Unpatched AhsayCBS flaws exploited to deploy webshells and crypto miners

Threat actors are actively exploiting one critical and one medium-severity vulnerability in the AhsayCBS backup management platform, which remain unpatched, to deploy webshells and cryptocurrency miners. The exploitation indicates a targeted campaign against backup infrastructure, likely for persistent access and resource hijacking. The lack of patches increases risk for organizations using the platform, though the full scope of affected victims is unclear.