vulnerabilities - Tech Verg

Unpatched AhsayCBS vulnerabilities are being exploited in the wild

October 11, 2026 by Tech Verg

Hackers have exploited two unpatched vulnerabilities in the AhsayCBS remote code execution (RCE) backup solution, cybersecurity firm Huntress warns. AhsayCBS is a centralized cloud backup server management console developed by Ahsay Systems. It offers backup policies, storage and user management and is popular with MSPs and system integrators. Tracked as CVE-2026-105133 And CVE-2026-105134The exploited vulnerabilities … Read more

Unpatched AhsayCBS vulnerabilities are exploited to deploy webshells and mine cryptocurrencies

November 1, 2026October 9, 2026 by Tech Verg

Threat actors are exploiting a critical and a medium-severity vulnerability that remain unpatched in the backup management platform AhsayCBS to deploy webshells and cryptocurrency miners. AhsayCBS is typically used by managed service providers (MSPs) and system integrators. The malicious activity was observed on October 7 and targeted at least five organizations. The two security issues … Read more

Cisco fixes a dozen critical security vulnerabilities

October 9, 2026 by Tech Verg

Cisco on Wednesday announced patches for 35 vulnerabilities in its products, including more than a dozen critical-severity bugs. A new security hardening release from Meraki fixes several bugs grouped into seven CVEs depending on the type of underlying vulnerability. The most serious of these is CVE-2026-76464, which covers memory issues such as buffer overflows and … Read more

Fortra fixes critical vulnerabilities in BoKS

October 4, 2026 by Tech Verg

Fortra has released patches for eight vulnerabilities in the Core Privileged Access Manager (BoKS), including three critical severity bugs. BoKS provides organizations with centralized management of Unix and Linux fleets, enabling policy enforcement and cross-account access control. On Thursday, the company warned that BoKS Manager deployments that rely on BoKS Keytab for managing Active Directory … Read more

Fixed high-level security vulnerabilities in OpenSSL and WolfSSL

September 30, 2026 by Tech Verg

The developers of the open source cryptography libraries OpenSSL and WolfSSL announced patches for around a dozen vulnerabilities each, including high-severity vulnerabilities. Of the Fixed 14 vulnerabilities in OpenSSLone was assigned a high severity level. Tracked as CVE-2026-84782, it could allow a remote peer to obtain fragments of heap memory or crash applications that use … Read more