The Hacker News4h agoenergy 104

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

image: The Hacker News

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two

read the original at The Hacker News →
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.