Security · High impactFan score 46 · Tier B
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
The Hacker News ·
The Brief
- Attackers exploited two AhsayCBS vulnerabilities, now patched, to deliver a Python-based implant.
- Huntress observed the activity in October 2026, and the chain includes CVE-2026-105133.
Why it matters
Organisations running AhsayCBS may have been compromised through a flaw chain that installs a backdoor designed to evade sandbox analysis.
Who’s affected
- Teams running AhsayCBS
What to do
- Confirm that AhsayCBS is updated to a version that includes the patches for the two flaws.
- CVE-2026-105133
- #security
- #backdoor
- #vulnerability
- #ahsaycbs
- #malware
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and…
Timeline
Researchers disclosed the attack details
The Hacker News
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor