A critical flaw in self-hosted appliances enables unauthenticated attackers to gain root control and access stored credentials, prompting urgent patching.
Threat actors are exploiting two unpatched flaws in Ahsay Cloud Backup Server to gain SYSTEM-level control without credentials, deploying miners and web shells.