Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant.
The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two
SOURCE:
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations,
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of