Hackers have been breaking into Ahsay backup servers that face the internet, taking full control of them and hiding cryptocurrency miners disguised as Microsoft Edge. The first patch didn't stop them. Now the security company that spotted the attacks says a new hotfix, version 10.3.4.45, finally closes the way in.
Glyph · Tuesday 13 October 2026
Sources
- Huntress: Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer (8 Oct 2026, updated 12 Oct 2026)
- Ahsay: Critical Security Alert for CVE-2026-105133 and CVE-2026-105134 (10 Oct 2026)
- Ahsay: Clarification on AhsayCBS v10.3.4.0 vulnerabilities (9 Oct 2026)
- CVE Record: CVE-2026-105134
- Tenable CVE mirror: CVE-2026-105133
- Tenable CVE mirror: CVE-2026-105134
- VulDB: CVE-2026-105133
- VulDB: CVE-2026-105134
- AhsayCBS (DIY) v10.3.4 Release Notes (05-Aug-2026)
- The Hacker News: Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge (9 Oct 2026)
- Cybersecurity Under Pressure: AhsayCBS Vendor Corrects Patch Guidance (10–11 Oct 2026)
This desk has not corrected this file. Corrections.






The paper
Comments
No notes on this story yet.
Sign in to comment