Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

4 / 4 results
Active filter:tag: #backup-and-recovery✕ clear
Ahsay backup platform under active attack via unpatched flawshighbug_reportVulnerability
bug_reportVulnerability

Ahsay backup platform under active attack via unpatched flaws

AhsayCBS backup management platform. Specific affected versions not disclosed in available data. Vulnerabilities include one critical and one medium-severity flaw, both currently unpatched.

Ahsay9 Oct · 15:17 UTC
AhsayCBS backup flaws exploited to deploy XMRig miners and web shellshighbug_reportVulnerability
bug_reportVulnerability

AhsayCBS backup flaws exploited to deploy XMRig miners and web shells

Ahsay AhsayCBS backup utility, all versions including the latest 10.3.4. Two vulnerabilities: CVE-2026-105133 (CVSS v4 5.5, improper authentication) and CVE-2026-105134 (CVSS v4 9.3, OS command injection).

CVE-2026-1051339 Oct · 10:47 UTC
Veeam ONE authentication bypass requires immediate patchingcriticalbug_reportVulnerability
bug_reportVulnerability

Veeam ONE authentication bypass requires immediate patching

Veeam ONE backup management platform. Specific affected versions not disclosed in available information. Authentication bypass vulnerability allows unauthorized access.

Veeam27 Aug · 12:51 UTC
Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bugcriticalbug_reportVulnerability
bug_reportVulnerability

Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bug

HashiCorp Terraform MCP Server versions 0.2.1–1.0.0 (Streamable HTTP mode only); Veeam Service Provider Console versions 9.2.1.33875 and earlier (all version 9 builds before 9.3); Django versions prior to 6.0.8 and 5.2.17 (GeoDjango spatial field con…

HashiCorp5 Aug · 12:27 UTC