Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
BleepingComputer
X / Twitter 276/280
β οΈ Patch now: Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrencyβ¦
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/
π Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
A vulnerability worth acting on today π
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...]
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
Max severity SonicWall SMA1000 flaw now exploited in attacks
BleepingComputer
X / Twitter 254/280
π¨ Zero-day alert: Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/
π Max severity SonicWall SMA1000 flaw now exploited in attacks
A vulnerability worth acting on today π
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The Hacker News
X / Twitter 191/280
π οΈ Heads up, admins: Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html
π Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
A vulnerability worth acting on today π
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
π Source (The Hacker News): https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html