{"id":10264,"date":"2026-10-09T15:13:53","date_gmt":"2026-10-09T15:13:53","guid":{"rendered":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/10\/09\/attackers-exploit-ahsaycbs-flaws-to-deploy-xmrig-miners-disguised-as-microsoft-edge\/"},"modified":"2026-10-09T15:13:53","modified_gmt":"2026-10-09T15:13:53","slug":"attackers-exploit-ahsaycbs-flaws-to-deploy-xmrig-miners-disguised-as-microsoft-edge","status":"publish","type":"post","link":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/10\/09\/attackers-exploit-ahsaycbs-flaws-to-deploy-xmrig-miners-disguised-as-microsoft-edge\/","title":{"rendered":"Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge"},"content":{"rendered":"<p>\u200bThreat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners.<\/p>\n<p>Details of the flaws are below &#8211;<\/p>\n<p>  CVE-2026-105133 (CVSS v4 score: 5.5) &#8211; An improper authentication vulnerability in the checkSysPwd() function in the &#8220;com\/ahsay\/obs\/api\/ApiStructsAction.java&#8221;\u00a0Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners.<\/p>\n<p>Details of the flaws are below &#8211;<\/p>\n<p>  CVE-2026-105133 (CVSS v4 score: 5.5) &#8211; An improper authentication vulnerability in the checkSysPwd() function in the &#8220;com\/ahsay\/obs\/api\/ApiStructsAction.java&#8221;\u00a0\u00a0The Hacker News<\/p>","protected":false},"excerpt":{"rendered":"<p>\u200bThreat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below &#8211; CVE-2026-105133 (CVSS v4 score: 5.5) &#8211; An improper authentication vulnerability in the checkSysPwd() function in the &#8220;com\/ahsay\/obs\/api\/ApiStructsAction.java&#8221;\u00a0Threat actors have&hellip;&nbsp;<a href=\"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/10\/09\/attackers-exploit-ahsaycbs-flaws-to-deploy-xmrig-miners-disguised-as-microsoft-edge\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge<\/span><\/a><\/p>\n","protected":false},"author":0,"featured_media":10265,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10264"}],"collection":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/comments?post=10264"}],"version-history":[{"count":0,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10264\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media\/10265"}],"wp:attachment":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media?parent=10264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/categories?post=10264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/tags?post=10264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}