AhsayCBS
No CISA KEV deadline is open. CISA last added a AhsayCBS CVE on 14 Oct.
Tracked since 9 Oct · latest article Mon 19 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
9 articles from 5 outlets since 9 Oct; the latest 7 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 19 Oct · 01:44 UTC | SecurityOnline | Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin |
| Thu 15 Oct · 20:01 UTC | Security Affairs | CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws |
| Thu 15 Oct · 09:26 UTC | The Hacker News | Ahsay Backup fixes exploited flaws after patches failed to stop attackers |
| Wed 14 Oct · 19:33 UTC | CISA | CISA Warns of Attacks Exploiting AhsayCBS Authentication Flaw |
| Wed 14 Oct · 19:32 UTC | CISA | CISA Warns of Active Attacks on Critical AhsayCBS Flaw |
| Mon 12 Oct · 04:02 UTC | SecurityOnline | Six Actively Exploited Flaws Remain Outside CISA’s KEV Catalog |
| Fri 9 Oct · 14:36 UTC | The Hacker News | Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto Miners |
| Fri 9 Oct · 10:29 UTC | SecurityWeek | Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto Miners |
| Fri 9 Oct · 04:38 UTC | SecurityOnline | Hackers Exploit AhsayCBS Flaws to Gain SYSTEM Access and Deploy Miners |
Who reported 5 outlets, last 12 months
- SecurityOnline3
- The Hacker News2
- CISA2
- SecurityWeek1
- Security Affairs1
- Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress PluginSecurityOnline
- CISA Flags Exploited Firewall, Email Gateway and Backup Software FlawsSecurity Affairs
- Ahsay Backup fixes exploited flaws after patches failed to stop attackersThe Hacker News
- CISA Warns of Attacks Exploiting AhsayCBS Authentication FlawCISA · official notice
- CISA Warns of Active Attacks on Critical AhsayCBS FlawCISA · official notice
- Six Actively Exploited Flaws Remain Outside CISA’s KEV CatalogSecurityOnline
- Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto MinersThe Hacker News
- Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto MinersSecurityWeek
- Hackers Exploit AhsayCBS Flaws to Gain SYSTEM Access and Deploy MinersSecurityOnline
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.