Security1 hOctober 13, 2026, 22:10

Hackers turn AhsayCBS backup servers into Monero miners via critical flaws

Attackers are exploiting two AhsayCBS backup software flaws, including a critical unauthenticated RCE (CVE-2026-105134), to deploy webshells and XMRig cryptominers disguised as Microsoft Edge. At least five organizations were hit as of October 8; all versions up to 10.3.4 are affected.

TechRadar

Open source

Hackers turn AhsayCBS backup servers into Monero miners via critical flaws

Critical CVE-2026-105134 allows unauthenticated RCE as NT AUTHORITY/SYSTEM
Flaws disclosed October 4, exploitation began three days later
XMRig disguised as Edge and killed when Task Manager opens
All AhsayCBS versions through 10.3.4 are impacted

#AhsayCBS#XMRig#Monero

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

Policy

EU and Canada to unveil critical minerals deal at Montreal summit

Science

Brimstone pitches cleaner cement plus critical minerals from one rock

Policy

Hackers turn AhsayCBS backup servers into Monero miners via critical flaws

Hackers Exploit Two Unpatched AhsayCBS Vulnerabilities in the Wild

EU and Canada to unveil critical minerals deal at Montreal summit

Brimstone pitches cleaner cement plus critical minerals from one rock

U.S. Invests $29.5 Million To Develop Critical Minerals Technology