Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

A BleepingComputer security news feed covering active exploitation of critical vulnerabilities, ransomware and cybercrime activity, malware campaigns, supply-chain and embedded malware risks, state-sponsored attacks, and urgent vendor patch advisories. Notable items include exploitation of AhsayCBS flaws to deploy webshells and cryptocurrency miners, active exploitation of a maximum-severity SonicWall SMA1000 vulnerability (CVE-2026-102255), a critical NetScaler RCE, critical Cisco NX-OS flaws enabling Nexus switch takeover, ransomware disruption of Japan’s IDCF Cloud, and malware distributed{