Attackers are taking advantage of two vulnerabilities in the AhsayCBS backup management platform—one critical and one medium-severity—that remain unpatched. These flaws allow them to deploy webshells, which can provide unauthorized access to systems, and to install cryptocurrency miners that exploit system resources for profit. Organizations using AhsayCBS are at risk, as these vulnerabilities can lead to significant data breaches and financial losses. It's crucial for affected users to address these issues promptly to safeguard their systems and data. The ongoing exploitation of these vulnerabilities emphasizes the need for timely software updates and rigorous security practices.