The problem with set-and-forget devices is that you can set them up and then forget about them. This is good in terms of remembering it, but people sometimes forget that their device needs regular updates to stay secure. That’s what’s happening with Plex as hackers distribute Plex2Shell to devices that haven’t been updated since August. … Read more
Hackers have exploited two unpatched vulnerabilities in the AhsayCBS remote code execution (RCE) backup solution, cybersecurity firm Huntress warns. AhsayCBS is a centralized cloud backup server management console developed by Ahsay Systems. It offers backup policies, storage and user management and is popular with MSPs and system integrators. Tracked as CVE-2026-105133 And CVE-2026-105134The exploited vulnerabilities … Read more
Threat actors are exploiting a critical and a medium-severity vulnerability that remain unpatched in the backup management platform AhsayCBS to deploy webshells and cryptocurrency miners. AhsayCBS is typically used by managed service providers (MSPs) and system integrators. The malicious activity was observed on October 7 and targeted at least five organizations. The two security issues … Read more