The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two

Malware & Threats Vulnerabilities & Zero-Day Programming & Languages Identity & Access Security

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۴۷

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]

Vulnerabilities & Zero-Day Identity & Access Security

Source

Help Net Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۴۵

X.Org patches eight server vulnerabilities a month after fixing 12 others

X.Org has fixed eight vulnerabilities in the X.Org X server and Xwayland, including one in the Xorg server that lets a malicious monitor corrupt its memory. The fixes ship in xorg-server 21.1.26 and xwayland 24.1.15, and each of the eight affects versions before those two releases. The X server provides the low-level display layer for graphical desktops on many Linux and Unix systems. Xwayland runs X11 applications o…

Vulnerabilities & Zero-Day Operating Systems

Source

eSecurityPlanet سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Japan Unveils Cybersecurity Package to Combat AI-Assisted Attacks

Japan announces a $63 million cybersecurity package featuring an AI-powered vulnerability testing team, stronger threat intelligence, and faster incident response.

Vulnerabilities & Zero-Day Threat Intelligence Incident Response & Forensics

Source

eSecurityPlanet سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Google Working on Update to Keep Chrome Incognito and Guest Mode Safer

Google is developing real-time Safe Browsing checks for Chrome Incognito and Guest modes to improve protection against newly discovered phishing and malware sites.

Malware & Threats Phishing

Source