Unpatched AhsayCBS flaws exploited to deploy webshells and crypto miners

Threat actors are actively exploiting two unpatched vulnerabilities, one critical and one medium-severity, within the AhsayCBS backup management platform. The flaws are being leveraged to deploy persistent webshells and cryptocurrency miners. Administrators should immediately restrict network access to vulnerable instances until an official vendor patch is released.