CVE-2026-105134

AhsayCBS CVE-2026-105133 / 105134: Huntress Exploitation and CISA KEV

Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp

admin1 day ago07 mins

Exploitation since October 7, hotfixes that actually close the door, KEV on October 14. Hunt MicrosoftEdgeUpdateSvc and rebuild dirty boxes.

Read Full News

News

Your MSP’s Backup Console Got Rooted and the Patch Does Nothing

admin4 days ago4 days ago05 mins

AhsayCBS backup consoles are getting rooted by a no-creds exploit chain, and the version Ahsay shipped as the fix closes neither flaw. The call is coming from inside the MSP.

Read Full News

GitHub Security Lab Shipped gh-secure So You Can Stop Shipping Open Source Naked

That ClickFix Paste Just Installed Variola, Not a “Fix”

Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It

Hunt SAWFLY and BARECLAW on BeyondTrust After CVE-2026-102764

BeyondTrust Remote Support Just Got Rooted by the People It Was Meant to Keep Out

Data Centers Are War Targets Now and Dual-Use Is the Whole Punchline

GitHub Made AI Scan for Pull Requests Generally Available and It Still Will Not Fail Your Check

The FBI Says Midterm Season Is Open Season on Your Wallet and Your Voter File

Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp

Atlassian Just Handed Strangers Your WEB-INF and CISA Put It on the Calendar

Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp

Your MSP’s Backup Console Got Rooted and the Patch Does Nothing