡

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...]

⚑ Why it matters: Patch affected systems promptly and confirm the fix actually applied.

Are your systems covered? What's your team doing about this? πŸ’¬

#CyberSecurity #InfoSec #VulnManagement #PatchNow

βœ… Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).

πŸ”— Source (BleepingComputer): https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
ALSO WORTH SHARING #1
headline card

Max severity SonicWall SMA1000 flaw now exploited in attacks

BleepingComputer

X / Twitter 254/280
🚨 Zero-day alert: Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
Patch fast β€” attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/
LinkedIn
πŸ” Max severity SonicWall SMA1000 flaw now exploited in attacks

A vulnerability worth acting on today πŸ‘‡

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]

⚑ Why it matters: Patch affected systems promptly and confirm the fix actually applied.

Are your systems covered? What's your team doing about this? πŸ’¬

#CyberSecurity #InfoSec #VulnManagement #PatchNow

βœ… Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).

πŸ”— Source (BleepingComputer): https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/
ALSO WORTH SHARING #2
headline card

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The Hacker News

X / Twitter 191/280
πŸ› οΈ Heads up, admins: Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
Patch fast β€” attackers already are.
#CyberSecurity #InfoSec
https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html
LinkedIn
πŸ” Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

A vulnerability worth acting on today πŸ‘‡

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow

⚑ Why it matters: Patch affected systems promptly and confirm the fix actually applied.

Are your systems covered? What's your team doing about this? πŸ’¬

#CyberSecurity #InfoSec #VulnManagement #PatchNow

βœ… Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).

πŸ”— Source (The Hacker News): https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html