Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

A Critical Flaw in AhsayCBS Backup Management Platform Exposes Organizations to Webshell and Crypto-Mining Attacks Threat actors have been exploiting a critical vulnerability in the AhsayCBS backup management platform, which has left at least five organizations vulnerable to webshell deployment and cryptocurrency mining. The two unpatched flaws, tracked as CVE-2026-105133 and CVE-2026-105134, were discovered by … Read more

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity experts are sounding the alarm over a recent update to the P7 DarkSword iOS exploit kit, which has added two new features: the ability to steal sensitive data from popular crypto wallets and the capacity to execute remote commands on compromised devices. This development is particularly concerning given the rising trend of mobile-based cyber … Read more

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

The FBI has arrested a suspect allegedly involved in last year’s high-profile hack of ShinyHunters, a notorious cybercrime group known for its extensive collection of stolen databases and credentials. The arrest marks the latest development in the ongoing efforts to dismantle the group’s operations. ShinyHunters came under intense scrutiny after it emerged that they had … Read more

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

A sophisticated attack has been discovered, where malicious actors are exploiting vulnerabilities in AhsayCBS backup software to secretly deploy cryptocurrency mining malware on compromised systems. The attackers have been using this method to install XMRig miners disguised as Microsoft Edge updates, further compromising victim machines and draining their resources. The affected systems are running the … Read more

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

A new free AI-powered vulnerability scanner has been launched by Anthropic, a leading artificial intelligence research organization. The tool is specifically designed for open-source projects and promises to help developers identify potential security vulnerabilities before they can be exploited by hackers. The technology behind the scanner uses advanced machine learning algorithms to analyze codebases and … Read more

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

A Critical Linux Vulnerability Exposed: AnyDesk Flaw Allows Root Access In a disturbing revelation, researchers have published a working exploit for a previously unknown vulnerability in the popular remote desktop software AnyDesk, specifically targeting Linux systems. The flaw, which allows an attacker to gain root access without authentication, has left many organizations scrambling to patch … Read more

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

A new wave of lawsuits has hit TP-Link, a leading router manufacturer, with four more U.S. states joining the growing list of plaintiffs accusing the company of prioritizing profits over security and potentially colluding with Chinese authorities. The latest developments add fuel to an ongoing fire that highlights the critical need for consumers to scrutinize … Read more

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity experts have detected a worrying update to the P7 DarkSword iOS exploit kit, which has added two new features that significantly enhance its capabilities. The updated malware can now target not only user credentials but also cryptocurrency wallet data, making it an even more formidable threat for Apple device owners. Moreover, the new version … Read more

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The Flax Typhoon threat actor has been exploiting five critical vulnerabilities in various software systems, leaving federal agencies and private organizations scrambling to patch their defenses. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a deadline of October 11 for all affected federal agencies to address the security holes before they become exploited … Read more